[ELSA-2024-1438] nodejs security update

Severity Important

Affected Packages 5

CVEs 1

[1:16.20.2-4.0.1]
- reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
Resolves: CVE-2024-22019

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.3	< 8.19.4-1.16.20.2.4.0.1.el9_3
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.3	< 16.20.2-4.0.1.el9_3
pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.3	< 16.20.2-4.0.1.el9_3
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.3	< 16.20.2-4.0.1.el9_3
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.3	< 16.20.2-4.0.1.el9_3

ID

ELSA-2024-1438

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2024-1438.html

Published

2024-03-21T00:00:00
(6 months ago)

Modified

2024-03-21T00:00:00
(6 months ago)

Rights

Other Advisories

Source	# ID	Name	URL
elsa	ELSA-2024-1438		https://linux.oracle.com/errata/ELSA-2024-1438.html
CVE	CVE-2024-22019		https://linux.oracle.com/cve/CVE-2024-22019.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.3	oraclelinux	npm	< 8.19.4-1.16.20.2.4.0.1.el9_3	oraclelinux-9.3
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.3	oraclelinux	nodejs	< 16.20.2-4.0.1.el9_3	oraclelinux-9.3
Affected	pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.3	oraclelinux	nodejs-libs	< 16.20.2-4.0.1.el9_3	oraclelinux-9.3
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.3	oraclelinux	nodejs-full-i18n	< 16.20.2-4.0.1.el9_3	oraclelinux-9.3
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.3	oraclelinux	nodejs-docs	< 16.20.2-4.0.1.el9_3	oraclelinux-9.3

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date