Nodejs has issued an advisory today (July 30): https://nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/ The issue is fixed upstream in 14.17.4: https://nodejs.org/en/blog/release/v14.17.4/ Mageia 8 is also affected.
Status comment: (none) => Fixed upstream in 14.17.4Whiteboard: (none) => MGA8TOO
Joseph is both registered & an active maintainer of this, so assigning thus.
Assignee: bugsquad => joequant
fixed in mga8/9: src: - nodejs-14.17.4-1.mga8
Version: Cauldron => 8Whiteboard: MGA8TOO => (none)Assignee: joequant => qa-bugsStatus comment: Fixed upstream in 14.17.4 => (none)CC: (none) => joequant, mageia
nodejs-14.17.4-1.mga8 nodejs-docs-14.17.4-1.mga8 nodejs-libs-14.17.4-1.mga8 nodejs-devel-14.17.4-1.mga8 v8-devel-8.4.371.23.mga8-1.mga8 npm-6.14.14-1.14.17.4.1.mga8 from nodejs-14.17.4-1.mga8.src.rpm
MGA8-64 Plasma on Lenovo B50 No installation issues. Ref bug 29028 Comment 8 for test "Hello world" displays OK.
Whiteboard: (none) => MGA8-64-OKCC: (none) => herman.viaene
Validating.
Keywords: (none) => validated_updateCC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => advisory
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2021-0394.html
Status: NEW => RESOLVEDResolution: (none) => FIXED