SUSE-SU-2024:1837-1

Source
https://www.suse.com/support/update/announcement/2024/suse-su-20241837-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:1837-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:1837-1
Related
Published
2024-05-29T12:11:02Z
Modified
2024-05-29T12:11:02Z
Summary
Security update for nodejs16
Details

This update for nodejs16 fixes the following issues:

  • CVE-2024-30260: undici: proxy-authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (bsc#1222530)
  • CVE-2024-30261: undici: Ensure that integrity cannot be tampered with (bsc#1222603)
References

Affected packages