- Update to Nodejs 18.9.1:

* deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic
    + Incorrect Parsing of Multi-line Transfer-Encoding
      (CVE-2022-32215)
    + Incorrect Parsing of Header Fields (CVE-35256)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs18?expand=0&rev=16
This commit is contained in:
2022-09-26 14:46:24 +00:00
committed by Git OBS Bridge
parent 30cc83a745
commit 0ef259aa25
5 changed files with 70 additions and 69 deletions

View File

@@ -1,3 +1,15 @@
-------------------------------------------------------------------
Mon Sep 26 13:13:39 UTC 2022 - Adam Majer <adam.majer@suse.de>
- Update to Nodejs 18.9.1:
* deps: llhttp updated to 6.0.10
+ CVE-2022-32213 bypass via obs-fold mechanic
+ Incorrect Parsing of Multi-line Transfer-Encoding
(CVE-2022-32215)
+ Incorrect Parsing of Header Fields (CVE-35256)
* crypto: fix weak randomness in WebCrypto keygen
(CVE-2022-35255)
-------------------------------------------------------------------
Thu Sep 15 15:00:25 UTC 2022 - Adam Majer <adam.majer@suse.de>