Security update for nodejs16 (important)

An update that solves four vulnerabilities and has one
errata is now available.

Description:

This update for nodejs16 fixes the following issues:

• CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP
  addresses (bsc#1201328).
• CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of
  Transfer-Encoding (bsc#1201325).
• CVE-2022-32214: Fixed HTTP request smuggling due to improper delimiting
  of header fields (bsc#1201326).
• CVE-2022-32215: Fixed HTTP request smuggling due to incorrect parsing of
  multi-line Transfer-Encoding (bsc#1201327).

The following non-security bug was fixed:

• Add buildtime version check to determine if we need patched
  openssl Requires: or already in upstream. (bsc#1192489)

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-2551=1

• SUSE Linux Enterprise Module for Web Scripting 15-SP3:

  zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP3-2022-2551=1