Lucene search

RedHatRHSA-2024:2778

HistoryMay 09, 2024 - 5:32 a.m.

(RHSA-2024:2778) Important: nodejs:20 security update

2024-05-0905:32:10

access.redhat.com

node.js

software

update

security

c-ares

nghttp2

fetch()

denial of service

http request smuggling

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.3%

JSON

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
nodejs: CONTINUATION frames DoS (CVE-2024-27983)
nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lenodejs-devel< 20.12.2-2.module+el8.9.0+21743+0b3f1be2nodejs-devel-20.12.2-2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHatanys390xnodejs-debugsource< 20.12.2-2.module+el8.9.0+21743+0b3f1be2nodejs-debugsource-20.12.2-2.module+el8.9.0+21743+0b3f1be2.s390x.rpm
RedHatanyppc64lenpm< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHatanys390xnodejs-devel< 20.12.2-2.module+el8.9.0+21743+0b3f1be2nodejs-devel-20.12.2-2.module+el8.9.0+21743+0b3f1be2.s390x.rpm
RedHatanyx86_64npm< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.x86_64.rpm
RedHatanyppc64lenodejs< 20.12.2-2.module+el8.9.0+21743+0b3f1be2nodejs-20.12.2-2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHatanynoarchnodejs-packaging-bundler< 2021.06-4.module+el8.9.0+19519+e25b965anodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm
RedHatanynoarchnodejs-nodemon< 3.0.1-1.module+el8.9.0+20473+c4e3d824nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm
RedHatanyaarch64npm< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.aarch64.rpm
RedHatanyx86_64nodejs-debuginfo< 20.12.2-2.module+el8.9.0+21743+0b3f1be2nodejs-debuginfo-20.12.2-2.module+el8.9.0+21743+0b3f1be2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	nodejs-devel	< 20.12.2-2.module+el8.9.0+21743+0b3f1be2	nodejs-devel-20.12.2-2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHat	any	s390x	nodejs-debugsource	< 20.12.2-2.module+el8.9.0+21743+0b3f1be2	nodejs-debugsource-20.12.2-2.module+el8.9.0+21743+0b3f1be2.s390x.rpm
RedHat	any	ppc64le	npm	< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2	npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHat	any	s390x	nodejs-devel	< 20.12.2-2.module+el8.9.0+21743+0b3f1be2	nodejs-devel-20.12.2-2.module+el8.9.0+21743+0b3f1be2.s390x.rpm
RedHat	any	x86_64	npm	< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2	npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.x86_64.rpm
RedHat	any	ppc64le	nodejs	< 20.12.2-2.module+el8.9.0+21743+0b3f1be2	nodejs-20.12.2-2.module+el8.9.0+21743+0b3f1be2.ppc64le.rpm
RedHat	any	noarch	nodejs-packaging-bundler	< 2021.06-4.module+el8.9.0+19519+e25b965a	nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a.noarch.rpm
RedHat	any	noarch	nodejs-nodemon	< 3.0.1-1.module+el8.9.0+20473+c4e3d824	nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824.noarch.rpm
RedHat	any	aarch64	npm	< 10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2	npm-10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2.aarch64.rpm
RedHat	any	x86_64	nodejs-debuginfo	< 20.12.2-2.module+el8.9.0+21743+0b3f1be2	nodejs-debuginfo-20.12.2-2.module+el8.9.0+21743+0b3f1be2.x86_64.rpm

Rows per page:

1-10 of 281