Skip to content

Commit b040398

Browse files
authored
add aug 31 2021 security release post announcement (#4082)
1 parent 28f557b commit b040398

2 files changed

Lines changed: 32 additions & 2 deletions

File tree

locale/en/blog/vulnerability/aug-2021-security-releases2.md

Lines changed: 31 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,42 @@
11
---
2-
date: 2021-08-27T16:00:00.000Z
2+
date: 2021-08-31T16:00:00.000Z
33
category: vulnerability
44
title: August 31 2021 Security Releases
55
slug: aug-2021-security-releases2
66
layout: blog-post.hbs
77
author: Daniel Bevenius
88
---
99

10+
## _(Update 31-Aug-2021)_ Security releases available
11+
Updates are now available for v14.x, and v12.x Node.js release lines for the
12+
following issues.
13+
14+
### npm 6 update - node-tar, arborist, npm cli modules
15+
These are vulnerabilities in the node-tar, arborist, and npm cli modules which
16+
are related to the initial reports and subsequent remediation of node-tar
17+
vulnerabilities [CVE-2021-32803](https://github.com/advisories/GHSA-r628-mhmh-qjhw)
18+
and [CVE-2021-32804](https://github.com/advisories/GHSA-3jfq-g458-7qm9).
19+
Subsequent internal security review of node-tar and additional external bounty
20+
reports have resulted in another 5 CVE being remediated in core npm CLI
21+
dependencies including node-tar, and npm arborist.
22+
23+
You can read more about it in:
24+
* [CVE-2021-37701](https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc)
25+
* [CVE-2021-37712](https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p)
26+
* [CVE-2021-37713](https://github.com/npm/node-tar/security/advisories/GHSA-5955-9wpr-37jh)
27+
* [CVE-2021-39134](https://github.com/npm/arborist/security/advisories/GHSA-2h3h-q99f-3fhc)
28+
* [CVE-2021-39135](https://github.com/npm/arborist/security/advisories/GHSA-gmw6-94gg-2rc2)
29+
30+
Impacts:
31+
* All versions of the 14.x, and 12.x releases lines
32+
33+
## Downloads and release details
34+
35+
* [Node.js v12.22.6 (LTS)](https://nodejs.org/en/blog/release/v12.22.6/)
36+
* [Node.js v14.17.6 (LTS)](https://nodejs.org/en/blog/release/v14.17.6/)
37+
38+
---------------
39+
1040
# Summary
1141

1242
The Node.js project will release new versions of 12.x, and 14.x releases lines on or shortly after Tuesday

locale/en/site.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -164,7 +164,7 @@
164164
"index": {
165165
"startDate": "2021-08-25T16:00:00.000Z",
166166
"endDate": "2021-09-08T16:00:00.000Z",
167-
"text": "New security releases to be made available August 31th, 2021",
167+
"text": "New security releases now available for 14.x, and 12.x release lines",
168168
"link": "blog/vulnerability/aug-2021-security-releases2/"
169169
},
170170
"blacklivesmatter": {

0 commit comments

Comments
 (0)