[ELSA-2022-6449] nodejs:16 security and bug fix update

Severity Moderate

Affected Packages 7

CVEs 6

nodejs
[1:16.16.0-3]
- Fix build
- Resolves: RHBZ#2111416

[1:16.16.0-2]
- Refactor spec
- Resolves: RHBZ#2111416

[1:16.16.0-1]
- Rebase to latest version
- Resolves: RHBZ#2106369
- CVE fixes for CVE-2022-32212/3/4/5
- Resolves: #2109578, #2109581, #2109584, #2109588

nodejs-nodemon
[2.0.19-2]
- Switched from autosetup
- Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
- Resolves: RHBZ#2109921

[2.0.19-1]
- Rebase to 2.0.19
- Resolves CVE-2022-33987
- Resolves: RHBZ#2109921

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.6	< 8.11.0-1.16.16.0.3.module+el8.6.0+20742+4c4c4b80
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.6	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.5	< 25-1.module+el8.5.0+20388+4b61e68d
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.6	< 2.0.19-2.module+el8.6.0+20742+4c4c4b80
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.6	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.6	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.6	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80

ID

ELSA-2022-6449

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2022-6449.html

Published

2022-09-15T00:00:00
(2 years ago)

Modified

2022-09-15T00:00:00
(2 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2022-6449	https://linux.oracle.com/errata/ELSA-2022-6449.html
CVE	CVE-2022-32212	https://linux.oracle.com/cve/CVE-2022-32212.html
CVE	CVE-2022-32213	https://linux.oracle.com/cve/CVE-2022-32213.html
CVE	CVE-2022-33987	https://linux.oracle.com/cve/CVE-2022-33987.html
CVE	CVE-2022-32214	https://linux.oracle.com/cve/CVE-2022-32214.html
CVE	CVE-2022-32215	https://linux.oracle.com/cve/CVE-2022-32215.html
CVE	CVE-2021-3807	https://linux.oracle.com/cve/CVE-2021-3807.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.6	oraclelinux	npm	< 8.11.0-1.16.16.0.3.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.6	oraclelinux	nodejs	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.5	oraclelinux	nodejs-packaging	< 25-1.module+el8.5.0+20388+4b61e68d	oraclelinux-8.5
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.6	oraclelinux	nodejs-nodemon	< 2.0.19-2.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.6	oraclelinux	nodejs-full-i18n	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.6	oraclelinux	nodejs-docs	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.6	oraclelinux	nodejs-devel	< 16.16.0-3.module+el8.6.0+20742+4c4c4b80	oraclelinux-8.6

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date