OPENSUSE-SU-2022:0112-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 18 Jan 2022, 12:03
Last modified:07 May 2025, 18:13

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Jan 2022, 12:03
Published
Vulnerability first disclosed
07 May 2025, 18:13
Last Modified
Vulnerability information updated

Description

Security update for nodejs14 This update for nodejs14 fixes the following issues: - CVE-2021-44531: Fixed improper handling of URI Subject Alternative Names (bsc#1194511). - CVE-2021-44532: Fixed certificate Verification Bypass via String Injection (bsc#1194512). - CVE-2021-44533: Fixed incorrect handling of certificate subject and issuer fields (bsc#1194513). - CVE-2022-21824: Fixed prototype pollution via console.table properties (bsc#1194514).

Affected Systems

  • opensuse•chromium&distro=openSUSE Leap 15.3

    < 100.0.4896.88-bp153.2.82.1

  • opensuse•nodejs14&distro=openSUSE Leap 15.3

    < 14.18.3-15.24.1

  • suse•chromium&distro=SUSE Package Hub 15 SP3

    < 100.0.4896.88-bp153.2.82.1

References (9)