nodejs-16.17.1-1.el9

エラータID: AXSA:2022-4091:01

Release date: 
Friday, November 18, 2022 - 08:32
Subject: 
nodejs-16.17.1-1.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (16.17.1).

Security Fix(es):

* nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-35255
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-35256
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2022-35255
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-35256
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Additional Info: 

N/A

Download: 

SRPMS
  1. nodejs-16.17.1-1.el9.src.rpm
    MD5: 442da55d0b6959cccf9469dade546a86
    SHA-256: 896d561898d618528558322992cecc4fcd5ab237c4b5576f72bfbc22d39dfda6
    Size: 70.24 MB

Asianux Server 9 for x86_64
  1. nodejs-16.17.1-1.el9.x86_64.rpm
    MD5: 953ff3719f5f9c25eadeb1c48f5c059f
    SHA-256: fa367936fdcf0e0933b231bd76c72b880e6955191a6cb7e211a948009a6ccbf1
    Size: 100.01 kB
  2. nodejs-docs-16.17.1-1.el9.noarch.rpm
    MD5: ce0b7f22ca86e6b0cb8e0cde1eca4a7f
    SHA-256: 412f24ab7d9109415d89ee2169986d1282ef5e876cd607451836cb647ce2e3ed
    Size: 6.98 MB
  3. nodejs-full-i18n-16.17.1-1.el9.x86_64.rpm
    MD5: d3059eee642e91602c36f5569ad3930e
    SHA-256: 3154736ffac796596c59b1f7637238472bca5c3c31206d1e18f68e309457e6f6
    Size: 8.22 MB
  4. nodejs-libs-16.17.1-1.el9.x86_64.rpm
    MD5: f24af132bb54ce87205928521af96866
    SHA-256: a4ea3e742a169ff25939c37bfaa1c49775c43485710e3894bf4ec0e0751e8276
    Size: 14.40 MB
  5. npm-8.15.0-1.16.17.1.1.el9.x86_64.rpm
    MD5: 98a0708591bd91ef17c238174a16d8fe
    SHA-256: df9d78501b1dba3d6345a5d1c2079f8496e4cded767d8fc29da5f6d40ace995b
    Size: 1.73 MB
  6. nodejs-libs-16.17.1-1.el9.i686.rpm
    MD5: 9c79da7bd7979be1743affae1952463c
    SHA-256: 13d6edb4d2a49b48d760f1f066c8d5f735a9a5aa031b1e0b6a448b9aa2a73e7d
    Size: 15.05 MB