[ELSA-2022-6595] nodejs and nodejs-nodemon security and bug fix update

Severity Moderate

Affected Packages 6

CVEs 10

nodejs
[16.16.0-1]
- Rebase to version 16.16.0
Resolves: RHBZ#2106290
Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215

[16.14.0-5]
- Decouple dependency bundling from bootstrapping

nodejs-nodemon

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.0	< 8.11.0-1.16.16.0.1.el9_0
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.0	< 16.16.0-1.el9_0
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.0	< 2.0.19-1.el9_0
pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.0	< 16.16.0-1.el9_0
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.0	< 16.16.0-1.el9_0
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.0	< 16.16.0-1.el9_0

ID

ELSA-2022-6595

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2022-6595.html

Published

2022-09-22T00:00:00
(2 years ago)

Modified

2022-09-22T00:00:00
(2 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2022-6595	https://linux.oracle.com/errata/ELSA-2022-6595.html
CVE	CVE-2020-7788	https://linux.oracle.com/cve/CVE-2020-7788.html
CVE	CVE-2022-32212	https://linux.oracle.com/cve/CVE-2022-32212.html
CVE	CVE-2022-32213	https://linux.oracle.com/cve/CVE-2022-32213.html
CVE	CVE-2022-33987	https://linux.oracle.com/cve/CVE-2022-33987.html
CVE	CVE-2022-32214	https://linux.oracle.com/cve/CVE-2022-32214.html
CVE	CVE-2022-32215	https://linux.oracle.com/cve/CVE-2022-32215.html
CVE	CVE-2022-29244	https://linux.oracle.com/cve/CVE-2022-29244.html
CVE	CVE-2020-28469	https://linux.oracle.com/cve/CVE-2020-28469.html
CVE	CVE-2021-3807	https://linux.oracle.com/cve/CVE-2021-3807.html
CVE	CVE-2021-33502	https://linux.oracle.com/cve/CVE-2021-33502.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.0	oraclelinux	npm	< 8.11.0-1.16.16.0.1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.0	oraclelinux	nodejs	< 16.16.0-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.0	oraclelinux	nodejs-nodemon	< 2.0.19-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.0	oraclelinux	nodejs-libs	< 16.16.0-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.0	oraclelinux	nodejs-full-i18n	< 16.16.0-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.0	oraclelinux	nodejs-docs	< 16.16.0-1.el9_0	oraclelinux-9.0

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date