Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Rocky Linux 9 RLSA-2024:6147 Moderate: Node.js Network Threat Fixes

rocky
Calendar Grey September 17, 2024
Rockylinux Esm H88
Recent update for Node.js on Rocky Linux enhances security by addressing critical vulnerabilities related to denial of service and network access restrictions. Key information enclosed.
Moderate: nodejs:18 security update

Summary

An update is available for module.nodejs-packaging, nodejs-nodemon, nodejs-packaging, module.nodejs-nodemon, nodejs, module.nodejs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory denial of service Node.js Rocky Linux network import restriction

RPMs

nodejs-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.aarch64.rpm

nodejs-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.ppc64le.rpm

nodejs-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.s390x.rpm

nodejs-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.src.rpm

nodejs-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.x86_64.rpm

nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.aarch64.rpm

nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.ppc64le.rpm

nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.s390x.rpm

nodejs-debuginfo-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.x86_64.rpm

nodejs-debugsource-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.aarch64.rpm

nodejs-debugsource-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.ppc64le.rpm

nodejs-debugsource-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.s390x.rpm

nodejs-debugsource-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.x86_64.rpm

nodejs-devel-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.aarch64.rpm

nodejs-devel-1:18.20.4-1.module+el9.4.0+25542+b1e8296f.ppc64le.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2024-22020

https://www.cve.org/CVERecord?id=CVE-2024-28863

Name: RLSA-2024:6147
Affected Products: Rocky Linux 9

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2293200

https://bugzilla.redhat.com/show_bug.cgi?id=2296417


Topics%20covered

Topics Covered

security advisory denial of service Node.js Rocky Linux network import restriction

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here