Issued:: 2024-05-21
Updated:: 2024-05-21

RHSA-2024:2937 - Security Advisory

Overview
Updated Packages

Synopsis

Important: nodejs security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for nodejs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

nodejs: nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
nodejs: CONTINUATION frames DoS (CVE-2024-27983)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
Red Hat Enterprise Linux Server - AUS 9.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

BZ - 2268639 - CVE-2024-28182 nghttp2: CONTINUATION frames DoS
BZ - 2272764 - CVE-2024-27983 nodejs: CONTINUATION frames DoS

CVEs

References

https://access.redhat.com/security/updates/classification/#important

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
x86_64
nodejs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 8c4b28ec4f6fa6cd294bc6df8c456fa6c7aececac1a37f7d7dc1d43c0b9a81b9
nodejs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 961d3aaa7b09e7eba3ee77b6014d628afe618546dd410ba2895cf819a3a9a5e4
nodejs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c9b47e271e4116aa1701776407c5c4253cbed5499e2f789d091ed4dee376a4ab
nodejs-debugsource-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 6903b885f5220c4176bc6e2b2c3e3e3bbae4e5d2f122b6b857f66ce28aad7d19
nodejs-debugsource-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 270faaae2bf297cce906c941c53bdb078e36cc46d2a04b4c92a8485dd981db13
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c8095c66a5828f79670122bd96e17ae95639de1dfe84b978198253dbdb177a0f
nodejs-libs-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 9137c4cf0f5deb43e7ed583b4772b207ce7f92adbfd7e95a4a60c27a908108fa
nodejs-libs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 7b7d31c825398968727b7426055c8b891380097babb02a00040e2013e10db91d
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 923601b55b8e40d0c7283ecd5755f9b301a7e6821c53b9d9f5513ee887750ffc
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 5f76ebaeba4d6ea8ce36adf8bc123a572a208f3363c1f47984ad38f848b12069
npm-8.19.4-1.16.20.2.5.el9_2.3.x86_64.rpm	SHA-256: b2982da2302ab360eab1030a4a57dd1484f0c829cd5933e692136e43b8f6fcbf

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
x86_64
nodejs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 8c4b28ec4f6fa6cd294bc6df8c456fa6c7aececac1a37f7d7dc1d43c0b9a81b9
nodejs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 961d3aaa7b09e7eba3ee77b6014d628afe618546dd410ba2895cf819a3a9a5e4
nodejs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c9b47e271e4116aa1701776407c5c4253cbed5499e2f789d091ed4dee376a4ab
nodejs-debugsource-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 6903b885f5220c4176bc6e2b2c3e3e3bbae4e5d2f122b6b857f66ce28aad7d19
nodejs-debugsource-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 270faaae2bf297cce906c941c53bdb078e36cc46d2a04b4c92a8485dd981db13
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c8095c66a5828f79670122bd96e17ae95639de1dfe84b978198253dbdb177a0f
nodejs-libs-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 9137c4cf0f5deb43e7ed583b4772b207ce7f92adbfd7e95a4a60c27a908108fa
nodejs-libs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 7b7d31c825398968727b7426055c8b891380097babb02a00040e2013e10db91d
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 923601b55b8e40d0c7283ecd5755f9b301a7e6821c53b9d9f5513ee887750ffc
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 5f76ebaeba4d6ea8ce36adf8bc123a572a208f3363c1f47984ad38f848b12069
npm-8.19.4-1.16.20.2.5.el9_2.3.x86_64.rpm	SHA-256: b2982da2302ab360eab1030a4a57dd1484f0c829cd5933e692136e43b8f6fcbf

