Red Hat Security Advisory: nodejs:16 security update
An update for the nodejs:16 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-35256US | medium6.5 | — | ||
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling. | ||||
| CVE-2022-35255US | critical9.1OT elevated | — | ||
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. Ther… | ||||
references
External citations — patches, advisories, analysis.
remediations (60)
- Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-docs-1:16.17.1-1.module+el8.6.0+16848+a483195a.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-docs-1:16.17.1-1.module+el8.6.0+16848+a483195a.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964 - Fixednpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:6964
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan