Linux · Security advisory · March 20, 2024

RHSA-2024:1444: Security update for 7 packages

RHSA-2024:1444, released March 20, 2024, fixes 1 CVE across 7 products. One of them is being exploited (CVE-2023-44487); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2023-44487
Exploitation more likely
0
Vendor assessment
Highest EPSS
1.0000
99th percentile

Fixed package versions

ProductReleaseFixed in
nodejsRHEL 81:16.20.2-4.module+el8.9.0+21536+8fdee1fb
nodejs-develRHEL 81:16.20.2-4.module+el8.9.0+21536+8fdee1fb
nodejs-docsRHEL 81:16.20.2-4.module+el8.9.0+21536+8fdee1fb
nodejs-full-i18nRHEL 81:16.20.2-4.module+el8.9.0+21536+8fdee1fb
nodejs-nodemonRHEL 80:3.0.1-1.module+el8.9.0+19741+03a9aaff
nodejs-packagingRHEL 80:26-1.module+el8.9.0+19858+c237a2cf
npmRHEL 81:8.19.4-1.16.20.2.4.module+el8.9.0+21536+8fdee1fb

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2023-44487 MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack 7.5 1.0000 KEVExploited
Showing 1 to 1 of 1 1