Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rockyRockylinux Product ErrataRLEA-2022:5139
HistoryJun 21, 2022 - 11:47 a.m.

12 bug fix and enhancement update

2022-06-2111:47:44
Rockylinux Product Errata
errata.rockylinux.org
13
node.js
update
bug fixes
enhancements
security
rocky linux 8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

78.3%

JSON

An update is available for nodejs-nodemon, nodejs, nodejs-packaging.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Bug Fix(es) and Enhancement(s):

  • nodejs:12/nodejs: rebase to last upstream release (BZ#2084651)
OSVersionArchitecturePackageVersionFilename
rocky8aarch64nodejs< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.aarch64.rpm
rocky8x86_64nodejs< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.x86_64.rpm
rocky8aarch64nodejs-debuginfo< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-debuginfo-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.aarch64.rpm
rocky8x86_64nodejs-debuginfo< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-debuginfo-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.x86_64.rpm
rocky8aarch64nodejs-debugsource< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-debugsource-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.aarch64.rpm
rocky8x86_64nodejs-debugsource< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-debugsource-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.x86_64.rpm
rocky8aarch64nodejs-devel< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-devel-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.aarch64.rpm
rocky8x86_64nodejs-devel< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-devel-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.x86_64.rpm
rocky8noarchnodejs-docs< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-docs-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.noarch.rpm
rocky8aarch64nodejs-full-i18n< 12.22.12-1.module+el8.6.0+982+9fdca2d4nodejs-full-i18n-1:12.22.12-1.module+el8.6.0+982+9fdca2d4.aarch64.rpm
Rows per page:
1-10 of 171

Related

redhat 8
nessus 46
debian 3
osv 18
openvas 26
ibm 33
nodejsblog 2
altlinux 2
photon 3
freebsd 2
redos 1
mageia 3
almalinux 4
fedora 5
rocky 4
oraclelinux 4
suse 5
hackerone 1
archlinux 3
veracode 4
cvelist 3
ubuntucve 4
github 1
prion 2
alpinelinux 2
nvd 2
redhatcve 3
nodejs 1
debiancve 1
cbl_mariner 2
cve 1
redhat
redhat
(RHSA-2022:4914) Moderate: rh-nodejs12-nodejs security, bug fix, and enhancement update
2022-06-06 06:49:48
(RHSA-2022:0041) Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update
2022-01-06 18:27:51
(RHSA-2022:7830) Moderate: nodejs:14 security update
2022-11-08 10:51:23
nessus
nessus
RHEL 7 : rh-nodejs12-nodejs (RHSA-2022:4914)
2022-06-06 00:00:00
Debian DSA-5170-1 : nodejs - security update
2022-06-28 00:00:00
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2022:0101-1)
2022-01-19 00:00:00
debian
debian
[SECURITY] [DSA 5170-1] nodejs security update
2022-06-27 18:43:09
[SECURITY] [DSA 5008-1] node-tar security update
2021-11-11 21:57:59
[SECURITY] [DLA 3237-1] node-tar security update
2022-12-12 14:15:54
osv
osv
nodejs - security update
2022-06-27 00:00:00
Moderate: nodejs:14 security update
2022-11-08 00:00:00
Moderate: nodejs:14 security update
2022-11-08 10:51:23
openvas
openvas
Debian: Security Advisory (DSA-5170-1)
2022-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0112-1)
2022-01-20 00:00:00
openSUSE: Security Advisory for nodejs14 (openSUSE-SU-2022:0112-1)
2022-02-08 00:00:00
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js.
2022-04-27 23:07:00
Security Bulletin: IBM DataPower Gateway potentially affected by various vulnerabilities in Node
2022-07-29 18:33:15
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple CVEs in Node.js
2022-04-08 14:56:49
nodejsblog
nodejsblog
January 10th 2022 Security Releases
2022-01-11 00:00:00
October 12th 2021 Security Releases
2021-10-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 16.13.2-alt1
2022-03-18 00:00:00
Security fix for the ALT Linux 10 package node version 14.18.2-alt1
2021-12-23 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0164
2022-03-22 00:00:00
Important Photon OS Security Update - PHSA-2022-0453
2022-03-23 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0164
2022-03-22 00:00:00
freebsd
freebsd
Node.js -- January 2022 Security Releases
2022-01-10 00:00:00
Node.js -- October 2021 Security Releases
2021-10-12 00:00:00
redos
redos
ROS-20220125-10
2022-01-25 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2022-02-22 23:15:16
Updated nodejs packages fix security vulnerability
2021-12-30 19:41:51
Updated nodejs-tar packages fix security vulnerability
2022-03-21 23:18:30
almalinux
almalinux
Moderate: nodejs:14 security update
2022-11-08 00:00:00
Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
Moderate: nodejs:16 security, bug fix, and enhancement update
2022-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: nodejs-14.18.3-1.fc34
2022-01-20 08:35:12
[SECURITY] Fedora 35 Update: nodejs-16.13.2-1.fc35
2022-01-20 14:55:17
[SECURITY] Fedora 33 Update: nodejs-14.18.1-1.fc33
2021-10-23 03:25:54
rocky
rocky
nodejs:14 security update
2022-11-08 10:51:23
nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
nodejs:16 security, bug fix, and enhancement update
2022-12-15 15:42:25
oraclelinux
oraclelinux
nodejs:14 security update
2022-11-15 00:00:00
nodejs:14 security, bug fix, and enhancement update
2022-02-02 00:00:00
nodejs:16 security, bug fix, and enhancement update
2022-12-16 00:00:00
suse
suse
Security update for nodejs12 (moderate)
2022-04-17 00:00:00
Security update for nodejs14 (important)
2021-12-10 00:00:00
Security update for nodejs14 (important)
2021-12-07 00:00:00
hackerone
hackerone
Node.js: Node.js Certificate Verification Bypass via String Injection
2021-12-17 14:57:13
archlinux
archlinux
[ASA-202110-4] nodejs: url request injection
2021-10-21 00:00:00
[ASA-202110-5] nodejs-lts-fermium: multiple issues
2021-10-21 00:00:00
[ASA-202110-6] nodejs-lts-erbium: multiple issues
2021-10-21 00:00:00
veracode
veracode
Improper Certificate Validation
2022-01-12 19:19:21
Arbitrary Code Execution
2022-01-12 19:19:15
Symlink Attack
2021-09-01 04:59:17
cvelist
cvelist
CVE-2021-44532
2022-02-24 18:27:01
CVE-2021-44531
2022-02-24 18:27:00
CVE-2021-44533
2022-02-24 18:27:02
ubuntucve
ubuntucve
CVE-2021-44531
2022-02-24 00:00:00
CVE-2021-44533
2022-02-24 00:00:00
CVE-2021-37712
2021-08-31 00:00:00
github
github
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
2021-08-31 16:05:17
prion
prion
Remote code execution
2021-08-31 17:15:00
Code injection
2022-02-24 19:15:00
alpinelinux
alpinelinux
CVE-2021-37712
2021-08-31 17:15:08
CVE-2021-37701
2021-08-31 17:15:07
nvd
nvd
CVE-2021-22959
2021-11-15 15:15:06
CVE-2021-44533
2022-02-24 19:15:09
redhatcve
redhatcve
CVE-2021-37701
2021-08-31 17:10:03
CVE-2021-44531
2022-01-14 19:54:26
CVE-2021-44533
2022-01-14 20:45:33
nodejs
nodejs
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
2021-08-31 16:10:17
debiancve
debiancve
CVE-2021-37712
2021-08-31 17:15:08
cbl_mariner
cbl_mariner
CVE-2021-44531 affecting package nodejs 14.18.1-1
2022-03-19 16:40:55
CVE-2021-44531 affecting package nodejs for versions less than 16.14.0-1
2022-04-09 06:52:23
cve
cve
CVE-2021-37701
2021-08-31 17:15:07

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

78.3%

JSON
Related for RLEA-2022:5139
redhat8nessus46debian3osv18openvas26ibm33nodejsblog2altlinux2photon3freebsd2redos1mageia3almalinux4fedora5rocky4oraclelinux4suse5hackerone1archlinux3veracode4cvelist3ubuntucve4github1prion2alpinelinux2nvd2redhatcve3nodejs1debiancve1cbl_mariner2cve1