Security update for nodejs8 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2620-1 Final 1 1 2021-08-05T08:36:27Z current 2021-08-05T08:36:27Z 2021-08-05T08:36:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for nodejs8 This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-2620,SUSE-SLE-Module-Web-Scripting-15-SP2-2021-2620,SUSE-SLE-Product-HPC-15-2021-2620,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2620,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2620,SUSE-SLE-Product-SLES-15-2021-2620,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2620,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2620,SUSE-SLE-Product-SLES_SAP-15-2021-2620,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2620,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2620,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2620,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2620,SUSE-Storage-6-2021-2620 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212620-1/ Link for SUSE-SU-2021:2620-1 https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html E-Mail link for SUSE-SU-2021:2620-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1182620 SUSE Bug 1182620 https://bugzilla.suse.com/1184450 SUSE Bug 1184450 https://bugzilla.suse.com/1187976 SUSE Bug 1187976 https://bugzilla.suse.com/1187977 SUSE Bug 1187977 https://www.suse.com/security/cve/CVE-2020-7774/ SUSE CVE CVE-2020-7774 page https://www.suse.com/security/cve/CVE-2021-22884/ SUSE CVE CVE-2021-22884 page https://www.suse.com/security/cve/CVE-2021-23362/ SUSE CVE CVE-2021-23362 page https://www.suse.com/security/cve/CVE-2021-27290/ SUSE CVE CVE-2021-27290 page SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 nodejs-common-2.0-3.2.1 nodejs8-8.17.0-3.47.2 nodejs8-devel-8.17.0-3.47.2 nodejs8-docs-8.17.0-3.47.2 npm8-8.17.0-3.47.2 nodejs-common-2.0-3.2.1 as a component of SUSE Enterprise Storage 6 nodejs8-8.17.0-3.47.2 as a component of SUSE Enterprise Storage 6 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Enterprise Storage 6 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Enterprise Storage 6 npm8-8.17.0-3.47.2 as a component of SUSE Enterprise Storage 6 nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15-LTSS npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs-common-2.0-3.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm8-8.17.0-3.47.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs-common-2.0-3.2.1 as a component of SUSE Manager Proxy 4.0 nodejs8-8.17.0-3.47.2 as a component of SUSE Manager Proxy 4.0 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Manager Proxy 4.0 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Manager Proxy 4.0 npm8-8.17.0-3.47.2 as a component of SUSE Manager Proxy 4.0 nodejs-common-2.0-3.2.1 as a component of SUSE Manager Retail Branch Server 4.0 nodejs8-8.17.0-3.47.2 as a component of SUSE Manager Retail Branch Server 4.0 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Manager Retail Branch Server 4.0 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Manager Retail Branch Server 4.0 npm8-8.17.0-3.47.2 as a component of SUSE Manager Retail Branch Server 4.0 nodejs-common-2.0-3.2.1 as a component of SUSE Manager Server 4.0 nodejs8-8.17.0-3.47.2 as a component of SUSE Manager Server 4.0 nodejs8-devel-8.17.0-3.47.2 as a component of SUSE Manager Server 4.0 nodejs8-docs-8.17.0-3.47.2 as a component of SUSE Manager Server 4.0 npm8-8.17.0-3.47.2 as a component of SUSE Manager Server 4.0 The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution. CVE-2020-7774 SUSE Enterprise Storage 6:nodejs-common-2.0-3.2.1 SUSE Enterprise Storage 6:nodejs8-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.47.2 SUSE Enterprise Storage 6:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Proxy 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Proxy 4.0:npm8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Retail Branch Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:npm8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Server 4.0:npm8-8.17.0-3.47.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212620-1/ https://www.suse.com/security/cve/CVE-2020-7774.html CVE-2020-7774 https://bugzilla.suse.com/1184450 SUSE Bug 1184450 Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160. CVE-2021-22884 SUSE Enterprise Storage 6:nodejs-common-2.0-3.2.1 SUSE Enterprise Storage 6:nodejs8-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.47.2 SUSE Enterprise Storage 6:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Proxy 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Proxy 4.0:npm8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Retail Branch Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:npm8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Server 4.0:npm8-8.17.0-3.47.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212620-1/ https://www.suse.com/security/cve/CVE-2021-22884.html CVE-2021-22884 https://bugzilla.suse.com/1182620 SUSE Bug 1182620 https://bugzilla.suse.com/1188549 SUSE Bug 1188549 https://bugzilla.suse.com/1201328 SUSE Bug 1201328 The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity. CVE-2021-23362 SUSE Enterprise Storage 6:nodejs-common-2.0-3.2.1 SUSE Enterprise Storage 6:nodejs8-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.47.2 SUSE Enterprise Storage 6:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Proxy 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Proxy 4.0:npm8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Retail Branch Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:npm8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Server 4.0:npm8-8.17.0-3.47.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212620-1/ https://www.suse.com/security/cve/CVE-2021-23362.html CVE-2021-23362 https://bugzilla.suse.com/1187977 SUSE Bug 1187977 ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option. CVE-2021-27290 SUSE Enterprise Storage 6:nodejs-common-2.0-3.2.1 SUSE Enterprise Storage 6:nodejs8-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-devel-8.17.0-3.47.2 SUSE Enterprise Storage 6:nodejs8-docs-8.17.0-3.47.2 SUSE Enterprise Storage 6:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-BCL:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server 15-LTSS:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server 15-LTSS:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs-common-2.0-3.2.1 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs-8.17.0-3.47.2 SUSE Linux Enterprise Server for SAP Applications 15:npm8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Proxy 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Proxy 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Proxy 4.0:npm8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Retail Branch Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Retail Branch Server 4.0:npm8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs-common-2.0-3.2.1 SUSE Manager Server 4.0:nodejs8-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-devel-8.17.0-3.47.2 SUSE Manager Server 4.0:nodejs8-docs-8.17.0-3.47.2 SUSE Manager Server 4.0:npm8-8.17.0-3.47.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212620-1/ https://www.suse.com/security/cve/CVE-2021-27290.html CVE-2021-27290 https://bugzilla.suse.com/1187976 SUSE Bug 1187976