SUSE-SU-2020:0104-1

Details

Description of the patch:

This update for nodejs10 to version 10.18.0 fixes the following issues:

Security issues fixed:

CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352).
Added support for chacha20-poly1305 for Authenticated encryption (AEAD).

Non-security issues fixed:

Affected Packages

nodejs10

SUSE Linux Enterprise Module for Web and Scripting 15SUSE Linux Enterprise Module for Web and Scripting 15 SP1

Fixed in:

10.18.0-1.15.1

nodejs10-devel

SUSE Linux Enterprise Module for Web and Scripting 15SUSE Linux Enterprise Module for Web and Scripting 15 SP1

Fixed in:

10.18.0-1.15.1

nodejs10-docs

SUSE Linux Enterprise Module for Web and Scripting 15SUSE Linux Enterprise Module for Web and Scripting 15 SP1

Fixed in:

10.18.0-1.15.1

npm10

SUSE Linux Enterprise Module for Web and Scripting 15SUSE Linux Enterprise Module for Web and Scripting 15 SP1

Fixed in:

10.18.0-1.15.1

References