Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39: FEDORA-2023-dbe64661af High: Node.js 18.18.2 Update

fedora
Calendar Grey November 3, 2023
Dist Fedora Esm H88
Node.js version 18.18.2 for Fedora 39 addresses significant security vulnerabilities, particularly concerning nghttp2 and undici, making this update essential.
## 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSS This is a security release

Summary

Node.js is a platform built on Chrome's JavaScript runtime \

for easily building fast, scalable network applications. \

Node.js uses an event-driven, non-blocking I/O model that \

makes it lightweight and efficient, perfect for data-intensive \

real-time applications that run across distributed devices.}

Update Information:

## 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSS This is a security release. ### Notable Changes The following CVEs are fixed in this release: * [CVE-2023-44487](-bin/cvename.cgi?name=CVE-2023-44487): `nghttp2` Security Release (High) * [CVE-2023-45143](- bin/cvename.cgi?name=CVE-2023-45143): `undici` Security Release (High) * [CVE-2023-38552](-bin/cvename.cgi?name=CVE-2023-38552): Integrity checks according to policies can be circumvented (Medium) * [CVE-2023-39333](-bin/cvename.cgi?name=CVE-2023-39333): Code injection via WebAssembly export names (Low) More detailed information on each of the vulnerabilities can be found in [October 2023 Security Releases](- releases/) blog post.

Topics%20covered

Topics Covered

security advisory software update Fedora nodejs high threat nghttp2 undici

Change Log

* Mon Oct 16 2023 Stephen Gallagher - 1:18.18.2-1 - Update to 18.18.2

References

Fedora Update Notification FEDORA-2023-dbe64661af 2023-11-03 18:20:20.955346 Name : nodejs18 Product : Fedora 39 Version : 18.18.2 Release : 1.fc39 URL : https://nodejs.org/en/ Summary : JavaScript runtime Description : Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed devices.}

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-dbe64661af' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: nodejs18
Product: Fedora 39
Version: 18.18.2
Release: 1.fc39
URL: https://nodejs.org/en/
Summary: JavaScript runtime

Topics%20covered

Topics Covered

security advisory software update Fedora nodejs high threat nghttp2 undici

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here