[ELSA-2021-3666] nodejs:14 security and bug fix update

Severity Important

Affected Packages 7

CVEs 8

nodejs
[1:14.17.5-1]
- Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
- CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
- Resolves RHBZ#1847529 (make FIPS always available)
- Resolves: RHBZ#1988599, RHBZ#1994000, RHBZ#1993998, RHBZ#1993095
- Resolves: RHBZ#1994028, RHBZ#1994402, RHBZ#1994406, RHBZ#1994398
- Resolves: RHBZ#1993924 (make FIPS always available)

[1:14.17.3-3]
- Resolves: RHBZ#1991584, RHBZ#1991578
- Resolves CVE-2021-23362 CVE-2021-27290
- Bump for missing mentions of CVEs

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.4	< 6.14.14-1.14.17.5.1.module+el8.4.0+20313+f90c2973
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.4	< 14.17.5-1.module+el8.4.0+20313+f90c2973
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3	< 23-3.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.3	< 2.0.3-1.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.4	< 14.17.5-1.module+el8.4.0+20313+f90c2973
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.4	< 14.17.5-1.module+el8.4.0+20313+f90c2973
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.4	< 14.17.5-1.module+el8.4.0+20313+f90c2973

ID

ELSA-2021-3666

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2021-3666.html

Published

2021-09-27T00:00:00
(3 years ago)

Modified

2021-09-27T00:00:00
(3 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2021-3666	https://linux.oracle.com/errata/ELSA-2021-3666.html
CVE	CVE-2021-3672	https://linux.oracle.com/cve/CVE-2021-3672.html
CVE	CVE-2021-22930	https://linux.oracle.com/cve/CVE-2021-22930.html
CVE	CVE-2021-22931	https://linux.oracle.com/cve/CVE-2021-22931.html
CVE	CVE-2021-22939	https://linux.oracle.com/cve/CVE-2021-22939.html
CVE	CVE-2021-22940	https://linux.oracle.com/cve/CVE-2021-22940.html
CVE	CVE-2021-32803	https://linux.oracle.com/cve/CVE-2021-32803.html
CVE	CVE-2021-32804	https://linux.oracle.com/cve/CVE-2021-32804.html
CVE	CVE-2021-23343	https://linux.oracle.com/cve/CVE-2021-23343.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.4	oraclelinux	npm	< 6.14.14-1.14.17.5.1.module+el8.4.0+20313+f90c2973	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.4	oraclelinux	nodejs	< 14.17.5-1.module+el8.4.0+20313+f90c2973	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3	oraclelinux	nodejs-packaging	< 23-3.module+el8.3.0+7818+6cd30d85	oraclelinux-8.3
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.3	oraclelinux	nodejs-nodemon	< 2.0.3-1.module+el8.3.0+7818+6cd30d85	oraclelinux-8.3
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.4	oraclelinux	nodejs-full-i18n	< 14.17.5-1.module+el8.4.0+20313+f90c2973	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.4	oraclelinux	nodejs-docs	< 14.17.5-1.module+el8.4.0+20313+f90c2973	oraclelinux-8.4
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.4	oraclelinux	nodejs-devel	< 14.17.5-1.module+el8.4.0+20313+f90c2973	oraclelinux-8.4

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date