File _patchinfo of Package patchinfo.18402

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.18402

<patchinfo incident="18402">
  <issue tracker="cve" id="2021-22884"/>
  <issue tracker="cve" id="2021-23840"/>
  <issue tracker="cve" id="2021-22883"/>
  <issue tracker="bnc" id="1182620">VUL-0: CVE-2021-22884: nodejs10,nodejs12,nodejs14,nodejs: DNS rebinding in --inspect</issue>
  <issue tracker="bnc" id="1182619">VUL-0: CVE-2021-22883: nodejs10,nodejs12,nodejs14,nodejs: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion</issue>
  <issue tracker="bnc" id="1182333">VUL-1: CVE-2021-23840: openssl-1_0_0,openssl1,compat-openssl098,openssl-1_1,openssl: Integer overflow in CipherUpdate</issue>
  <packager>adamm</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for nodejs10</summary>
  <description>This update for nodejs10 fixes the following issues:

New upstream LTS version 10.24.0:

- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate (bsc#1182333)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.18402

Places