ALSA-2023:5532
- Source
- https://errata.almalinux.org/9/ALSA-2023-5532.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:5532.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2023:5532
- Related
- Published
- 2023-10-09T00:00:00Z
- Modified
- 2023-10-09T19:50:32Z
- Summary
- Important: nodejs security and bug fix update
- Details
-
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
- nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)
- nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)
- nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2236434)
- References
-
- https://access.redhat.com/errata/RHSA-2023:5532
- https://access.redhat.com/security/cve/CVE-2023-32002
- https://access.redhat.com/security/cve/CVE-2023-32006
- https://access.redhat.com/security/cve/CVE-2023-32559
- https://bugzilla.redhat.com/2230948
- https://bugzilla.redhat.com/2230955
- https://bugzilla.redhat.com/2230956
- https://errata.almalinux.org/9/ALSA-2023-5532.html
Affected packages
AlmaLinux:9 / nodejs
Package
- Name
- nodejs
AlmaLinux:9 / nodejs-docs
Package
- Name
- nodejs-docs
AlmaLinux:9 / nodejs-full-i18n
Package
- Name
- nodejs-full-i18n
AlmaLinux:9 / nodejs-libs
Package
- Name
- nodejs-libs