SUSE-CU-2022:2603-1: Security update of bci/nodejs
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Thu Oct 20 07:33:01 UTC 2022
SUSE Container Update Advisory: bci/nodejs
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2022:2603-1
Container Tags : bci/node:12 , bci/node:12-17.11 , bci/nodejs:12 , bci/nodejs:12-17.11
Container Release : 17.11
Severity : moderate
Type : security
References : 1201325 1203832 CVE-2022-32213 CVE-2022-35256
-----------------------------------------------------------------
The container bci/nodejs was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2022:3616-1
Released: Tue Oct 18 13:06:11 2022
Summary: Security update for nodejs12
Type: security
Severity: moderate
References: 1201325,1203832,CVE-2022-32213,CVE-2022-35256
This update for nodejs12 fixes the following issues:
- CVE-2022-35256: Fixed incorrect parsing of header fields (bsc#1203832).
- CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325).
The following package changes have been done:
- nodejs12-12.22.12-150200.4.38.1 updated
- npm12-12.22.12-150200.4.38.1 updated
More information about the sle-updates
mailing list