Lucene search
SuseOPENSUSE-SU-2020:1660-1HistoryOct 12, 2020 - 12:00 a.m.
Security update for nodejs10 (important)
2020-10-1200:00:00
lists.opensuse.org
31
EPSS
0.001
Percentile
19.0%
An update that solves two vulnerabilities and has one
errata is now available.
Description:
This update for nodejs10 fixes the following issues:
- nodejs10 was updated to 10.22.1 LTS:
- CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589).
- CVE-2020-15095: Fixed an information leak through log files
(bsc#1173937).
- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
on Aarch64 with gcc10 (bsc#1172686)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.2:
zypper in -t patch openSUSE-2020-1660=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.2 | i586 | < - openSUSE Leap 15.2 (i586 x86_64): | - openSUSE Leap 15.2 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 15.2 | x86_64 | < - openSUSE Leap 15.2 (i586 x86_64): | - openSUSE Leap 15.2 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.2 | noarch | < - openSUSE Leap 15.2 (noarch): | - openSUSE Leap 15.2 (noarch):.noarch.rpm |
Related
nessus
nessus
openSUSE Security Update : nodejs10 (openSUSE-2020-1660)
2020-10-13 00:00:00
SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2020:2823-1)
2020-12-09 00:00:00
SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2020:2829-1)
2020-12-09 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:2829-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2823-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for nodejs10 (openSUSE-SU-2020:1660-1)
2020-10-13 00:00:00
suse
suse
Security update for nodejs12 (important)
2020-10-05 00:00:00
Security update for nodejs8 (moderate)
2020-10-10 00:00:00
almalinux
almalinux
Moderate: nodejs:12 security and bug fix update
2020-10-19 07:13:10
Moderate: nodejs:10 security update
2021-02-16 07:34:15
redhat
redhat
(RHSA-2020:4272) Moderate: nodejs:12 security and bug fix update
2020-10-19 07:13:10
(RHSA-2020:5086) Moderate: rh-nodejs12-nodejs security update
2020-11-11 13:06:16
(RHSA-2020:4903) Moderate: nodejs:12 security and bug fix update
2020-11-04 09:29:19
ibm
ibm
rocky
rocky
nodejs:12 security and bug fix update
2020-10-19 07:13:10
nodejs:10 security update
2021-02-16 07:34:15
osv
osv
Moderate: nodejs:12 security and bug fix update
2020-10-19 07:13:10
Moderate: nodejs:12 security and bug fix update
2020-10-19 07:13:10
BIT-node-2020-8252
2024-03-06 11:07:50
oraclelinux
oraclelinux
nodejs:12 security and bug fix update
2020-10-20 00:00:00
nodejs:10 security update
2021-02-20 00:00:00
hackerone
hackerone
Node.js: `fs.realpath.native` on darwin may cause buffer overflow
2020-08-24 15:18:48
ubuntu
ubuntu
libuv vulnerability
2020-09-28 00:00:00
gentoo
gentoo
libuv: Buffer overflow
2020-09-29 00:00:00
NodeJS: Multiple vulnerabilities
2021-01-11 00:00:00
redhatcve
redhatcve
CVE-2020-8252
2020-09-16 02:18:27
CVE-2020-15095
2020-07-14 18:44:55
nvd
nvd
CVE-2020-8252
2020-09-18 21:15:13
CVE-2020-15095
2020-07-07 19:15:10
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-1.0-0331
2020-10-13 00:00:00
Important Photon OS Security Update - PHSA-2020-0150
2020-10-12 00:00:00
Important Photon OS Security Update - PHSA-2020-0331
2020-10-13 00:00:00
debiancve
debiancve
CVE-2020-8252
2020-09-18 21:15:13
CVE-2020-15095
2020-07-07 19:15:10
ubuntucve
ubuntucve
CVE-2020-8252
2020-09-18 00:00:00
CVE-2020-15095
2020-07-07 00:00:00
alpinelinux
alpinelinux
CVE-2020-8252
2020-09-18 21:15:13
nodejs
nodejs
Sensitive Data Exposure
2020-07-07 19:03:09
prion
prion
Information disclosure
2020-07-07 19:15:00
Buffer overflow
2020-09-18 21:15:00
cvelist
cvelist
CVE-2020-8252
2020-09-18 20:11:51
CVE-2020-15095 Sensitive information exposure through logs in npm cli
2020-07-07 18:55:12
veracode
veracode
Buffer Overflow
2020-09-24 10:38:51
Information Disclosure
2020-07-09 04:14:13
mageia
mageia
Updated libuv packages a fix security vulnerability
2020-11-08 17:14:27
Updated nodejs packages fix security vulnerabilities
2020-09-27 23:06:37
cve
cve
CVE-2020-8252
2020-09-18 21:15:13
CVE-2020-15095
2020-07-07 19:15:10
github
github
npm CLI exposing sensitive information through logs
2020-07-07 18:56:16
githubexploit
githubexploit
Exploit for Insertion of Sensitive Information into Log File in Npmjs Npm
2020-12-01 09:45:48
fedora
fedora
[SECURITY] Fedora 33 Update: nodejs-14.15.1-1.fc33
2020-12-13 02:10:30
nodejsblog
nodejsblog
September 2020 Security Releases
2020-09-15 00:00:00
freebsd
freebsd
Node.js -- September 2020 Security Releases
2020-09-08 00:00:00
threatpost
threatpost
IBM Squashes Critical Remote Code-Execution Flaw
2021-02-23 19:36:32
ics
ics
Hitachi Energy Gateway Station (GWS) Product
2022-08-30 12:00:00
Hitachi Energy FACTS Control Platform (FCP) Product
2022-08-30 12:00:00
Hitachi Energy MicroSCADA Pro/X SYS600
2022-04-21 12:00:00