Mageia 2021-0394: nodejs security update
Summary
Updated nodejs packages fix security vulnerability:
Node.js is vulnerable to a use after free attack where an attacker might
be able to exploit the memory corruption, to change process behavior
(CVE-2021-22930)
References
- https://bugs.mageia.org/show_bug.cgi?id=29301
- https://nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930
Resolution
MGASA-2021-0394 - Updated nodejs packages fix security vulnerability
SRPMS
- 8/core/nodejs-14.17.4-1.mga8