Описание
ELSA-2023-5765: nodejs security update (IMPORTANT)
[1:16.20.2-3.0.1]
- Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
nodejs
16.20.2-3.0.1.el9_2
nodejs-docs
16.20.2-3.0.1.el9_2
nodejs-full-i18n
16.20.2-3.0.1.el9_2
nodejs-libs
16.20.2-3.0.1.el9_2
npm
8.19.4-1.16.20.2.3.0.1.el9_2
Oracle Linux x86_64
nodejs
16.20.2-3.0.1.el9_2
nodejs-docs
16.20.2-3.0.1.el9_2
nodejs-full-i18n
16.20.2-3.0.1.el9_2
nodejs-libs
16.20.2-3.0.1.el9_2
npm
8.19.4-1.16.20.2.3.0.1.el9_2
Связанные CVE
Связанные уязвимости
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
The HTTP/2 protocol allows a denial of service (server resource consum ...