Headline

RHSA-2023:4330: Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update

An update for the nodejs:18 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2023-30581: No description is available for this CVE.
CVE-2023-30588: No description is available for this CVE.
CVE-2023-30589: The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20
CVE-2023-30590: No description is available for this CVE.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #nodejs #js #ibm #sap

Red Hat Enterprise Linux for x86_64 9

SRPM

nodejs-18.16.1-1.module+el9.2.0.z+19424+78951f07.src.rpm

SHA-256: 48db4ea8831d7e331f64aff57e35749081ddf993348aa16a9d8f21421f475910

nodejs-nodemon-2.0.20-2.module+el9.2.0.z+18497+a402347c.src.rpm

SHA-256: f42eebe45b0c22cb65f85b27b479549c77cd440a31691424666df533c698a663

nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.src.rpm

SHA-256: fd4cb1826d0e63749d7ca229842c4449088dc3d7c3e3fb0704d722c66d20aff1

x86_64

nodejs-18.16.1-1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: 285f888feda725fe5bdcdcbe53e5c1d0e29b3070fe35fc988a5505f126e7974d

nodejs-debuginfo-18.16.1-1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: 9f0b53c6d60e519687081783c36c137f05bb820cdd2a187f559feed1f3e46318

nodejs-debugsource-18.16.1-1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: d2290f882aac0d113c54fa4519577f2097c1c35a8bcdff9263c6766c9e5c24e1

nodejs-devel-18.16.1-1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: 44522b63367fe406c9846d7db7c7c20398bec890be7a535383eaa52057111c7c

nodejs-docs-18.16.1-1.module+el9.2.0.z+19424+78951f07.noarch.rpm

SHA-256: b317634f2861a99b03e8ef75fb224f40bf41e5fdcd464d059023c1bf4fc2a5e5

nodejs-full-i18n-18.16.1-1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: 4430ba4944964d929fe988caca3c459123543a008e89015a77c37caaba6f2dd6

nodejs-nodemon-2.0.20-2.module+el9.2.0.z+18497+a402347c.noarch.rpm

SHA-256: c03444dc53c6326a1e94064ad0b1f2ec4d8bd8bb8ceacd48e1dd8337f9ad5340

nodejs-packaging-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm

SHA-256: 68464b58e953276d3e4ec6478cc7cd656b0bb7692b6232baeb53177a0dfc162d

nodejs-packaging-bundler-2021.06-4.module+el9.1.0+15718+e52ec601.noarch.rpm

SHA-256: b35bba697b10222e6e87e817a7feabe5802805e1c05fbbcf3d312dc532836b43

npm-9.5.1-1.18.16.1.1.module+el9.2.0.z+19424+78951f07.x86_64.rpm

SHA-256: 5f25839b7993b957b9dff6871ebfb3ecdcd8c81a1eabf2ca04d28c95bb95ff6d

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2