Linux · Security advisory · October 19, 2020

RHSA-2020:4272: Security update for 7 packages

RHSA-2020:4272, released October 19, 2020, fixes 1 CVE across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0530
92nd percentile

Fixed package versions

ProductReleaseFixed in
nodejsRHEL 81:12.18.4-2.module+el8.2.0+8361+192e434e
nodejs-develRHEL 81:12.18.4-2.module+el8.2.0+8361+192e434e
nodejs-docsRHEL 81:12.18.4-2.module+el8.2.0+8361+192e434e
nodejs-full-i18nRHEL 81:12.18.4-2.module+el8.2.0+8361+192e434e
nodejs-nodemonRHEL 80:1.18.3-1.module+el8.1.0+3369+37ae6a45
nodejs-packagingRHEL 80:17-3.module+el8.1.0+3369+37ae6a45
npmRHEL 81:6.14.6-1.12.18.4.2.module+el8.2.0+8361+192e434e

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-8201 Node.js 14: HTTP Request Smuggling (CWE-444) 7.4 0.0530 None reported
Showing 1 to 1 of 1 1