Lucene search

K
suseSuseSUSE-SU-2022:3615-1
HistoryOct 18, 2022 - 12:00 a.m.

Security update for nodejs16 (important)

2022-10-1800:00:00
lists.opensuse.org
7

0.006 Low

EPSS

Percentile

78.5%

An update that fixes four vulnerabilities is now available.

Description:

This update for nodejs16 fixes the following issues:

Updated to version 16.17.1:

  • CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325).
  • CVE-2022-32215: Fixed incorrect Parsing of Multi-line Transfer-Encoding
    (bsc#1201327).
  • CVE-2022-35256: Fixed incorrect Parsing of Header Fields (bsc#1203832).
  • CVE-2022-35255: FIxed weak randomness in WebCrypto keygen (bsc#1203831).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-3615=1

  • SUSE Linux Enterprise Module for Web Scripting 15-SP3:

    zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP3-2022-3615=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm
SUSE Linux Enterprise Module for Web Scripting 15SP3aarch64<  SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
SUSE Linux Enterprise Module for Web Scripting 15SP3ppc64le<  SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
SUSE Linux Enterprise Module for Web Scripting 15SP3s390x<  SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
SUSE Linux Enterprise Module for Web Scripting 15SP3x86_64<  SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Web Scripting 15-SP3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
SUSE Linux Enterprise Module for Web Scripting 15SP3noarch<  SUSE Linux Enterprise Module for Web Scripting 15-SP3 (noarch):- SUSE Linux Enterprise Module for Web Scripting 15-SP3 (noarch):.noarch.rpm