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
s390x
nodejs-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: e50fcead1768d8e3836d488fa0482a36f06f3ddbcacab748ae8c3576ddec0fe8
nodejs-debuginfo-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 09e4e2d15f10dd92d56aec871bb12101facbab55ee7dc3e548c60b4a0e006edc
nodejs-debugsource-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 6aebf6ce1a58366189edd76f335da1a14ce41e9c36d5146477dbd2f0ef277293
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: f658d4e2e9da17e43e968e7dfe875e0de027cc4e9e18120d2a5be22ec1a2cd17
nodejs-libs-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 1661f20bbc32200da5a294570dfcc16fef19f1c9ce23d169c064d9a829edc90e
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 265363a874a74eb1d754a7768861d9b27e66030fdbfc0fc84971eaa28533748b
npm-8.19.4-1.16.20.2.5.el9_2.3.s390x.rpm	SHA-256: ca7ab2e655d8ca865b0279c91e5c9da133b999512a59d44f1a8f2a7cddc0a6f1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
ppc64le
nodejs-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: e8b68eec4721cd2ca95c32eedb5cee0a2471dfc8a5d569b13f92b6b69d46bd3f
nodejs-debuginfo-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: c5dd090e500a410920a9417ecc02469845f55dcba93f751ba8a43d85d7d06b12
nodejs-debugsource-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: c8036f0f883b801ed8581728c0c0e0c90258ccd3e6faf9811d8dda5bdf78abcf
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: 665291b85a8289ee875c1959e4676aa5216d0c014e2cc3b733279cc1da49a66d
nodejs-libs-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: 8737295c10d7322d6673b2e1fd04f9ee04020be534a38caff9f996b5e37bb96a
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: badfcfee33dcf2693b5b92603e77c15d2c8e986b8e053faffc166e4f6d4790f1
npm-8.19.4-1.16.20.2.5.el9_2.3.ppc64le.rpm	SHA-256: 431baf37cccdbb2639ca43aca8af3d6453173c4253b988a375ef6356d9faca5a

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
aarch64
nodejs-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 3e9d9d2253bba28bbbf4e95adada6ae06c5f9f6197cb53c300e7f145698b171c
nodejs-debuginfo-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: b069fca5495692673e1305e4c0a1ad8176cde254727a7304a261d27ce4a24b02
nodejs-debugsource-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: d3d9ea24da645170de9394f24e8f843ad561f4f576bf253086077969b881a971
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 7da7c49f792e1bdd99de1bce70f214141f88721c7d8b1dd95290b4b41ced5567
nodejs-libs-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 1641c05606019c0fc21041c7890dac6ee9720f30a76cf080b8d334cbab40bba6
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 6a9f5bd51d12aa919e25c238b90938a268c372d8a0d2332ff2fa2e162e3bbb00
npm-8.19.4-1.16.20.2.5.el9_2.3.aarch64.rpm	SHA-256: 289d34dac18cad878f4cb7a851395062a19a77e5003aeafb9097d5c0baf1f6dc

