ALSA-2021:0735

See a problem?

Source

https://errata.almalinux.org/8/ALSA-2021-0735.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:0735.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2021:0735

Related

Published

2021-03-04T15:17:39Z

Modified

2021-03-04T15:17:39Z

Summary

Important: nodejs:10 security update

Details

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (10.24.0).

Security Fix(es):

nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion (CVE-2021-22883)
nodejs: DNS rebinding in --inspect (CVE-2021-22884)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / nodejs

Package

Name: nodejs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.5.0+81+7dbe79d3

AlmaLinux:8 / nodejs

Package

Name: nodejs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs

Package

Name: nodejs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.4.0+2224+b07ac28e

AlmaLinux:8 / nodejs-devel

Package

Name: nodejs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.4.0+2224+b07ac28e

AlmaLinux:8 / nodejs-devel

Package

Name: nodejs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs-devel

Package

Name: nodejs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.5.0+81+7dbe79d3

AlmaLinux:8 / nodejs-docs

Package

Name: nodejs-docs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs-full-i18n

Package

Name: nodejs-full-i18n

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.5.0+81+7dbe79d3

AlmaLinux:8 / nodejs-full-i18n

Package

Name: nodejs-full-i18n

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs-full-i18n

Package

Name: nodejs-full-i18n

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:10.24.0-1.module_el8.4.0+2224+b07ac28e

AlmaLinux:8 / nodejs-nodemon

Package

Name: nodejs-nodemon

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.3-1.module_el8.3.0+2023+d2377ea3

AlmaLinux:8 / nodejs-nodemon

Package

Name: nodejs-nodemon

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.3-1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.4.0+2224+b07ac28e

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.4.0+2521+c668cc9f

AlmaLinux:8 / nodejs-packaging

Package

Name: nodejs-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17-3.module_el8.3.0+2023+d2377ea3

AlmaLinux:8 / npm

Package

Name: npm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:6.14.11-1.10.24.0.1.module_el8.5.0+81+7dbe79d3

AlmaLinux:8 / npm

Package

Name: npm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:6.14.11-1.10.24.0.1.module_el8.3.0+2047+b07ac28e

AlmaLinux:8 / npm

Package

Name: npm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:6.14.11-1.10.24.0.1.module_el8.4.0+2224+b07ac28e