-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-871d88af0e 2018-07-03 12:53:01.278443 --------------------------------------------------------------------------------
Name : nodejs Product : Fedora EPEL 7 Version : 6.14.3 Release : 1.el7 URL : http://nodejs.org/ Summary : JavaScript runtime Description : Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.
-------------------------------------------------------------------------------- Update Information:
Update for security fixes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1591019 - CVE-2018-7162 nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591019 [ 2 ] Bug #1591014 - CVE-2018-7161 nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591014 [ 3 ] Bug #1591009 - CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591009 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update nodejs' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org