Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2021:2354-1
HistoryJul 15, 2021 - 12:00 a.m.

Security update for nodejs14 (important)

2021-07-1500:00:00
lists.opensuse.org
22
nodejs14
security update
vulnerabilities
libuv upgrade
regular expression denial of service
prototype pollution
opensuse leap 15.3
patch instructions
suse recommended installation methods

EPSS

0.338

Percentile

97.1%

JSON

An update that fixes four vulnerabilities is now available.

Description:

This update for nodejs14 fixes the following issues:

Update nodejs14 to 14.17.2.

Including fixes for:

  • CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973)
  • CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976)
  • CVE-2021-23362: hosted-git-info Regular Expression Denial of Service
    (bsc#1187977)
  • CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2021-2354=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm

Related

nessus 44
openvas 25
suse 7
archlinux 4
almalinux 3
rocky 3
oraclelinux 4
osv 18
redhat 7
mageia 2
ibm 27
freebsd 1
nodejsblog 2
redhatcve 4
ubuntucve 4
cve 4
github 3
photon 2
prion 4
debiancve 4
veracode 4
hackerone 1
ubuntu 2
nodejs 2
nvd 4
cvelist 4
amazon 1
altlinux 2
debian 1
alpinelinux 3
cbl_mariner 1
gentoo 1
huntr 1
nessus
nessus
SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2021:2319-1)
2021-07-15 00:00:00
SUSE SLES15 Security Update : nodejs14 (SUSE-SU-2021:2354-1)
2021-07-16 00:00:00
openSUSE 15 Security Update : nodejs14 (openSUSE-SU-2021:2354-1)
2021-07-16 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:2354-1)
2021-07-16 00:00:00
openSUSE: Security Advisory for nodejs14 (openSUSE-SU-2021:1060-1)
2021-07-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2319-1)
2021-07-15 00:00:00
suse
suse
Security update for nodejs14 (important)
2021-07-20 00:00:00
Security update for nodejs8 (important)
2021-08-10 00:00:00
Security update for nodejs8 (important)
2021-08-05 00:00:00
archlinux
archlinux
[ASA-202107-13] nodejs: multiple issues
2021-07-06 00:00:00
[ASA-202107-33] nodejs-lts-erbium: multiple issues
2021-07-20 00:00:00
[ASA-202107-32] nodejs-lts-fermium: multiple issues
2021-07-20 00:00:00
almalinux
almalinux
Moderate: nodejs:14 security, bug fix, and enhancement update
2021-08-10 12:00:51
Moderate: nodejs:12 security, bug fix, and enhancement update
2021-08-10 12:00:47
Low: libuv security update
2021-08-10 12:00:55
rocky
rocky
nodejs:12 security, bug fix, and enhancement update
2021-08-10 12:00:47
nodejs:14 security, bug fix, and enhancement update
2021-08-10 12:00:51
libuv security update
2021-08-10 12:00:55
oraclelinux
oraclelinux
nodejs:12 security, bug fix, and enhancement update
2021-08-12 00:00:00
nodejs:14 security, bug fix, and enhancement update
2021-08-12 00:00:00
libuv security update
2021-08-11 00:00:00
osv
osv
Moderate: nodejs:12 security, bug fix, and enhancement update
2021-08-10 12:00:47
Moderate: nodejs:14 security, bug fix, and enhancement update
2021-08-10 12:00:51
Moderate: nodejs:14 security, bug fix, and enhancement update
2021-08-10 12:00:51
redhat
redhat
(RHSA-2021:3073) Moderate: nodejs:12 security, bug fix, and enhancement update
2021-08-10 12:00:47
(RHSA-2021:3074) Moderate: nodejs:14 security, bug fix, and enhancement update
2021-08-10 12:00:51
(RHSA-2021:2931) Moderate: rh-nodejs12-nodejs and rh-nodejs12-nodejs-nodemon security update
2021-07-28 07:39:24
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2021-07-25 17:45:06
