DSA-5326: -1 nodejs -- security update

Published Jan 24, 2023

Updated

Multiple vulnerabilities were discovered in Node.js, which could result in HTTP request smuggling, bypass of host IP address validation and weak randomness setup.

Affected Software

2 affected components

debian/nodejs

Event History

Jan 24, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-32212
CVE-2022-32213
CVE-2022-32214
CVE-2022-32215
CVE-2022-35255
CVE-2022-35256
CVE-2022-43548

Frequently Asked Questions

Which security issues are addressed by this update?

The update addresses vulnerabilities tracked as CVE-2022-32212, CVE-2022-32213, and CVE-2022-32214. Their reported impacts include HTTP request smuggling, bypass of host IP address validation, and weak randomness setup.

How can I determine whether this advisory applies to my systems?

Review systems running the Debian nodejs package and compare their installed package state with the security update made available for DSA-5326. The supplied data does not identify affected or fixed package versions.

DSA-5326: -1 nodejs -- security update

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which security issues are addressed by this update?

How can I determine whether this advisory applies to my systems?

Company

Resources

Contact

Frequently Asked Questions

Which security issues are addressed by this update?

How can I determine whether this advisory applies to my systems?