A nodejs:14 security update has been released for AlmaLinux 8.
ALSA-2022:7830 Moderate: nodejs:14 security update
Type:
security
Severity:
moderate
Release date:
2022-11-14
Description
Security Fix(es):
* nodejs: Improper handling of URI Subject Alternative Names (CVE-2021-44531)
* nodejs: Certificate Verification Bypass via String Injection (CVE-2021-44532)
* nodejs: Incorrect handling of certificate subject and issuer fields (CVE-2021-44533)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)
* nodejs: Prototype pollution via console.table properties (CVE-2022-21824)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
RHSA-2022:7830
CVE-2021-44531
CVE-2021-44532
CVE-2021-44533
CVE-2022-21824
CVE-2022-35256
ALSA-2022:7830
Updates packages:
nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.noarch.rpm
nodejs-docs-14.20.1-2.module_el8.7.0+3342+b2df8497.noarch.rpm
Packages/nodejs-packaging-23-3.module_el8.4.0+2522+3bd42762.noarch.rpm
npm-6.14.17-1.14.20.1.2.module_el8.7.0+3342+b2df8497.aarch64.rpm
nodejs-devel-14.20.1-2.module_el8.7.0+3342+b2df8497.aarch64.rpm
nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.aarch64.rpm
nodejs-full-i18n-14.20.1-2.module_el8.7.0+3342+b2df8497.aarch64.rpm
nodejs-full-i18n-14.20.1-2.module_el8.7.0+3342+b2df8497.x86_64.rpm
nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.x86_64.rpm
nodejs-devel-14.20.1-2.module_el8.7.0+3342+b2df8497.x86_64.rpm
npm-6.14.17-1.14.20.1.2.module_el8.7.0+3342+b2df8497.x86_64.rpm
nodejs-full-i18n-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm
nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm
npm-6.14.17-1.14.20.1.2.module_el8.7.0+3342+b2df8497.s390x.rpm
nodejs-devel-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm
nodejs-full-i18n-14.20.1-2.module_el8.7.0+3342+b2df8497.ppc64le.rpm
nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.ppc64le.rpm
npm-6.14.17-1.14.20.1.2.module_el8.7.0+3342+b2df8497.ppc64le.rpm
nodejs-devel-14.20.1-2.module_el8.7.0+3342+b2df8497.ppc64le.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
