RHSA-2022:7044: Moderate: rh-nodejs14-nodejs security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): nodejs: Improper handling of URI Subject Alternative Names (CVE-2021-44531) nodejs: Certificate Verification Bypass via String Injection (CVE-2021-44532) nodejs: Incorrect handling of certificate subject and issuer fields (CVE-2021-44533) minimist: prototype pollution (CVE-2021-44906) nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256) nodejs: Prototype pollution via console.table properties (CVE-2022-21824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7044?
The severity of RHSA-2022:7044 is classified as important, indicating a significant impact on security if not addressed.
How do I fix RHSA-2022:7044?
To fix RHSA-2022:7044, update the affected Node.js packages to version 14.20.1-2.el7 or higher.
What vulnerabilities are addressed by RHSA-2022:7044?
RHSA-2022:7044 addresses vulnerabilities including improper handling of URI Subject Alternative Names (CVE-2021-44531) and other certificate verification issues.
Which Node.js versions are affected by RHSA-2022:7044?
RHSA-2022:7044 affects Node.js versions prior to 14.20.1-2.el7.
Is RHSA-2022:7044 related to security fixes?
Yes, RHSA-2022:7044 contains security fixes aimed at improving the handling of certificates and enhancing overall application security.