{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2022:8833","synopsis":"Moderate: nodejs:18 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update for the nodejs:18 module is now available for Rocky Linux 8.\nRocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \nThe following packages have been upgraded to a later upstream version: nodejs (18.12.1), nodejs-nodemon (2.0.20). (BZ#2142818)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2134609","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2134609","description":"CVE-2022-3517 nodejs-minimatch: ReDoS via the braceExpand function"},{"ticket":"2140911","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2140911","description":"CVE-2022-43548 nodejs: DNS rebinding in inspect via invalid octal IP address"},{"ticket":"2142818","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2142818","description":"nodejs:18\/nodejs: Rebase to the latest Nodejs 18 release [rhel-8] [rhel-8.7.0.z]"}],"cves":[{"name":"CVE-2022-3517","sourceBy":"Red Hat","sourceLink":"https:\/\/access.redhat.com\/hydra\/rest\/securitydata\/cve\/CVE-2022-3517.json","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2022-43548","sourceBy":"Red Hat","sourceLink":"https:\/\/access.redhat.com\/hydra\/rest\/securitydata\/cve\/CVE-2022-43548.json","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:H\/A:N","cvss3BaseScore":"7.5","cwe":"CWE-350"}],"references":[],"publishedAt":"2023-01-30T05:21:58.034199Z","rpms":{},"rebootSuggested":false,"buildReferences":[]}