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
ppc64le
nodejs-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: e8b68eec4721cd2ca95c32eedb5cee0a2471dfc8a5d569b13f92b6b69d46bd3f
nodejs-debuginfo-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: c5dd090e500a410920a9417ecc02469845f55dcba93f751ba8a43d85d7d06b12
nodejs-debugsource-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: c8036f0f883b801ed8581728c0c0e0c90258ccd3e6faf9811d8dda5bdf78abcf
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: 665291b85a8289ee875c1959e4676aa5216d0c014e2cc3b733279cc1da49a66d
nodejs-libs-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: 8737295c10d7322d6673b2e1fd04f9ee04020be534a38caff9f996b5e37bb96a
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.ppc64le.rpm	SHA-256: badfcfee33dcf2693b5b92603e77c15d2c8e986b8e053faffc166e4f6d4790f1
npm-8.19.4-1.16.20.2.5.el9_2.3.ppc64le.rpm	SHA-256: 431baf37cccdbb2639ca43aca8af3d6453173c4253b988a375ef6356d9faca5a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
x86_64
nodejs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 8c4b28ec4f6fa6cd294bc6df8c456fa6c7aececac1a37f7d7dc1d43c0b9a81b9
nodejs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 961d3aaa7b09e7eba3ee77b6014d628afe618546dd410ba2895cf819a3a9a5e4
nodejs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c9b47e271e4116aa1701776407c5c4253cbed5499e2f789d091ed4dee376a4ab
nodejs-debugsource-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 6903b885f5220c4176bc6e2b2c3e3e3bbae4e5d2f122b6b857f66ce28aad7d19
nodejs-debugsource-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 270faaae2bf297cce906c941c53bdb078e36cc46d2a04b4c92a8485dd981db13
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: c8095c66a5828f79670122bd96e17ae95639de1dfe84b978198253dbdb177a0f
nodejs-libs-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 9137c4cf0f5deb43e7ed583b4772b207ce7f92adbfd7e95a4a60c27a908108fa
nodejs-libs-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 7b7d31c825398968727b7426055c8b891380097babb02a00040e2013e10db91d
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.i686.rpm	SHA-256: 923601b55b8e40d0c7283ecd5755f9b301a7e6821c53b9d9f5513ee887750ffc
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.x86_64.rpm	SHA-256: 5f76ebaeba4d6ea8ce36adf8bc123a572a208f3363c1f47984ad38f848b12069
npm-8.19.4-1.16.20.2.5.el9_2.3.x86_64.rpm	SHA-256: b2982da2302ab360eab1030a4a57dd1484f0c829cd5933e692136e43b8f6fcbf

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
aarch64
nodejs-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 3e9d9d2253bba28bbbf4e95adada6ae06c5f9f6197cb53c300e7f145698b171c
nodejs-debuginfo-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: b069fca5495692673e1305e4c0a1ad8176cde254727a7304a261d27ce4a24b02
nodejs-debugsource-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: d3d9ea24da645170de9394f24e8f843ad561f4f576bf253086077969b881a971
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 7da7c49f792e1bdd99de1bce70f214141f88721c7d8b1dd95290b4b41ced5567
nodejs-libs-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 1641c05606019c0fc21041c7890dac6ee9720f30a76cf080b8d334cbab40bba6
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.aarch64.rpm	SHA-256: 6a9f5bd51d12aa919e25c238b90938a268c372d8a0d2332ff2fa2e162e3bbb00
npm-8.19.4-1.16.20.2.5.el9_2.3.aarch64.rpm	SHA-256: 289d34dac18cad878f4cb7a851395062a19a77e5003aeafb9097d5c0baf1f6dc

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
nodejs-16.20.2-5.el9_2.3.src.rpm	SHA-256: d4ba6e141fd06dbc3cfdd21839eeef7d1cda0d2d06dbc59da393acd52fbdcb86
s390x
nodejs-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: e50fcead1768d8e3836d488fa0482a36f06f3ddbcacab748ae8c3576ddec0fe8
nodejs-debuginfo-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 09e4e2d15f10dd92d56aec871bb12101facbab55ee7dc3e548c60b4a0e006edc
nodejs-debugsource-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 6aebf6ce1a58366189edd76f335da1a14ce41e9c36d5146477dbd2f0ef277293
nodejs-docs-16.20.2-5.el9_2.3.noarch.rpm	SHA-256: 60f8118063974aca87479c5c2461be90261a07c487ff845972b138b0d634f084
nodejs-full-i18n-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: f658d4e2e9da17e43e968e7dfe875e0de027cc4e9e18120d2a5be22ec1a2cd17
nodejs-libs-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 1661f20bbc32200da5a294570dfcc16fef19f1c9ce23d169c064d9a829edc90e
nodejs-libs-debuginfo-16.20.2-5.el9_2.3.s390x.rpm	SHA-256: 265363a874a74eb1d754a7768861d9b27e66030fdbfc0fc84971eaa28533748b
npm-8.19.4-1.16.20.2.5.el9_2.3.s390x.rpm	SHA-256: ca7ab2e655d8ca865b0279c91e5c9da133b999512a59d44f1a8f2a7cddc0a6f1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation