ALSA-2020:1293

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2020-1293.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2020:1293.json

JSON Data

https://api.test.osv.dev/v1/vulns/ALSA-2020:1293

Related

CVE-2020-10531

Published

2020-04-02T07:23:16Z

Modified

2020-04-02T07:23:16Z

Summary

Important: nodejs:12 security update

Details

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / nodejs-nodemon

Package

Name: nodejs-nodemon

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.3-1.module_el8.3.0+2023+d2377ea3

AlmaLinux:8 / nodejs-nodemon

Package

Name: nodejs-nodemon

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.3-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.4.0+2224+b07ac28e

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.4.0+2521+c668cc9f

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.3.0+2023+d2377ea3