File _patchinfo of Package patchinfo.21050
<patchinfo incident="21050">
<issue tracker="cve" id="2021-22930"/>
<issue tracker="cve" id="2021-22940"/>
<issue tracker="cve" id="2021-3672"/>
<issue tracker="cve" id="2021-22931"/>
<issue tracker="cve" id="2021-22939"/>
<issue tracker="bnc" id="1189368">VUL-0: CVE-2021-22940: nodejs10,nodejs12,nodejs14,nodejs: Use after free on close http2 on stream canceling</issue>
<issue tracker="bnc" id="1188881">VUL-0: CVE-2021-3672: c-ares,libcares2: Missing input validation on hostnames</issue>
<issue tracker="bnc" id="1189370">VUL-0: CVE-2021-22931: nodejs10,nodejs12,nodejs14,nodejs: cares upgrade - Improper handling of untypical characters in domain names</issue>
<issue tracker="bnc" id="1189369">VUL-0: CVE-2021-22939: nodejs10,nodejs12,nodejs14,nodejs: Incomplete validation of rejectUnauthorized parameter</issue>
<issue tracker="bnc" id="1188917">VUL-0: CVE-2021-22930: nodejs10,nodejs12,nodejs14,nodejs: Use after free on close http2 on stream canceling</issue>
<packager>adamm</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for nodejs14</summary>
<description>This update for nodejs14 fixes the following issues:
- CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
- CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
- CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368)
- CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369)
- CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
</description>
</patchinfo>