Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2016:2496-1
HistoryOct 11, 2016 - 7:20 p.m.

Security update for nodejs (important)

2016-10-1119:20:03
lists.opensuse.org
45

EPSS

0.566

Percentile

97.7%

JSON

This update brings the new upstream nodejs LTS version 4.6.0, fixing bugs
and security issues:

  • Nodejs embedded openssl version update
    • upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
      CVE-2016-6306, CVE-2016-7052)
    • remove support for dynamic 3rd party engine modules
  • http: Properly validate for allowable characters in input user data.
    This introduces a new case where throw may occur when configuring HTTP
    responses, users should already be adopting try/catch here.
    (CVE-2016-5325, bsc#985201)
  • tls: properly validate wildcard certificates (CVE-2016-7099, bsc#1001652)
  • buffer: Zero-fill excess bytes in new Buffer objects created with
    Buffer.concat()
OSVersionArchitecturePackageVersionFilename
openSUSE13.2x86_64nodejs-debuginfo< 4.6.0-24.2nodejs-debuginfo-4.6.0-24.2.x86_64.rpm
openSUSE13.2x86_64nodejs-devel< 4.6.0-24.2nodejs-devel-4.6.0-24.2.x86_64.rpm
openSUSE Leap42.1i586npm< 4.6.0-33.1npm-4.6.0-33.1.i586.rpm
openSUSE Leap42.1i586nodejs-devel< 4.6.0-33.1nodejs-devel-4.6.0-33.1.i586.rpm
openSUSE Leap42.1noarchnodejs-docs< 4.6.0-33.1nodejs-docs-4.6.0-33.1.noarch.rpm
openSUSE13.2x86_64nodejs-debugsource< 4.6.0-24.2nodejs-debugsource-4.6.0-24.2.x86_64.rpm
openSUSE Leap42.1i586nodejs-debugsource< 4.6.0-33.1nodejs-debugsource-4.6.0-33.1.i586.rpm
openSUSE13.2noarchnodejs-doc< 4.6.0-24.2nodejs-doc-4.6.0-24.2.noarch.rpm
openSUSE Leap42.1x86_64nodejs-debugsource< 4.6.0-33.1nodejs-debugsource-4.6.0-33.1.x86_64.rpm
openSUSE13.2i586nodejs-debugsource< 4.6.0-24.2nodejs-debugsource-4.6.0-24.2.i586.rpm
Rows per page:
1-10 of 201

