Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Oracle Linux 9 ELSA-2024-1725 Critical Severity Nodejs Vulnerability Patch

oracle
Calendar Grey April 9, 2024
Oracle Linux Logo Esm H88
Oracle Linux Security Advisory ELSA-2024-1688 resolves severe vulnerabilities in nodejs through revised RPMs to bolster security measures.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

nodejs [1:20.11.1-1] - Rebase to version 20.11.1 - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium) nodejs-nodemon nodejs-packaging

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates//nodejs-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.src.rpm https://oss.oracle.com:443/ol9/SRPMS-updates//nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.src.rpm https://oss.oracle.com:443/ol9/SRPMS-updates//nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.src.rpm

x86_64

nodejs-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.x86_64.rpm nodejs-devel-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.x86_64.rpm nodejs-docs-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.noarch.rpm nodejs-full-i18n-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.x86_64.rpm nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm npm-10.2.4-1.20.11.1.1.module+el9.3.0+90254+3f4d3ee1.x86_64.rpm

aarch64

nodejs-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.aarch64.rpm nodejs-devel-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.aarch64.rpm nodejs-docs-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.noarch.rpm nodejs-full-i18n-20.11.1-1.module+el9.3.0+90254+3f4d3ee1.aarch64.rpm nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm npm-10.2.4-1.20.11.1.1.module+el9.3.0+90254+3f4d3ee1.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here