Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 24: Node.js-SQLite3 Update Critical: Man-In-The-Middle Issue

Update Node.js to the 5.x stable branch This update also includes a fix for a man-in-the-middle vulnerability in npm.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-6ab2d29fba 2016-04-06 14:05:38.729188 -------------------------------------------------------------------------------- Name : nodejs-sqlite3 Product : Fedora 24 Version : 3.1.2 Release : 3.fc24 URL : https://github.com/TryGhost/node-sqlite3 Summary : Asynchronous, non-blocking SQLite3 bindings for Node.js Description : Asynchronous, non-blocking SQLite3 bindings for Node.js. -------------------------------------------------------------------------------- Update Information: Update Node.js to the 5.x stable branch This update also includes a fix for a man-in-the-middle vulnerability in npm. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1300103 - nodejs-bl-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1300103 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nodejs-sqlite3' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Upgrade Node.js on Fedora 24 to enhance security against man-in-the-middle attacks in npm by following simple terminal commands and procedures. Node.js Patch, Fedora Security, Software Vulnerability, npm Update. . Severity: Critical. LinuxSecurity.com Team

Apr 06, 2016 •Critical Fedora