Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Mageia: Security Update for Nodejs - 2020-0372 Moderate Severity

mageia
Calendar Grey September 27, 2020
Scroller Mageia
Recent updates in Node.js packages for Mageia address multiple security vulnerabilities. Full details on the patches and relevant references are provided.
The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time

Summary

The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time. It fixes several security issues and other bugs. See the upstream changelog and advisories for details.

References

- https://bugs.mageia.org/show_bug.cgi?id=25314

- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md

- https://nodejs.org/en/blog/vulnerability/december-2019-security-releases/

- https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/

- https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/

- https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/

- - https://github.com/nghttp2/nghttp2/releases/

- https://www.cve.org/CVERecord?id=CVE-2019-9511

- https://www.cve.org/CVERecord?id=CVE-2019-9512

- https://www.cve.org/CVERecord?id=CVE-2019-9513

- https://www.cve.org/CVERecord?id=CVE-2019-9514

- https://www.cve.org/CVERecord?id=CVE-2019-9515

- https://www.cve.org/CVERecord?id=CVE-2019-9516

- https://www.cve.org/CVERecord?id=CVE-2019-9517

- https://www.cve.org/CVERecord?id=CVE-2019-9518

- https://www.cve.org/CVERecord?id=CVE-2019-15604

- https://www.cve.org/CVERecord?id=CVE-2019-15605

- https://www.cve.org/CVERecord?id=CVE-2019-15606

- https://www.cve.org/CVERecord?id=CVE-2019-16775

- https://www.cve.org/CVERecord?id=CVE-2019-16776

- https://www.cve.org/CVERecord?id=CVE-2019-16777

- https://www.cve.org/CVERecord?id=CVE-2020-8174

- https://www.cve.org/CVERecord?id=CVE-2020-8252

Topics%20covered

Topics Covered

security advisory security issue update nodejs Mageia

Resolution

SRPMS

- 7/core/libuv-1.34.2-1.mga7

- 7/core/nodejs-10.22.1-9.mga7

Publication date: 27 Sep 2020
URL: https://advisories.mageia.org/MGASA-2020-0372.html
Type: security
CVE: CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, CVE-2019-15604, CVE-2019-15605, CVE-2019-15606, CVE-2019-16775, CVE-2019-16776, CVE-2019-16777, CVE-2020-8174, CVE-2020-8252

Topics%20covered

Topics Covered

security advisory security issue update nodejs Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.