First published: Mon Mar 18 2024(Updated: )
Important: rh-nodejs14 security update
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Red Hat Software Collections (for RHEL Server for IBM Power LE) | ||
redhat/rh-nodejs14-nodejs | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-debuginfo | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-devel | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-docs | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-full-i18n | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-npm | <6.14.18-14.21.3.6.el7 | 6.14.18-14.21.3.6.el7 |
redhat/rh-nodejs14-nodejs-debuginfo | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-devel | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-full-i18n | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-npm | <6.14.18-14.21.3.6.el7 | 6.14.18-14.21.3.6.el7 |
redhat/rh-nodejs14-nodejs | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-debuginfo | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-devel | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-nodejs-full-i18n | <14.21.3-6.el7 | 14.21.3-6.el7 |
redhat/rh-nodejs14-npm | <6.14.18-14.21.3.6.el7 | 6.14.18-14.21.3.6.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2024:1354 is classified as important.
To fix RHSA-2024:1354, update the affected rh-nodejs14-nodejs package to version 14.21.3-6.el7.
The affected packages in RHSA-2024:1354 include rh-nodejs14-nodejs, rh-nodejs14-nodejs-devel, and rh-nodejs14-npm among others.
RHSA-2024:1354 addresses a vulnerability related to reading unprocessed HTTP requests with unbounded chunk extensions.
RHSA-2024:1354 specifically affects rh-nodejs14 and does not apply to all versions of Node.js.