# RHSA-2024:2910: Security update for 5 packages

RHSA-2024:2910, released May 20, 2024, fixes 5 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2024-2910
- Platform: Linux
- Released: May 20, 2024
- Priority: High (Closes CVE-2024-27983, high severity)
- CVEs: 5, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2024:2910

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [nodejs](https://patchblox.com/security/data/product/linux/nodejs.md) | RHEL 9 | 1:16.20.2-8.el9_4 |
| [nodejs-docs](https://patchblox.com/security/data/product/linux/nodejs-docs.md) | RHEL 9 | 1:16.20.2-8.el9_4 |
| [nodejs-full-i18n](https://patchblox.com/security/data/product/linux/nodejs-full-i18n.md) | RHEL 9 | 1:16.20.2-8.el9_4 |
| [nodejs-libs](https://patchblox.com/security/data/product/linux/nodejs-libs.md) | RHEL 9 | 1:16.20.2-8.el9_4 |
| [npm](https://patchblox.com/security/data/product/linux/npm.md) | RHEL 9 | 1:8.19.4-1.16.20.2.8.el9_4 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-27983](https://patchblox.com/security/data/cve/CVE-2024-27983.md) | High | Node.js 18 and 2 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 8.2 | 0.8721 |  |
| [CVE-2024-28182](https://patchblox.com/security/data/cve/CVE-2024-28182.md) | High | nodejs: Node.js is a software development platform for building fast and scalable network applications in the JavaScript prog... | 7.5 | 0.8199 |  |
| [CVE-2024-22025](https://patchblox.com/security/data/cve/CVE-2024-22025.md) | High | Node.js 18 and 2 others: Improper Resource Shutdown or Release | 7.5 | 0.0131 |  |
| [CVE-2024-27982](https://patchblox.com/security/data/cve/CVE-2024-27982.md) | High | Node.js 18 and 2 others: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') | 7.5 | 0.0116 |  |
| [CVE-2024-25629](https://patchblox.com/security/data/cve/CVE-2024-25629.md) | High | c-ares: This update for c-ares fixes the following issues:  - CVE-2024-25629: out of bounds read in ares__read_line() (bsc#12... | 7.5 | 0.0035 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo