nodejs:10 security update

🗓️ 25 Feb 2020 07:57:02Reported by Rockylinux Product ErrataType

Node.js 10 security update affecting Rocky Linux 8. Contains upgrades for nodejs and npm packages. Fixes HTTP request smuggling, assertion triggering, and other vulnerabilities

Reporter	Title	Published	Views	Family All 383
FreeBSD	Node.js -- multiple vulnerabilities	6 Feb 202000:00	–	freebsd
FreeBSD	NPM -- Multiple vulnerabilities	18 Dec 201900:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affects IBM App Connect Enterprise V11	6 May 202011:05	–	ibm
IBM Security Bulletins	Security Bulletin: Version 10.16.3 of Node.js included in IBM Cloud Event Management 2.5.0 has several security vulnerabilities.	16 Apr 202005:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management	21 Jul 202213:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in npm affects IBM VM Recovery Manager HA	30 Jul 202121:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by multiple Node.js vulnerabilities	11 Jun 202016:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities.	15 Sep 202009:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace	3 Nov 202015:37	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Rocky Linux	8	any	nodejs-nodemon	0:1.18.3-1.module+el8.3.0+101+f84c7154	nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm
Rocky Linux	8	any	nodejs-packaging	0:17-3.module+el8.3.0+101+f84c7154	nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm

25 Feb 2020 07:57Current

0.1Low risk

Vulners AI Score0.1

CVSS 27.5

CVSS 3.17.7 - 9.8

EPSS0.32252