FlawAtlas
Search the atlas
SUSE-SU-2021:2620-1 Not scored

Security update for nodejs8

This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)

Exploit probability Not scored
Published August 5, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 6 nodejs-common
SUSE:Enterprise Storage 6 nodejs8
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs-common
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS nodejs8
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs-common
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8
SUSE:Linux Enterprise High Performance Computing 15-ESPOS nodejs-common
SUSE:Linux Enterprise High Performance Computing 15-ESPOS nodejs8
SUSE:Linux Enterprise High Performance Computing 15-LTSS nodejs-common
SUSE:Linux Enterprise High Performance Computing 15-LTSS nodejs8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2 nodejs-common
SUSE:Linux Enterprise Server 15 SP1-BCL nodejs-common
SUSE:Linux Enterprise Server 15 SP1-BCL nodejs8
SUSE:Linux Enterprise Server 15 SP1-LTSS nodejs-common
SUSE:Linux Enterprise Server 15 SP1-LTSS nodejs8
SUSE:Linux Enterprise Server 15-LTSS nodejs-common
SUSE:Linux Enterprise Server 15-LTSS nodejs8
SUSE:Linux Enterprise Server for SAP Applications 15 nodejs-common
SUSE:Linux Enterprise Server for SAP Applications 15 nodejs8
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 nodejs-common
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 nodejs8
SUSE:Manager Proxy 4.0 nodejs-common
SUSE:Manager Proxy 4.0 nodejs8
SUSE:Manager Retail Branch Server 4.0 nodejs-common
SUSE:Manager Retail Branch Server 4.0 nodejs8
SUSE:Manager Server 4.0 nodejs-common
SUSE:Manager Server 4.0 nodejs8

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:2620-1

This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)

View original source

05 / REFERENCES

Further evidence