Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Oracle Linux 8 ELSA-2022-6449 Critical: Nodejs JavaScript Fix

oracle
Calendar Grey September 15, 2022
Oracle Linux Logo Esm H88
The update ELSA-2022-6450 for Oracle Linux 8 concerning nodejs brings forth vital security enhancements and addresses numerous vulnerabilities.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

nodejs [1:16.16.0-3] - Fix build - Resolves: RHBZ#2111416 [1:16.16.0-2] - Refactor spec - Resolves: RHBZ#2111416 [1:16.16.0-1] - Rebase to latest version - Resolves: RHBZ#2106369 - CVE fixes for CVE-2022-32212/3/4/5 - Resolves: #2109578, #2109581, #2109584, #2109588 nodejs-nodemon [2.0.19-2] - Switched from autosetup - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future - Resolves: RHBZ#2109921 [2.0.19-1] - Rebase to 2.0.19 - Resolves CVE-2022-33987 - Resolves: RHBZ#2109921

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/nodejs-16.16.0-3.module+el8.6.0+20742+4c4c4b80.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/nodejs-nodemon-2.0.19-2.module+el8.6.0+20742+4c4c4b80.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/nodejs-packaging-25-1.module+el8.5.0+20388+4b61e68d.src.rpm

x86_64

nodejs-16.16.0-3.module+el8.6.0+20742+4c4c4b80.x86_64.rpm nodejs-devel-16.16.0-3.module+el8.6.0+20742+4c4c4b80.x86_64.rpm nodejs-docs-16.16.0-3.module+el8.6.0+20742+4c4c4b80.noarch.rpm nodejs-full-i18n-16.16.0-3.module+el8.6.0+20742+4c4c4b80.x86_64.rpm nodejs-nodemon-2.0.19-2.module+el8.6.0+20742+4c4c4b80.noarch.rpm nodejs-packaging-25-1.module+el8.5.0+20388+4b61e68d.noarch.rpm npm-8.11.0-1.16.16.0.3.module+el8.6.0+20742+4c4c4b80.x86_64.rpm

aarch64

nodejs-16.16.0-3.module+el8.6.0+20742+4c4c4b80.aarch64.rpm nodejs-devel-16.16.0-3.module+el8.6.0+20742+4c4c4b80.aarch64.rpm nodejs-docs-16.16.0-3.module+el8.6.0+20742+4c4c4b80.noarch.rpm nodejs-full-i18n-16.16.0-3.module+el8.6.0+20742+4c4c4b80.aarch64.rpm nodejs-nodemon-2.0.19-2.module+el8.6.0+20742+4c4c4b80.noarch.rpm nodejs-packaging-25-1.module+el8.5.0+20388+4b61e68d.noarch.rpm npm-8.11.0-1.16.16.0.3.module+el8.6.0+20742+4c4c4b80.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2021-3807 CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215 CVE-2022-33987

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here