Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Mageia: Security Update for Nodejs - 2020-0372 Moderate Severity

mageia
Calendar Grey September 27, 2020
Dist Mageia Esm H88
Recent updates in Node.js packages for Mageia address multiple security vulnerabilities. Full details on the patches and relevant references are provided.
The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time

Summary

The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time. It fixes several security issues and other bugs. See the upstream changelog and advisories for details.

References

- https://bugs.mageia.org/show_bug.cgi?id=25314

- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md

- https://nodejs.org/en/blog/vulnerability/december-2019-security-releases/

- https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/

- https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/

- https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/

- - https://github.com/nghttp2/nghttp2/releases/

- https://www.cve.org/CVERecord?id=CVE-2019-9511

- https://www.cve.org/CVERecord?id=CVE-2019-9512

- https://www.cve.org/CVERecord?id=CVE-2019-9513

- https://www.cve.org/CVERecord?id=CVE-2019-9514

- https://www.cve.org/CVERecord?id=CVE-2019-9515

- https://www.cve.org/CVERecord?id=CVE-2019-9516

- https://www.cve.org/CVERecord?id=CVE-2019-9517

- https://www.cve.org/CVERecord?id=CVE-2019-9518

- https://www.cve.org/CVERecord?id=CVE-2019-15604

- https://www.cve.org/CVERecord?id=CVE-2019-15605

- https://www.cve.org/CVERecord?id=CVE-2019-15606

- https://www.cve.org/CVERecord?id=CVE-2019-16775

- https://www.cve.org/CVERecord?id=CVE-2019-16776

- https://www.cve.org/CVERecord?id=CVE-2019-16777

- https://www.cve.org/CVERecord?id=CVE-2020-8174

- https://www.cve.org/CVERecord?id=CVE-2020-8252

Resolution

SRPMS

- 7/core/libuv-1.34.2-1.mga7

- 7/core/nodejs-10.22.1-9.mga7

Publication date: 27 Sep 2020
URL: https://advisories.mageia.org/MGASA-2020-0372.html
Type: security
CVE: CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, CVE-2019-15604, CVE-2019-15605, CVE-2019-15606, CVE-2019-16775, CVE-2019-16776, CVE-2019-16777, CVE-2020-8174, CVE-2020-8252

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here