SUSE-SU-2022:4301-1

UNKNOWN

Security update for nodejs10

Published Dec 1, 2022

Modified 3 years ago

Fix available

Details

This update for nodejs10 fixes the following issues:

CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).

Affected Packages

nodejs10

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

10.24.1-150000.1.53.1

nodejs10-devel

Fixed in:

10.24.1-150000.1.53.1

nodejs10-docs

Fixed in:

10.24.1-150000.1.53.1

npm10

Fixed in:

10.24.1-150000.1.53.1

References

REPORT

https://bugzilla.suse.com/1205119

WEB

https://www.suse.com/security/cve/CVE-2022-43548

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224301-1/

Upstream

CVE-2022-43548

Ecosystems(21)

SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Timeline

PublishedDec 1, 2022

ModifiedDec 1, 2022

SUSE-SU-2022:4301-1 | Mondoo Vulnerability Intelligence