Summary
nodejs
[1:10.24.0-1]
- Resolves: RHBZ#1932373, RHBZ#1932426
- Resolves CVE-2021-22883 and CVE-2021-22884
- remove -debug-nghttp2 flag (1930775)
- remove ini patch merged upstream
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | nodejs | 1:10.24.0-1.module+el8.3.0+9671+154373c8 |
| Oracle Linux · 8 | nodejs-devel | 1:10.24.0-1.module+el8.3.0+9671+154373c8 |
| Oracle Linux · 8 | nodejs-docs | 1:10.24.0-1.module+el8.3.0+9671+154373c8 |
| Oracle Linux · 8 | nodejs-full-i18n | 1:10.24.0-1.module+el8.3.0+9671+154373c8 |
| Oracle Linux · 8 | nodejs-nodemon | 0:1.18.3-1.module+el8.1.0+5392+4d6b561f |
| Oracle Linux · 8 | nodejs-packaging | 0:17-3.module+el8.1.0+5392+4d6b561f |
| Oracle Linux · 8 | npm | 1:6.14.11-1.10.24.0.1.module+el8.3.0+9671+154373c8 |
Vulnerabilities 2
-
Unscored —CVE-2021-22883 EPSS 77%
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connect…
-
Unscored —CVE-2021-22884 EPSS 37%
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes …