[ELSA-2022-6963] nodejs security update

Severity Important

Affected Packages 5

CVEs 2

[16.17.1-1]
- Rebase to version 16.17.1
Resolves: CVE-2022-35255 CVE-2022-35256

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.0	< 8.15.0-1.16.17.1.1.el9_0
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.0	< 16.17.1-1.el9_0
pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.0	< 16.17.1-1.el9_0
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.0	< 16.17.1-1.el9_0
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.0	< 16.17.1-1.el9_0

ID

ELSA-2022-6963

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2022-6963.html

Published

2022-10-17T00:00:00
(23 months ago)

Modified

2022-10-17T00:00:00
(23 months ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2022-6963	https://linux.oracle.com/errata/ELSA-2022-6963.html
CVE	CVE-2022-35255	https://linux.oracle.com/cve/CVE-2022-35255.html
CVE	CVE-2022-35256	https://linux.oracle.com/cve/CVE-2022-35256.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.0	oraclelinux	npm	< 8.15.0-1.16.17.1.1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.0	oraclelinux	nodejs	< 16.17.1-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-libs?distro=oraclelinux-9.0	oraclelinux	nodejs-libs	< 16.17.1-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.0	oraclelinux	nodejs-full-i18n	< 16.17.1-1.el9_0	oraclelinux-9.0
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.0	oraclelinux	nodejs-docs	< 16.17.1-1.el9_0	oraclelinux-9.0

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date