Updated libuv packages fix security vulnerability
2021-07-20 13:46:47
ibm
ibm
Security Bulletin: Vulnerability in Node.js-CVE-2021-23362, CVE-2021-22921, CVE-2021-22918, CVE-2021-27290 may affect IBM Watson Assistant for IBM Cloud Pak for Data.
2022-02-25 20:30:59
Security Bulletin: Multiple vulnerabilities affect IBM Rational® Application Developer for WebSphere® Software - September 2021
2021-09-30 15:00:34
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Node.js (CVE-2021-23362, CVE-2021-22918)
2022-04-22 14:12:52
freebsd
freebsd
Node.js -- July 2021 Security Releases
2021-07-01 00:00:00
nodejsblog
nodejsblog
July 2021 Security Releases
2021-07-01 00:00:00
April 2021 Security Releases
2021-04-06 00:00:00
redhatcve
redhatcve
CVE-2021-23362
2021-03-25 15:23:08
CVE-2021-22918
2021-07-06 15:17:41
CVE-2021-27290
2021-03-22 08:58:41
ubuntucve
ubuntucve
CVE-2021-23362
2021-03-23 00:00:00
CVE-2021-27290
2021-03-12 00:00:00
CVE-2021-22918
2021-07-02 00:00:00
cve
cve
CVE-2021-23362
2021-03-23 17:15:14
CVE-2021-27290
2021-03-12 22:15:14
CVE-2021-22918
2021-07-12 11:15:07
github
github
Regular Expression Denial of Service in hosted-git-info
2021-05-06 16:10:39
Regular Expression Denial of Service (ReDoS)
2021-03-19 21:24:36
Prototype Pollution in y18n
2021-03-29 16:05:12
photon
photon
Important Photon OS Security Update - PHSA-2021-0074
2021-08-02 00:00:00
Moderate Photon OS Security Update - PHSA-2021-4.0-0074
2021-08-02 00:00:00
prion
prion
Design/Logic Flaw
2021-03-12 22:15:00
Design/Logic Flaw
2021-03-23 17:15:00
Out-of-bounds
2021-07-12 11:15:00
debiancve
debiancve
CVE-2021-27290
2021-03-12 22:15:14
CVE-2021-22918
2021-07-12 11:15:07
CVE-2021-23362
2021-03-23 17:15:14
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-03-24 04:03:06
Information Disclosure
2021-07-10 13:46:13
Regular Expression Denial Of Service (ReDoS)
2021-03-15 01:24:07
hackerone
hackerone
Node.js: OOB read in libuv
2021-05-26 06:22:37
ubuntu
ubuntu
hosted-git-info vulnerability
2022-09-02 00:00:00
libuv vulnerability
2021-07-07 00:00:00
nodejs
nodejs
Regular Expression Denial of Service
2021-05-06 16:15:08
Prototype Pollution
2021-03-12 23:16:43
nvd
nvd
CVE-2021-23362
2021-03-23 17:15:14
CVE-2021-27290
2021-03-12 22:15:14
CVE-2021-22918
2021-07-12 11:15:07
cvelist
cvelist
CVE-2021-27290
2021-03-12 21:47:41
CVE-2021-23362 Regular Expression Denial of Service (ReDoS)
2021-03-23 16:20:14
CVE-2021-22918
2021-07-12 00:00:00
amazon
amazon
Low: libuv
2024-01-03 21:04:00
altlinux
altlinux
Security fix for the ALT Linux 9 package node version 14.17.2-alt1
2021-08-03 00:00:00
Security fix for the ALT Linux 10 package node version 14.17.2-alt1
2021-07-01 00:00:00
debian
debian
[SECURITY] [DSA 4936-1] libuv1 security update
2021-07-05 18:35:15
alpinelinux
alpinelinux
CVE-2021-22918
2021-07-12 11:15:07
CVE-2021-27290
2021-03-12 22:15:14
CVE-2020-7774
2020-11-17 13:15:12
cbl_mariner
cbl_mariner
CVE-2021-22918 affecting package nodejs 14.17.0-1
2021-08-11 06:39:34
gentoo
gentoo
libuv: Buffer Overread
2024-01-16 00:00:00
huntr
huntr
Prototype Pollution in yargs/y18n
2020-10-15 00:00:00

EPSS

0.338

Percentile

97.1%

JSON
Related for OPENSUSE-SU-2021:2354-1
nessus44openvas25suse7archlinux4almalinux3rocky3oraclelinux4osv18redhat7mageia2ibm27freebsd1nodejsblog2redhatcve4ubuntucve4cve4github3photon2prion4debiancve4veracode4hackerone1ubuntu2nodejs2nvd4cvelist4amazon1altlinux2debian1alpinelinux3cbl_mariner1gentoo1huntr1