VDB
openSUSE-SU-2020%3A1660-1
openSUSE-SU-2020%3A1660-1
PUBLISHED
CVSS 5.5 MEDIUM
This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686) This update was imported from the SUSE:SLE-15:Update update project.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nodejs10 | ||
| openSUSE Leap 15.2 | ||
| npm10 |
Timeline
- Oct 12, 2020 CVE Published
- Apr 2, 2026 Security Advisory
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1660-1.json advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NXR3SXX6RCZ7MMPKWBRQP7QGXO4JN25P/ advisory
- https://bugzilla.suse.com/1172686 advisory
- https://bugzilla.suse.com/1173937 advisory
- https://bugzilla.suse.com/1176589 advisory
- https://www.suse.com/security/cve/CVE-2020-15095/ advisory
- https://www.suse.com/security/cve/CVE-2020-8252/ advisory