--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-93f422baa0
2017-07-31 14:29:20.854220
--------------------------------------------------------------------------------
Name : nodejs
Product : Fedora EPEL 7
Version : 6.11.1
Release : 1.el7
URL :
http://nodejs.org/
Summary : JavaScript runtime
Description :
Node.js is a platform built on Chrome's JavaScript runtime
for easily building fast, scalable network applications.
Node.js uses an event-driven, non-blocking I/O model that
makes it lightweight and efficient, perfect for data-intensive
real-time applications that run across distributed devices.
--------------------------------------------------------------------------------
Update Information:
[Security
update](https://nodejs.org/en/blog/vulnerability/july-2017-security-
releases/) ---- Fix typo from previous update. ---- Update to new version.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1463137 - CVE-2017-1000381 nodejs: c-ares: NAPTR parser out of bounds access
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1463137
[ 2 ] Bug #1475330 - CVE-2017-11499 nodejs: Constant Hashtable Seeds vulnerability
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1475330
[ 3 ] Bug #1457763 - nodejs-6.10.3-1 package missed http-parser dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1457763
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nodejs' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------