Node.js:10 Bug Fix Update in AlmaLinux 8.2
Summary
ALBA-2020:1929: nodejs:10 bug fix update. Affects nodejs-nodemon across 3 version ranges.
< 1.18.3-1.module_el8.3.0+2023+d2377ea3
< 1.18.3-1.module_el8.4.0+2224+b07ac28e
< 1.18.3-1.module_el8.5.0+81+7dbe79d3
Fixed in 1.18.3-1.module_el8.3.0+2023+d2377ea3, 1.18.3-1.module_el8.4.0+2224+b07ac28e or 1.18.3-1.module_el8.5.0+81+7dbe79d3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. It is widely used for server-side and networking applications. The vulnerability affects the nodejs-nodemon and nodejs-packaging packages in AlmaLinux 8.2.
Vulnerability Detail
The vulnerability in Node.js version 10 is related to a bug that has been fixed in AlmaLinux 8.2. The bug could potentially lead to issues in the affected packages, causing instability or unexpected behavior in applications that rely on them. It is important to update to the fixed versions to ensure the stability and security of the applications.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update nodejs-nodemon-
< 1.18.3-1.module_el8.3.0+2023+d2377ea31.18.3-1.module_el8.3.0+2023+d2377ea3 -
< 1.18.3-1.module_el8.4.0+2224+b07ac28e1.18.3-1.module_el8.4.0+2224+b07ac28e -
< 1.18.3-1.module_el8.5.0+81+7dbe79d31.18.3-1.module_el8.5.0+81+7dbe79d3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Conclusion
It is crucial to update the affected packages in Node.js to the fixed versions to ensure the stability and security of applications. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for nodejs-nodemon →
FAQ
Node.js is a software development platform for building fast and scalable network applications in JavaScript.
The vulnerability could lead to instability or unexpected behavior in applications that use the affected packages.
You can use Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities.
No specific workarounds have been mentioned for this vulnerability. It is recommended to update the affected packages to the fixed versions.
You can find more information about the vulnerability in the AlmaLinux OSV Database advisory: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2020:1929.json
References
Related vulnerabilities
Recent vulnerabilities recorded for nodejs-nodemon.
