VDB
SUSE-SU-2022%3A2425-1
SUSE-SU-2022%3A2425-1
PUBLISHED
Record from OSV · Published July 18, 2022
Security update for nodejs14
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| nodejs14 | SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Linux Enterprise Server 15 SP2-LTSS | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Linux Enterprise Module for Web and Scripting 15 SP3 | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Linux Enterprise Server 15 SP2-BCL | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Manager Server 4.1 | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Manager Retail Branch Server 4.1 | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Enterprise Storage 7 | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Manager Proxy 4.1 | 14.20.0-150200.15.34.1 |
| nodejs14 | openSUSE:Leap 15.4 | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | 14.20.0-150200.15.34.1 |
| nodejs14 | SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | 14.20.0-150200.15.34.1 |
| nodejs14 | openSUSE:Leap 15.3 | 14.20.0-150200.15.34.1 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | nodejs14 | 0 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | nodejs14 | 0 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP3 | nodejs14 | 0 |
| SUSE:Linux Enterprise Server 15 SP2-BCL | nodejs14 | 0 |
| SUSE:Manager Server 4.1 | nodejs14 | 0 |
| SUSE:Manager Retail Branch Server 4.1 | nodejs14 | 0 |
| SUSE:Enterprise Storage 7 | nodejs14 | 0 |
| SUSE:Manager Proxy 4.1 | nodejs14 | 0 |
| openSUSE:Leap 15.4 | nodejs14 | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | nodejs14 | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | nodejs14 | 0 |
| openSUSE:Leap 15.3 | nodejs14 | 0 |
Timeline
- Jul 18, 2022 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2022%3A2425-1
vulnetix vdb fixes SUSE-SU-2022%3A2425-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2022%253A2425-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.suse.com/support/update/announcement/2022/suse-su-20222425-1/ advisory
- https://bugzilla.suse.com/1201325 report
- https://bugzilla.suse.com/1201327 report
- https://www.suse.com/security/cve/CVE-2022-32212 url
- https://www.suse.com/security/cve/CVE-2022-32213 url
- https://bugzilla.suse.com/1201326 report
- https://www.suse.com/security/cve/CVE-2022-32214 url
- https://bugzilla.suse.com/1201328 report
- https://www.suse.com/security/cve/CVE-2022-32215 url