MGASA-2022-0354

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0354.html

Import Source

https://advisories.mageia.org/MGASA-2022-0354.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2022-0354

Related

CVE-2022-32212
CVE-2022-32213
CVE-2022-35256

Published

2022-10-01T17:48:24Z

Modified

2022-10-01T16:52:03Z

Summary

Updated nodejs packages fix security vulnerability

Details

DNS rebinding in --inspect on macOS (CVE-2022-32212) Bypass via obs-fold mechanic (CVE-2022-32213) HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (CVE-2022-35256)

References

https://advisories.mageia.org/MGASA-2022-0354.html
https://bugs.mageia.org/show_bug.cgi?id=30887
https://github.com/nodejs/node/releases/tag/v14.20.1
https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / nodejs

Package

Name: nodejs
Purl: pkg:rpm/mageia/nodejs?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.20.1-2.1.mga8

Ecosystem specific

{
    "section": "core"
}