RHSA-2022:6964

csafUSredhat_csaf

Red Hat Security Advisory: nodejs:16 security update

Advisory ansehen veröffentlicht 2022-10-17

An update for the nodejs:16 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-35256USmedium6.5—
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.
CVE-2022-35255UScritical9.1OT erhöht—
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. Ther…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (60)

  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debuginfo-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-debugsource-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-devel-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-docs-1:16.17.1-1.module+el8.6.0+16848+a483195a.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-docs-1:16.17.1-1.module+el8.6.0+16848+a483195a.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-full-i18n-1:16.17.1-1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-nodemon-0:2.0.19-2.module+el8.6.0+16240+7ca51420.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.noarch (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennodejs-packaging-0:25-1.module+el8.5.0+10992+fac5fe06.src (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.aarch64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.ppc64le (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.s390x (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
  • Behobennpm-1:8.15.0-1.16.17.1.1.module+el8.6.0+16848+a483195a.x86_64 (nodejs:16) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2022:6964
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan