File _patchinfo of Package patchinfo.20874
<patchinfo incident="20874">
<issue tracker="cve" id="2021-22939"/>
<issue tracker="cve" id="2021-22931"/>
<issue tracker="cve" id="2021-22930"/>
<issue tracker="cve" id="2021-3672"/>
<issue tracker="bnc" id="1189369">VUL-0: CVE-2021-22939: nodejs10,nodejs12,nodejs14,nodejs: Incomplete validation of rejectUnauthorized parameter</issue>
<issue tracker="bnc" id="1188881">VUL-0: CVE-2021-3672: c-ares,libcares2: Missing input validation on hostnames</issue>
<issue tracker="bnc" id="1189370">VUL-0: CVE-2021-22931: nodejs10,nodejs12,nodejs14,nodejs: cares upgrade - Improper handling of untypical characters in domain names</issue>
<issue tracker="bnc" id="1188917">VUL-0: CVE-2021-22930: nodejs10,nodejs12,nodejs14,nodejs: Use after free on close http2 on stream canceling</issue>
<packager>adamm</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for nodejs10</summary>
<description>This update for nodejs10 fixes the following issues:
- CVE-2021-3672: Fixed missing input validation on hostnames (bsc#1188881).
- CVE-2021-22930: Fixed use after free on close http2 on stream canceling (bsc#1188917).
- CVE-2021-22939: Fixed incomplete validation of rejectUnauthorized parameter (bsc#1189369).
- CVE-2021-22931: Fixed improper handling of untypical characters in domain names (bsc#1189370).
</description>
</patchinfo>