[ELSA-2021-3623] nodejs:12 security and bug fix update

Severity Important

Affected Packages 7

CVEs 8

nodejs
[1:12.22.5-1]
- Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
- CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
- Resolves RHBZ#1951621 (make FIPS always available)
- Resolves: RHBZ#1988595, RHBZ#1993992, RHBZ#1993989, RHBZ#1993093
- Resolves: RHBZ#1994025, RHBZ#1994403, RHBZ#1994407, RHBZ#1994399
- Resolves: RHBZ#1993927 (make FIPS always available)

[1:12.22.3-3]
- Resolves CVE-2021-23362 CVE-2021-27290
- Resolves: RHBZ#1991584, RHBZ#1991578
- Add missing CVE trackers

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.4	< 6.14.14-1.12.22.5.1.module+el8.4.0+20308+065a70e3
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.4	< 12.22.5-1.module+el8.4.0+20308+065a70e3
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.1	< 17-3.module+el8.1.0+5393+aaf413e3
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.4	< 2.0.3-1.module+el8.4.0+20281+eb64e322
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.4	< 12.22.5-1.module+el8.4.0+20308+065a70e3
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.4	< 12.22.5-1.module+el8.4.0+20308+065a70e3
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.4	< 12.22.5-1.module+el8.4.0+20308+065a70e3

ID

ELSA-2021-3623

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2021-3623.html

Published

2021-09-22T00:00:00
(3 years ago)

Modified

2021-09-22T00:00:00
(3 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2021-3623	https://linux.oracle.com/errata/ELSA-2021-3623.html
CVE	CVE-2021-3672	https://linux.oracle.com/cve/CVE-2021-3672.html
CVE	CVE-2021-22930	https://linux.oracle.com/cve/CVE-2021-22930.html
CVE	CVE-2021-22931	https://linux.oracle.com/cve/CVE-2021-22931.html
CVE	CVE-2021-22939	https://linux.oracle.com/cve/CVE-2021-22939.html
CVE	CVE-2021-22940	https://linux.oracle.com/cve/CVE-2021-22940.html
CVE	CVE-2021-32803	https://linux.oracle.com/cve/CVE-2021-32803.html
CVE	CVE-2021-32804	https://linux.oracle.com/cve/CVE-2021-32804.html
CVE	CVE-2021-23343	https://linux.oracle.com/cve/CVE-2021-23343.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.4	oraclelinux	npm	< 6.14.14-1.12.22.5.1.module+el8.4.0+20308+065a70e3	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.4	oraclelinux	nodejs	< 12.22.5-1.module+el8.4.0+20308+065a70e3	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.1	oraclelinux	nodejs-packaging	< 17-3.module+el8.1.0+5393+aaf413e3	oraclelinux-8.1
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.4	oraclelinux	nodejs-nodemon	< 2.0.3-1.module+el8.4.0+20281+eb64e322	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.4	oraclelinux	nodejs-full-i18n	< 12.22.5-1.module+el8.4.0+20308+065a70e3	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.4	oraclelinux	nodejs-docs	< 12.22.5-1.module+el8.4.0+20308+065a70e3	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.4	oraclelinux	nodejs-devel	< 12.22.5-1.module+el8.4.0+20308+065a70e3	oraclelinux-8.4

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date