[SUSE-SU-2021:2823-1] Security update for nodejs10

Severity Moderate

CVEs 4

Security update for nodejs10

This update for nodejs10 fixes the following issues:

CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).

ID

SUSE-SU-2021:2823-1

Severity

moderate

URL

Published

2021-08-24T13:12:49
(3 years ago)

Modified

2021-08-24T13:12:49
(3 years ago)

Rights

Other Advisories

Source	Name	URL
Suse	SUSE ratings	https://www.suse.com/support/security/rating/
Suse	URL of this CSAF notice	https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_2823-1.json
Suse	URL for SUSE-SU-2021:2823-1	https://www.suse.com/support/update/announcement/2021/suse-su-20212823-1/
Suse	E-Mail link for SUSE-SU-2021:2823-1	https://lists.suse.com/pipermail/sle-security-updates/2021-August/009337.html
Bugzilla	SUSE Bug 1188881	https://bugzilla.suse.com/1188881
Bugzilla	SUSE Bug 1188917	https://bugzilla.suse.com/1188917
Bugzilla	SUSE Bug 1189369	https://bugzilla.suse.com/1189369
Bugzilla	SUSE Bug 1189370	https://bugzilla.suse.com/1189370
CVE	SUSE CVE CVE-2021-22930 page	https://www.suse.com/security/cve/CVE-2021-22930/
CVE	SUSE CVE CVE-2021-22931 page	https://www.suse.com/security/cve/CVE-2021-22931/
CVE	SUSE CVE CVE-2021-22939 page	https://www.suse.com/security/cve/CVE-2021-22939/
CVE	SUSE CVE CVE-2021-3672 page	https://www.suse.com/security/cve/CVE-2021-3672/

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date