[ELSA-2022-0350] nodejs:14 security, bug fix, and enhancement update

Severity Moderate

Affected Packages 7

CVEs 9

nodejs
[1:14.18.2-2]
- Add missing fixes
- Resolves: RHBZ#2027642, RHBZ#2027635

[1:14.18.2-1]
- Resolves: RHBZ#2027609
- Resolves: RHBZ#2027649, RHBZ#2027646, RHBZ#2027642, RHBZ#2027635
- Rebase to new version to fix CVEs

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.5	< 6.14.15-1.14.18.2.2.module+el8.5.0+20489+261d51d3
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.5	< 14.18.2-2.module+el8.5.0+20489+261d51d3
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3	< 23-3.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.5	< 2.0.15-1.module+el8.5.0+20489+261d51d3
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.5	< 14.18.2-2.module+el8.5.0+20489+261d51d3
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.5	< 14.18.2-2.module+el8.5.0+20489+261d51d3
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.5	< 14.18.2-2.module+el8.5.0+20489+261d51d3

ID

ELSA-2022-0350

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2022-0350.html

Published

2022-02-02T00:00:00
(2 years ago)

Modified

2022-02-02T00:00:00
(2 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2022-0350	https://linux.oracle.com/errata/ELSA-2022-0350.html
CVE	CVE-2020-7788	https://linux.oracle.com/cve/CVE-2020-7788.html
CVE	CVE-2021-37701	https://linux.oracle.com/cve/CVE-2021-37701.html
CVE	CVE-2021-37712	https://linux.oracle.com/cve/CVE-2021-37712.html
CVE	CVE-2020-28469	https://linux.oracle.com/cve/CVE-2020-28469.html
CVE	CVE-2021-3807	https://linux.oracle.com/cve/CVE-2021-3807.html
CVE	CVE-2021-3918	https://linux.oracle.com/cve/CVE-2021-3918.html
CVE	CVE-2021-33502	https://linux.oracle.com/cve/CVE-2021-33502.html
CVE	CVE-2021-22959	https://linux.oracle.com/cve/CVE-2021-22959.html
CVE	CVE-2021-22960	https://linux.oracle.com/cve/CVE-2021-22960.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.5	oraclelinux	npm	< 6.14.15-1.14.18.2.2.module+el8.5.0+20489+261d51d3	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.5	oraclelinux	nodejs	< 14.18.2-2.module+el8.5.0+20489+261d51d3	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3	oraclelinux	nodejs-packaging	< 23-3.module+el8.3.0+7818+6cd30d85	oraclelinux-8.3
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.5	oraclelinux	nodejs-nodemon	< 2.0.15-1.module+el8.5.0+20489+261d51d3	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.5	oraclelinux	nodejs-full-i18n	< 14.18.2-2.module+el8.5.0+20489+261d51d3	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.5	oraclelinux	nodejs-docs	< 14.18.2-2.module+el8.5.0+20489+261d51d3	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.5	oraclelinux	nodejs-devel	< 14.18.2-2.module+el8.5.0+20489+261d51d3	oraclelinux-8.5

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date