RedHatRHSA-2024:2853

HistoryMay 15, 2024 - 10:54 a.m.

(RHSA-2024:2853) Important: nodejs:20 security update

2024-05-1510:54:45

access.redhat.com

node.js

security update

c-ares

nghttp2

fetch()

denial of service

http request smuggling

cvss score

references section

unix

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

JSON

Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
nodejs: CONTINUATION frames DoS (CVE-2024-27983)
nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchnodejs-docs< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-docs-20.12.2-2.module+el9.4.0+21731+46b5b8a7.noarch.rpm
RedHatanyppc64lenodejs-debugsource< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-debugsource-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm
RedHatanys390xnodejs-debuginfo< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-debuginfo-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHatanys390xnodejs-debugsource< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-debugsource-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHatanynoarchnodejs-nodemon< 3.0.1-1.module+el9.3.0.z+20478+84a9f781nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm
RedHatanyx86_64nodejs-devel< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-devel-20.12.2-2.module+el9.4.0+21731+46b5b8a7.x86_64.rpm
RedHatanyppc64lenodejs-full-i18n< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-full-i18n-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm
RedHatanyaarch64nodejs-full-i18n< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-full-i18n-20.12.2-2.module+el9.4.0+21731+46b5b8a7.aarch64.rpm
RedHatanys390xnodejs< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHatanyppc64lenodejs-devel< 20.12.2-2.module+el9.4.0+21731+46b5b8a7nodejs-devel-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	nodejs-docs	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-docs-20.12.2-2.module+el9.4.0+21731+46b5b8a7.noarch.rpm
RedHat	any	ppc64le	nodejs-debugsource	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-debugsource-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm
RedHat	any	s390x	nodejs-debuginfo	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-debuginfo-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHat	any	s390x	nodejs-debugsource	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-debugsource-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHat	any	noarch	nodejs-nodemon	< 3.0.1-1.module+el9.3.0.z+20478+84a9f781	nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781.noarch.rpm
RedHat	any	x86_64	nodejs-devel	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-devel-20.12.2-2.module+el9.4.0+21731+46b5b8a7.x86_64.rpm
RedHat	any	ppc64le	nodejs-full-i18n	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-full-i18n-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm
RedHat	any	aarch64	nodejs-full-i18n	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-full-i18n-20.12.2-2.module+el9.4.0+21731+46b5b8a7.aarch64.rpm
RedHat	any	s390x	nodejs	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-20.12.2-2.module+el9.4.0+21731+46b5b8a7.s390x.rpm
RedHat	any	ppc64le	nodejs-devel	< 20.12.2-2.module+el9.4.0+21731+46b5b8a7	nodejs-devel-20.12.2-2.module+el9.4.0+21731+46b5b8a7.ppc64le.rpm

Rows per page:

1-10 of 281

(RHSA-2024:2853) Important: nodejs:20 security update

Related