UbuntuUpdates.org

Package "libnode72"

Name: libnode72

Description:

evented I/O for V8 javascript - runtime library
Latest version: 12.22.9~dfsg-1ubuntu3.6
Release: jammy (22.04)
Level: security
Repository: universe
Head package: nodejs
Homepage: https://nodejs.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libnode72"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libnode72" in Jammy

Repository Area Version
base universe 12.22.9~dfsg-1ubuntu3
updates universe 12.22.9~dfsg-1ubuntu3.6

Changelog

Version: 12.22.9~dfsg-1ubuntu3.1 2023-10-30 13:09:43 UTC

  nodejs (12.22.9~dfsg-1ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Remote Code Execution
    - debian/patches/CVE-2022-1292.patch: fixed a remote code execution in
      openssl in nodejs
    - debian/patches/CVE-2022-2068.patch: fixed an arbitrary code execution in
      openssl in nodejs
    - debian/patches/CVE-2022-2097.patch: fixed a memory corruption in openssl
      in nodejs
    - CVE-2022-1292
    - CVE-2022-2068
    - CVE-2022-2097
  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2022-0778.patch: fixed an infinite loop in
      BN_mod_sqrt module
    - CVE-2022-0778

 -- Amir Naseredini <email address hidden> Thu, 26 Oct 2023 18:23:45 +0100
CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to ...
CVE-2022-2068 The c_rehash script allows command injection
CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimi ...
CVE-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates


About   -   Send Feedback to @ubuntu_updates