Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Rocky Linux 8 RLSA-2024:1510 critical: Node.js DoS attacks update

rocky
Calendar Grey March 27, 2024
Rockylinux Esm H88
The latest Node.js 18 upgrade for Rocky Linux tackles significant security vulnerabilities that could impact system performance and integrity.
Important: nodejs:18 security update

Summary

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory critical DoS security fix critical update important dos attack code injection nodejs rocky linux Rocky Linux

RPMs

nodejs-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.aarch64.rpm

nodejs-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.src.rpm

nodejs-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.x86_64.rpm

nodejs-debuginfo-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.aarch64.rpm

nodejs-debuginfo-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.x86_64.rpm

nodejs-debugsource-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.aarch64.rpm

nodejs-debugsource-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.x86_64.rpm

nodejs-devel-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.aarch64.rpm

nodejs-devel-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.x86_64.rpm

nodejs-docs-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.noarch.rpm

nodejs-full-i18n-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.aarch64.rpm

nodejs-full-i18n-1:18.19.1-1.module+el8.9.0+1768+6b454dc0.x86_64.rpm

nodejs-nodemon-0:3.0.1-1.module+el8.8.0+1459+02651ab6.noarch.rpm

nodejs-nodemon-0:3.0.1-1.module+el8.8.0+1459+02651ab6.src.rpm

nodejs-packaging-0:2021.06-4.module+el8.7.0+1072+5b168780.noarch.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2023-46809

https://www.cve.org/CVERecord?id=CVE-2024-21892

https://www.cve.org/CVERecord?id=CVE-2024-22019

Severity
important

Name: RLSA-2024:1510
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2264569

https://bugzilla.redhat.com/show_bug.cgi?id=2264574

https://bugzilla.redhat.com/show_bug.cgi?id=2264582


Topics%20covered

Topics Covered

security advisory critical DoS security fix critical update important dos attack code injection nodejs rocky linux Rocky Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here