First published: Mon Mar 15 2021(Updated: )
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. <br>The following packages have been upgraded to a later upstream version: rh-nodejs12-nodejs (12.21.0).<br>Security Fix(es):<br><li> nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion (CVE-2021-22883)</li> <li> nodejs: DNS rebinding in --inspect (CVE-2021-22884)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/rh-nodejs12-nodejs | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-debuginfo | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-devel | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-docs | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-npm | <6.14.11-12.21.0.1.el7 | 6.14.11-12.21.0.1.el7 |
redhat/rh-nodejs12-nodejs-debuginfo | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-devel | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-npm | <6.14.11-12.21.0.1.el7 | 6.14.11-12.21.0.1.el7 |
redhat/rh-nodejs12-nodejs | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-debuginfo | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-nodejs-devel | <12.21.0-1.el7 | 12.21.0-1.el7 |
redhat/rh-nodejs12-npm | <6.14.11-12.21.0.1.el7 | 6.14.11-12.21.0.1.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:0831 is classified as important.
To fix RHSA-2021:0831, upgrade the affected packages to version 12.21.0-1.el7 or later.
RHSA-2021:0831 affects several packages including rh-nodejs12-nodejs, rh-nodejs12-npm, and other related components.
Yes, RHSA-2021:0831 maintains strict compatibility with existing applications using the previous version.
Yes, applying RHSA-2021:0831 ensures that known vulnerabilities associated with the affected version are addressed.