Описание
Security update for nodejs
This update for nodejs fixes the following issue:
- CVE-2016-1669:
- fix buffer overflow in v8 (boo#987919)
Список пакетов
openSUSE Leap 42.1
nodejs-4.4.5-30.2
nodejs-devel-4.4.5-30.2
nodejs-docs-4.4.5-30.2
npm-4.4.5-30.2
Ссылки
- E-Mail link for openSUSE-SU-2016:1834-1
- SUSE Security Ratings
Описание
The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
Затронутые продукты
openSUSE Leap 42.1:nodejs-4.4.5-30.2
openSUSE Leap 42.1:nodejs-devel-4.4.5-30.2
openSUSE Leap 42.1:nodejs-docs-4.4.5-30.2
openSUSE Leap 42.1:npm-4.4.5-30.2
Ссылки
- CVE-2016-1669
- SUSE Bug 979859
- SUSE Bug 987919