Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Oracle Linux 8 ELSA-2023-5850 Critical: Nodejs Security Update

oracle
Calendar Grey October 24, 2023
Oracle Linux Logo Esm H88
The Oracle Linux 8 advisory ELSA-2023-5860 pertains to a significant vulnerability in Node.js, leading to various RPM package updates.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

nodejs [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df

Topics%20covered

Topics Covered

security advisory security issue update critical dos nodejs oracle linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//nodejs-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates//nodejs-nodemon-3.0.1-1.module+el8.8.0+21172+0baa0bae.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates//nodejs-packaging-26-1.module+el8.8.0+21172+0baa0bae.src.rpm

x86_64

nodejs-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.x86_64.rpm nodejs-devel-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.x86_64.rpm nodejs-docs-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.noarch.rpm nodejs-full-i18n-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.x86_64.rpm nodejs-nodemon-3.0.1-1.module+el8.8.0+21172+0baa0bae.noarch.rpm nodejs-packaging-26-1.module+el8.8.0+21172+0baa0bae.noarch.rpm npm-8.19.4-1.16.20.2.3.0.1.module+el8.8.0+21192+e43554c6.x86_64.rpm

aarch64

nodejs-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.aarch64.rpm nodejs-devel-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.aarch64.rpm nodejs-docs-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.noarch.rpm nodejs-full-i18n-16.20.2-3.0.1.module+el8.8.0+21192+e43554c6.aarch64.rpm nodejs-nodemon-3.0.1-1.module+el8.8.0+21172+0baa0bae.noarch.rpm nodejs-packaging-26-1.module+el8.8.0+21172+0baa0bae.noarch.rpm npm-8.19.4-1.16.20.2.3.0.1.module+el8.8.0+21192+e43554c6.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-44487

Topics%20covered

Topics Covered

security advisory security issue update critical dos nodejs oracle linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here