RHSA-2021:3073: Moderate: nodejs:12 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (12.22.3). (BZ#1978201)Security Fix(es): nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() (CVE-2021-23362) nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode (CVE-2021-27290) libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes (CVE-2021-22918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:3073?
The severity of RHSA-2021:3073 is categorized as moderate.
How do I fix RHSA-2021:3073?
To fix RHSA-2021:3073, upgrade the affected packages to their recommended versions as specified in the advisory.
Which packages are affected by RHSA-2021:3073?
RHSA-2021:3073 affects multiple packages including nodejs, nodejs-nodemon, and npm.
What is the latest version to update for RHSA-2021:3073?
The latest version to update for RHSA-2021:3073 is nodejs 12.22.3-2.module+el8.4.0+11732+c668cc9f.
Why is it important to address RHSA-2021:3073?
Addressing RHSA-2021:3073 is important to mitigate potential security vulnerabilities in Node.js applications.