[RHSA-2021:3074] nodejs:14 security, bug fix, and enhancement update
Severity
Moderate
Affected Packages
19
CVEs
3
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: nodejs (14.17.3). (BZ#1978203)
Security Fix(es):
nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() (CVE-2021-23362)
nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode (CVE-2021-27290)
libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes (CVE-2021-22918)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- ID
- RHSA-2021:3074
- Severity
- moderate
- URL
- https://access.redhat.com/errata/RHSA-2021:3074
- Published
-
2021-08-10T00:00:00
(3 years ago) - Modified
-
2021-08-10T00:00:00
(3 years ago) - Rights
- Copyright 2021 Red Hat, Inc.
- Other Advisories
-
-
ALAS2-2024-2410
-
ALPINE:CVE-2021-22918
-
ALPINE:CVE-2021-27290
-
ALSA-2021:3073
-
ALSA-2021:3074
-
ALSA-2021:3075
-
ASA-202107-13
-
ASA-202107-36
-
DSA-4936-1
-
ELSA-2021-3073
-
ELSA-2021-3074
-
ELSA-2021-3075
-
FREEBSD:C174118E-1B11-11EC-9D9D-0022489AD614
-
GLSA-202401-23
-
GLSA-202405-29
-
MS:CVE-2021-22918
-
NPM:GHSA-43F8-2H32-F4CJ
-
NPM:GHSA-VX3P-948G-6VHQ
-
openSUSE-SU-2021:1059-1
-
openSUSE-SU-2021:1060-1
-
openSUSE-SU-2021:1061-1
-
openSUSE-SU-2021:1113-1
-
openSUSE-SU-2021:2327-1
-
openSUSE-SU-2021:2353-1
-
openSUSE-SU-2021:2354-1
-
openSUSE-SU-2021:2618-1
-
RHSA-2021:3073
-
RHSA-2021:3075
-
RLSA-2021:3073
-
RLSA-2021:3074
-
RLSA-2021:3075
-
SUSE-SU-2021:2319-1
-
SUSE-SU-2021:2323-1
-
SUSE-SU-2021:2326-1
-
SUSE-SU-2021:2327-1
-
SUSE-SU-2021:2353-1
-
SUSE-SU-2021:2354-1
-
SUSE-SU-2021:2618-1
-
SUSE-SU-2021:2620-1
-
USN-5007-1
-
USN-5216-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| Bugzilla | 1941471 |
|
|
| Bugzilla | 1943208 |
|
|
| Bugzilla | 1979338 |
|
|
| RHSA | RHSA-2021:3074 |
|
|
| CVE | CVE-2021-22918 |
|
|
| CVE | CVE-2021-23362 |
|
|
| CVE | CVE-2021-27290 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/redhat/npm?arch=x86_64&distro=redhat-8.4 | redhat |
 npm
|
< 6.14.13-1.14.17.3.2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | x86_64 | |
| Affected | pkg:rpm/redhat/npm?arch=s390x&distro=redhat-8.4 | redhat |
npm
|
< 6.14.13-1.14.17.3.2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | s390x | |
| Affected | pkg:rpm/redhat/npm?arch=ppc64le&distro=redhat-8.4 | redhat |
npm
|
< 6.14.13-1.14.17.3.2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | ppc64le | |
| Affected | pkg:rpm/redhat/npm?arch=aarch64&distro=redhat-8.4 | redhat |
npm
|
< 6.14.13-1.14.17.3.2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | aarch64 | |
| Affected | pkg:rpm/redhat/nodejs?arch=x86_64&distro=redhat-8.4 | redhat |
nodejs
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | x86_64 | |
| Affected | pkg:rpm/redhat/nodejs?arch=s390x&distro=redhat-8.4 | redhat |
nodejs
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | s390x | |
| Affected | pkg:rpm/redhat/nodejs?arch=ppc64le&distro=redhat-8.4 | redhat |
nodejs
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | ppc64le | |
| Affected | pkg:rpm/redhat/nodejs?arch=aarch64&distro=redhat-8.4 | redhat |
nodejs
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | aarch64 | |
| Affected | pkg:rpm/redhat/nodejs-packaging?distro=redhat-8.3 | redhat |
nodejs-packaging
|
< 23-3.module+el8.3.0+6519+9f98ed83 | redhat-8.3 | ||
| Affected | pkg:rpm/redhat/nodejs-nodemon?distro=redhat-8.3 | redhat |
nodejs-nodemon
|
< 2.0.3-1.module+el8.3.0+6519+9f98ed83 | redhat-8.3 | ||
| Affected | pkg:rpm/redhat/nodejs-full-i18n?arch=x86_64&distro=redhat-8.4 | redhat |
nodejs-full-i18n
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | x86_64 | |
| Affected | pkg:rpm/redhat/nodejs-full-i18n?arch=s390x&distro=redhat-8.4 | redhat |
nodejs-full-i18n
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | s390x | |
| Affected | pkg:rpm/redhat/nodejs-full-i18n?arch=ppc64le&distro=redhat-8.4 | redhat |
nodejs-full-i18n
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | ppc64le | |
| Affected | pkg:rpm/redhat/nodejs-full-i18n?arch=aarch64&distro=redhat-8.4 | redhat |
nodejs-full-i18n
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | aarch64 | |
| Affected | pkg:rpm/redhat/nodejs-docs?distro=redhat-8.4 | redhat |
nodejs-docs
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | ||
| Affected | pkg:rpm/redhat/nodejs-devel?arch=x86_64&distro=redhat-8.4 | redhat |
nodejs-devel
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | x86_64 | |
| Affected | pkg:rpm/redhat/nodejs-devel?arch=s390x&distro=redhat-8.4 | redhat |
nodejs-devel
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | s390x | |
| Affected | pkg:rpm/redhat/nodejs-devel?arch=ppc64le&distro=redhat-8.4 | redhat |
nodejs-devel
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | ppc64le | |
| Affected | pkg:rpm/redhat/nodejs-devel?arch=aarch64&distro=redhat-8.4 | redhat |
nodejs-devel
|
< 14.17.3-2.module+el8.4.0+11738+3bd42762 | redhat-8.4 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |