rh-nodejs14-nodejs-14.21.3-5.el7

エラータID: AXSA:2024-7339:01

リリース日: 
2024/01/31 Wednesday - 17:01
題名: 
rh-nodejs14-nodejs-14.21.3-5.el7
影響のあるチャネル: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* rh-nodejs14-nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are
vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption)
because request cancellation can reset many streams quickly, as exploited in the
wild in August through October 2023.

解決策: 

Update packages.

追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rh-nodejs14-nodejs-14.21.3-5.el7.src.rpm
    MD5: 991084f736f5eedd61004f9676dbf70b
    SHA-256: 923d14238f83d157dbce231225019151fa50f433e21ceb1fd96608cb210cddf5
    Size: 68.16 MB

Asianux Server 7 for x86_64
  1. rh-nodejs14-nodejs-14.21.3-5.el7.x86_64.rpm
    MD5: 2681220d8b1e77a1f023ea8c1dc4da58
    SHA-256: 8452fe2407078c8e3904b29850f599a07b41d5a9d9f877fa51d1bf47e9823bd6
    Size: 17.96 MB
  2. rh-nodejs14-nodejs-devel-14.21.3-5.el7.x86_64.rpm
    MD5: 081ea13487a5fb88e0d1625e7d0daec9
    SHA-256: ecaef91df45222a459cd88139cbc834b4d4dd3a61a616ce6f46cdae940f3bc34
    Size: 237.62 kB
  3. rh-nodejs14-nodejs-docs-14.21.3-5.el7.noarch.rpm
    MD5: c32495e435dfa85ffe45248545a3bba4
    SHA-256: 2d4b0c81650b51806bbf885f6910ef16481af6ec07044dc6469291378fd0f87b
    Size: 4.11 MB
  4. rh-nodejs14-nodejs-full-i18n-14.21.3-5.el7.x86_64.rpm
    MD5: fb3a25c7cd0e3e49821af06e01ddf38f
    SHA-256: 5f1ec42165c2930f30235eb5aab9cac2a1f04b0923687dd07cd36dc405046800
    Size: 7.86 MB
  5. rh-nodejs14-npm-6.14.18-14.21.3.5.el7.x86_64.rpm
    MD5: b538575a73628c3d40752629725f8755
    SHA-256: 6be4775b7c15bf176e7ee22020fcd0bc98b0a90822fbc3a430444a631f3d5126
    Size: 4.18 MB