Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/234FDFD0A8BF7776E67B7305A7FE038E
HistorySep 01, 2021 - 12:00 a.m.

Security fix for the ALT Linux 10 package node version 14.17.6-alt1

2021-09-0100:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
9

0.007 Low

EPSS

Percentile

80.2%

JSON

Sept. 1, 2021 Vitaly Lipatov 14.17.6-alt1

- new version 14.17.6 (with rpmrb script)
- set npm >= 6.14.15
- set openssl >= 1.1.1l
- CVE-2021-32803, CVE-2021-32804, CVE-2021-37701, CVE-2021-37712, CVE-2021-37713, CVE-2021-39134, CVE-2021-39135
OSVersionArchitecturePackageVersionFilename
ALT Linux10srcnode-16.19.1-alt1.src.rpm< 14.17.6-alt1node-16.19.1-alt1.src.rpm
ALT Linux10noarchnode-doc-16.19.1-alt1.noarch.rpm< 14.17.6-alt1node-doc-16.19.1-alt1.noarch.rpm
ALT Linux10x86_64node-16.19.1-alt1.x86_64.rpm< 14.17.6-alt1node-16.19.1-alt1.x86_64.rpm
ALT Linux10x86_64node-debuginfo-16.19.1-alt1.x86_64.rpm< 14.17.6-alt1node-debuginfo-16.19.1-alt1.x86_64.rpm
ALT Linux10x86_64node-devel-16.19.1-alt1.x86_64.rpm< 14.17.6-alt1node-devel-16.19.1-alt1.x86_64.rpm
ALT Linux10i586node-16.19.1-alt1.i586.rpm< 14.17.6-alt1node-16.19.1-alt1.i586.rpm
ALT Linux10i586node-debuginfo-16.19.1-alt1.i586.rpm< 14.17.6-alt1node-debuginfo-16.19.1-alt1.i586.rpm
ALT Linux10i586node-devel-16.19.1-alt1.i586.rpm< 14.17.6-alt1node-devel-16.19.1-alt1.i586.rpm
ALT Linux10aarch64node-16.19.1-alt1.aarch64.rpm< 14.17.6-alt1node-16.19.1-alt1.aarch64.rpm
ALT Linux10aarch64node-debuginfo-16.19.1-alt1.aarch64.rpm< 14.17.6-alt1node-debuginfo-16.19.1-alt1.aarch64.rpm
Rows per page:
1-10 of 171

Related

freebsd 1
nessus 26
nodejsblog 1
github 8
ibm 34
mageia 2
openvas 24
suse 8
osv 17
debian 2
debiancve 7
ubuntucve 7
prion 7
alpinelinux 7
cve 7
cvelist 7
nvd 7
redhat 2
veracode 7
redhatcve 7
nodejs 7
githubexploit 1
ubuntu 1
rocky 1
oraclelinux 1
freebsd
freebsd
Node.js -- August 2021 Security Releases (2)
2021-08-31 00:00:00
nessus
nessus
FreeBSD : Node.js -- August 2021 Security Releases (2) (7062bce0-1b17-11ec-9d9d-0022489ad614)
2021-10-01 00:00:00
Node.js Multiple Vulnerabilities (August 31st 2021 Security Releases)
2021-10-19 00:00:00
SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2021:3886-1)
2021-12-03 00:00:00
nodejsblog
nodejsblog
August 31 2021 Security Releases
2021-08-31 00:00:00
github
github
GitHub security update: Vulnerabilities in tar and @npmcli/arborist
2021-09-08 16:00:32
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
2021-08-03 19:06:36
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
2021-08-31 16:04:03
ibm
ibm
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:33:20
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i
2021-12-12 19:49:25
Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2022-05-24 18:37:42
mageia
mageia
Updated nodejs-tar packages fix security vulnerability
2022-03-21 23:18:30
Updated nodejs packages fix security vulnerability
2021-10-06 22:41:56
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0103)
2022-03-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3940-1)
2021-12-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3886-1)
2021-12-03 00:00:00
suse
suse
Security update for nodejs12 (important)
2021-12-06 00:00:00
Security update for nodejs14 (important)
2021-12-07 00:00:00
Security update for nodejs12 (important)
2021-12-12 00:00:00
osv
osv
node-tar - security update
2021-11-11 00:00:00
node-tar - security update
2022-12-12 00:00:00
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
2021-08-03 19:06:36
debian
debian
[SECURITY] [DSA 5008-1] node-tar security update
2021-11-11 21:57:59
[SECURITY] [DLA 3237-1] node-tar security update
2022-12-12 14:15:54
debiancve
debiancve
CVE-2021-32804
2021-08-03 19:15:08
CVE-2021-39134
2021-08-31 17:15:08
CVE-2021-39135
2021-08-31 17:15:08
ubuntucve
ubuntucve
CVE-2021-32804
2021-08-03 00:00:00
CVE-2021-39134
2021-08-31 00:00:00
CVE-2021-37713
2021-08-31 00:00:00
prion
prion
Design/Logic Flaw
2021-08-03 19:15:00
Design/Logic Flaw
2021-08-31 17:15:00
Remote code execution
2021-08-31 17:15:00
alpinelinux
alpinelinux
CVE-2021-32804
2021-08-03 19:15:08
CVE-2021-39134
2021-08-31 17:15:08
CVE-2021-37713
2021-08-31 17:15:08
cve
cve
CVE-2021-32804
2021-08-03 19:15:08
CVE-2021-39134
2021-08-31 17:15:08
CVE-2021-37713
2021-08-31 17:15:08
cvelist
cvelist
CVE-2021-32804 Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
2021-08-03 19:10:12
CVE-2021-39134 UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
2021-08-31 16:55:11
CVE-2021-37713 Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
2021-08-31 16:50:09
nvd
nvd
CVE-2021-32804
2021-08-03 19:15:08
CVE-2021-39135
2021-08-31 17:15:08
CVE-2021-37713
2021-08-31 17:15:08
redhat
redhat
(RHSA-2021:5086) Moderate: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update
2021-12-13 15:19:23
(RHSA-2022:0041) Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
2022-01-06 18:27:51
veracode
veracode
Remote Code Execution (RCE)
2021-09-01 03:51:53
Remote Code Execution (RCE)
2021-09-01 02:04:46
Remote Code Execution (RCE)
2021-09-01 02:58:46
redhatcve
redhatcve
CVE-2021-39135
2021-12-06 14:11:24
CVE-2021-37713
2021-12-16 16:50:36
CVE-2021-37701
2021-08-31 17:10:03
nodejs
nodejs
UNIX Symbolic Link (Symlink) Following
2021-08-31 16:14:40
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
2021-08-31 16:10:07
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
2021-08-31 16:10:17
githubexploit
githubexploit
Exploit for Path Traversal in Tar Project Tar
2021-08-31 04:32:38
ubuntu
ubuntu
Tar for Node.js vulnerability
2022-02-11 00:00:00
rocky
rocky
nodejs:12 security and bug fix update
2021-09-21 12:33:58
oraclelinux
oraclelinux
nodejs:12 security and bug fix update
2021-09-22 00:00:00

0.007 Low

EPSS

Percentile

80.2%

JSON
Related for 234FDFD0A8BF7776E67B7305A7FE038E
freebsd1nessus26nodejsblog1github8ibm34mageia2openvas24suse8osv17debian2debiancve7ubuntucve7prion7alpinelinux7cve7cvelist7nvd7redhat2veracode7redhatcve7nodejs7githubexploit1ubuntu1rocky1oraclelinux1