Related

nessus 37
openvas 32
suse 11
ibm 57
redhat 4
mageia 2
threatpost 2
nodejsblog 2
oraclelinux 2
aix 1
fedora 5
f5 3
cloudfoundry 1
centos 1
gentoo 1
ubuntu 2
altlinux 1
osv 3
debian 2
archlinux 4
ubuntucve 2
prion 3
redhatcve 3
veracode 2
nvd 3
cvelist 3
cve 3
debiancve 3
alpinelinux 1
freebsd_advisory 1
slackware 1
openssl 1
nessus
nessus
openSUSE Security Update : nodejs (openSUSE-2016-1172)
2016-10-12 00:00:00
SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2016:2470-1)
2019-01-02 00:00:00
Arista Networks EOS 4.17 Multiple Vulnerabilities (SA0024) (SWEET32)
2018-02-28 00:00:00
openvas
openvas
openSUSE: Security Advisory for nodejs (openSUSE-SU-2016:2496-1)
2016-10-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2470-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2470-2)
2021-06-09 00:00:00
suse
suse
Security update for nodejs4 (important)
2016-11-01 16:19:35
Security update for nodejs4 (important)
2016-10-06 20:14:21
Security update for compat-openssl098 (important)
2016-10-14 15:09:07
ibm
ibm
Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux
2018-08-03 04:23:43
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™
2018-08-09 04:20:36
Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect IBM Business Process Manager (BPM) Configuration Editor
2018-06-15 07:06:49
redhat
redhat
(RHSA-2017:0002) Important: rh-nodejs4-nodejs and rh-nodejs4-http-parser security update
2017-01-02 15:33:44
(RHSA-2016:1940) Important: openssl security update
2016-09-27 11:50:45
(RHSA-2017:1659) Important: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update
2017-06-28 19:59:12
mageia
mageia
Updated nodejs packages fix security vulnerability
2017-07-13 12:10:46
Updated openssl packages fix security vulnerabilities
2016-10-12 01:12:20
threatpost
threatpost
OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack
2016-09-23 15:47:13
OpenSSL Fixes Critical Bug Introduced by Latest Update
2016-09-26 10:45:04
nodejsblog
nodejsblog
Security updates for all active release lines, September 2016
2016-09-23 00:00:00
Security updates for all active release lines, June 2016
2016-06-13 00:00:00
oraclelinux
oraclelinux
openssl security update
2016-10-13 00:00:00
openssl security update
2016-09-27 00:00:00
aix
aix
Vulnerabilities in OpenSSL affect AIX
2016-11-14 13:29:26
fedora
fedora
[SECURITY] Fedora 25 Update: openssl-1.0.2j-1.fc25
2016-10-09 03:28:42
[SECURITY] Fedora 24 Update: openssl-1.0.2j-1.fc24
2016-09-28 01:57:16
[SECURITY] Fedora 23 Update: openssl-1.0.2j-1.fc23
2016-10-11 23:24:05
f5
f5
K24444803 : Node.js vulnerabilities CVE-2015-8860, CVE-2015-8856, CVE-2016-7099, and CVE-2016-5325
2018-10-17 00:00:00
K39272405 : OpenSSL vulnerability CVE-2016-7052
2016-10-10 00:00:00
SOL39272405 - OpenSSL vulnerability CVE-2016-7052
2016-10-10 00:00:00
cloudfoundry
cloudfoundry
USN-3087-2 OpenSSL Regression | Cloud Foundry
2016-09-28 00:00:00
centos
centos
openssl security update
2016-09-28 14:48:04
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-12-07 00:00:00
ubuntu
ubuntu
OpenSSL regression
2016-09-23 00:00:00
OpenSSL vulnerabilities
2016-09-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package openssl10 version 1.0.1u-alt0.M70P.1
2016-09-23 00:00:00
osv
osv
openssl - security update
2016-09-22 00:00:00
openssl - security update
2016-09-25 00:00:00
openssl - regression update
2016-09-22 00:00:00
debian
debian
[SECURITY] [DSA 3673-1] openssl security update
2016-09-22 16:50:14
[SECURITY] [DLA 637-1] openssl security update
2016-09-25 11:55:01
archlinux
archlinux
[ASA-201609-24] lib32-openssl: multiple issues
2016-09-26 00:00:00
[ASA-201609-23] openssl: multiple issues
2016-09-26 00:00:00
[ASA-201609-30] openssl: denial of service
2016-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2016-7099
2016-10-10 00:00:00
CVE-2016-5325
2016-10-10 00:00:00
prion
prion
Design/Logic Flaw
2016-10-10 16:59:00
Crlf injection
2016-10-10 16:59:00
Null pointer dereference
2016-09-26 19:59:00
redhatcve
redhatcve
CVE-2016-5325
2016-06-15 16:19:00
CVE-2016-7099
2016-09-28 06:47:27
CVE-2016-7052
2016-09-26 11:17:23
veracode
veracode
HTTP Response Splitting
2018-09-24 05:08:11
Man-in-the-Middle (MitM)
2018-09-24 07:23:39
nvd
nvd
CVE-2016-7099
2016-10-10 16:59:01
CVE-2016-5325
2016-10-10 16:59:00
CVE-2016-7052
2016-09-26 19:59:07
cvelist
cvelist
CVE-2016-5325
2016-10-10 16:00:00
CVE-2016-7099
2016-10-10 16:00:00
CVE-2016-7052
2016-09-26 19:00:00
cve
cve
CVE-2016-5325
2016-10-10 16:59:00
CVE-2016-7099
2016-10-10 16:59:01
CVE-2016-7052
2016-09-26 19:59:07
debiancve
debiancve
CVE-2016-7099
2016-10-10 16:59:01
CVE-2016-5325
2016-10-10 16:59:00
CVE-2016-7052
2016-09-26 19:59:07
alpinelinux
alpinelinux
CVE-2016-7052
2016-09-26 19:59:07
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:27.openssl
2016-10-10 00:00:00
slackware
slackware
[slackware-security] openssl
2016-09-26 18:59:48
openssl
openssl
Vulnerability in OpenSSL CVE-2016-7052
2016-09-26 00:00:00

EPSS

0.566

Percentile

97.7%

JSON
Related for OPENSUSE-SU-2016:2496-1
nessus37openvas32suse11ibm57redhat4mageia2threatpost2nodejsblog2oraclelinux2aix1fedora5f53cloudfoundry1centos1gentoo1ubuntu2altlinux1osv3debian2archlinux4ubuntucve2prion3redhatcve3veracode2nvd3cvelist3cve3debiancve3alpinelinux1freebsd_advisory1slackware1openssl1