1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2021-0551

[ELSA-2021-0551] nodejs:14 security and bug fix update

Severity Moderate
Affected Packages 7
CVEs 7
Info Packages References Vulnerabilities

nodejs
[1:14.15.4-2]
- Add patch for yarn crash
- Resolves: RHBZ#1916465

[1:14.15.4-1]
- Security rebase to 14.15.4
- https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
- Resolves: RHBZ#1916463, RHBZ#1914788
- Resolves: RHBZ#1914785, RHBZ#1916387, RHBZ#1916389, RHBZ#1916390, RHBZ#1916690

Package Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.3 < 6.14.10-1.14.15.4.2.module+el8.3.0+9657+a08a905a
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.3 < 14.15.4-2.module+el8.3.0+9657+a08a905a
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3 < 23-3.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.3 < 2.0.3-1.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.3 < 14.15.4-2.module+el8.3.0+9657+a08a905a
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.3 < 14.15.4-2.module+el8.3.0+9657+a08a905a
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.3 < 14.15.4-2.module+el8.3.0+9657+a08a905a
ID
ELSA-2021-0551
Severity
moderate
URL
https://linux.oracle.com/errata/ELSA-2021-0551.html
Published
2021-02-20T00:00:00
(3 years ago)
Modified
2021-02-20T00:00:00
(3 years ago)
Rights
Copyright 2021 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.3 oraclelinux npm < 6.14.10-1.14.15.4.2.module+el8.3.0+9657+a08a905a oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.3 oraclelinux nodejs < 14.15.4-2.module+el8.3.0+9657+a08a905a oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3 oraclelinux nodejs-packaging < 23-3.module+el8.3.0+7818+6cd30d85 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.3 oraclelinux nodejs-nodemon < 2.0.3-1.module+el8.3.0+7818+6cd30d85 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.3 oraclelinux nodejs-full-i18n < 14.15.4-2.module+el8.3.0+9657+a08a905a oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.3 oraclelinux nodejs-docs < 14.15.4-2.module+el8.3.0+9657+a08a905a oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.3 oraclelinux nodejs-devel < 14.15.4-2.module+el8.3.0+9657+a08a905a oraclelinux-8.3
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date