Lucene search

RedHatRHSA-2022:8832

HistoryDec 06, 2022 - 3:25 p.m.

(RHSA-2022:8832) Moderate: nodejs:18 security, bug fix, and enhancement update

2022-12-0615:25:25

access.redhat.com

node.js

security update

cve-2022-3517

cve-2022-43548

javascript

network applications

cve-references

0.005 Low

EPSS

Percentile

77.0%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856)

Security Fix(es):

nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xnodejs-debugsource< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-debugsource-18.12.1-1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHatanys390xnodejs-full-i18n< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-full-i18n-18.12.1-1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHatanyppc64lenodejs-devel< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-devel-18.12.1-1.module+el9.1.0.z+17326+318294bb.ppc64le.rpm
RedHatanyx86_64nodejs< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHatanyx86_64nodejs-full-i18n< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-full-i18n-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHatanyppc64lenodejs< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-18.12.1-1.module+el9.1.0.z+17326+318294bb.ppc64le.rpm
RedHatanyaarch64nodejs-debugsource< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-debugsource-18.12.1-1.module+el9.1.0.z+17326+318294bb.aarch64.rpm
RedHatanyx86_64nodejs-debuginfo< 18.12.1-1.module+el9.1.0.z+17326+318294bbnodejs-debuginfo-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHatanys390xnpm< 8.19.2-1.18.12.1.1.module+el9.1.0.z+17326+318294bbnpm-8.19.2-1.18.12.1.1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHatanynoarchnodejs-packaging-bundler< 2021.06-4.module+el9.1.0+15718+e52ec601nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	nodejs-debugsource	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-debugsource-18.12.1-1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHat	any	s390x	nodejs-full-i18n	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-full-i18n-18.12.1-1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHat	any	ppc64le	nodejs-devel	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-devel-18.12.1-1.module+el9.1.0.z+17326+318294bb.ppc64le.rpm
RedHat	any	x86_64	nodejs	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHat	any	x86_64	nodejs-full-i18n	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-full-i18n-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHat	any	ppc64le	nodejs	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-18.12.1-1.module+el9.1.0.z+17326+318294bb.ppc64le.rpm
RedHat	any	aarch64	nodejs-debugsource	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-debugsource-18.12.1-1.module+el9.1.0.z+17326+318294bb.aarch64.rpm
RedHat	any	x86_64	nodejs-debuginfo	< 18.12.1-1.module+el9.1.0.z+17326+318294bb	nodejs-debuginfo-18.12.1-1.module+el9.1.0.z+17326+318294bb.x86_64.rpm
RedHat	any	s390x	npm	< 8.19.2-1.18.12.1.1.module+el9.1.0.z+17326+318294bb	npm-8.19.2-1.18.12.1.1.module+el9.1.0.z+17326+318294bb.s390x.rpm
RedHat	any	noarch	nodejs-packaging-bundler	< 2021.06-4.module+el9.1.0+15718+e52ec601	nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm

Rows per page:

1-10 of 281