Lucene search

K
suseSuseOPENSUSE-SU-2018:2816-1
HistorySep 24, 2018 - 12:15 p.m.

Security update for nodejs6 (moderate)

2018-09-2412:15:49
lists.opensuse.org
46

0.054 Low

EPSS

Percentile

92.4%

This update for nodejs6 to version 6.14.4 fixes the following issues:

Security issues fixed:

CVE-2018-12115: Fixed an out-of-bounds (OOB) write in Buffer.write() for
UCS-2 encoding (bsc#1105019) CVE-2018-0732: Upgrade to OpenSSL 1.0.2p,
fixing a client DoS due to large DH parameter (bsc#1097158)

Other issues fixed:

  • Recommend same major version npm package (bsc#1097748)

This update was imported from the SUSE:SLE-12:Update update project.