Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2023.0226
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2023-0226)
Zusammenfassung:	The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2023-0226 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2023-0226 advisory. Vulnerability Insight: Current nodejs 14 branch in Mageia 8 is end of life and there are no more security updates. This release allows to move to the new nodejs 18 LTS branch and fixes the following CVEs CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High) CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium) CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium) CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium) OpenSSL Security Releases OpenSSL security advisory 28th March. OpenSSL security advisory 20th April. OpenSSL security advisory 30th May c-ares vulnerabilities: GHSA-9g78-jv2r-p7vc GHSA-8r8p-23f3-64c2 GHSA-54xr-f67r-4pc4 GHSA-x6mf-cxr9-8q6v Affected Software/OS: 'nodejs' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-30581 https://nodejs.org/en/blog/vulnerability/june-2023-security-releases Common Vulnerability Exposure (CVE) ID: CVE-2023-30582 Common Vulnerability Exposure (CVE) ID: CVE-2023-30583 Common Vulnerability Exposure (CVE) ID: CVE-2023-30584 Common Vulnerability Exposure (CVE) ID: CVE-2023-30585 Common Vulnerability Exposure (CVE) ID: CVE-2023-30586 https://hackerone.com/reports/1954535 Common Vulnerability Exposure (CVE) ID: CVE-2023-30587 Common Vulnerability Exposure (CVE) ID: CVE-2023-30588 Common Vulnerability Exposure (CVE) ID: CVE-2023-30589 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IV326O2X4BE3SINX5FJHMAKVHUAA4ZYF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCVG4TQRGTK4LKAZKVEQAUEJM7DUACYE/ https://hackerone.com/reports/2001873 Common Vulnerability Exposure (CVE) ID: CVE-2023-30590 https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.