Red Hat Security AdvisoryRHSA-2018:2944
rh-nodejs6-nodejs security update
Released 2018-10-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nodejs6-nodejs-6.11.3-6.el6, rh-nodejs6-nodejs-devel-6.11.3-6.el6, rh-nodejs6-nodejs-docs-6.11.3-6.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs6-nodejs-6.11.3-7.el7, rh-nodejs6-nodejs-devel-6.11.3-7.el7, rh-nodejs6-nodejs-docs-6.11.3-7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-nodejs6-nodejs-6.11.3-6.el6, rh-nodejs6-nodejs-devel-6.11.3-6.el6, rh-nodejs6-nodejs-docs-6.11.3-6.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-nodejs6-nodejs-6.11.3-7.el7, rh-nodejs6-nodejs-devel-6.11.3-7.el7, rh-nodejs6-nodejs-docs-6.11.3-7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-nodejs6-nodejs-6.11.3-7.el7, rh-nodejs6-nodejs-devel-6.11.3-7.el7, rh-nodejs6-nodejs-docs-6.11.3-7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-nodejs6-nodejs-6.11.3-7.el7, rh-nodejs6-nodejs-devel-6.11.3-7.el7, rh-nodejs6-nodejs-docs-6.11.3-7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nodejs6-nodejs-6.11.3-6.el6, rh-nodejs6-nodejs-devel-6.11.3-6.el6, rh-nodejs6-nodejs-docs-6.11.3-6.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs6-nodejs-6.11.3-7.el7, rh-nodejs6-nodejs-devel-6.11.3-7.el7, rh-nodejs6-nodejs-docs-6.11.3-7.el7
Fixes 1 record
Priority MEDIUM 43
In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to wri…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.07779 · Published 2018-08-21 · Partial fix CWE-787
