1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2022-7830

[ELSA-2022-7830] nodejs:14 security update

Severity Moderate
Affected Packages 7
CVEs 5
Info Packages References Vulnerabilities

nodejs
[1:14.20.1-2]
- Record issues fixed in the current version
Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824
Resolves: CVE-2022-0235

[1:14.20.1-1]
- Rebase to version 14.20.1
Resolves: CVE-2022-35256

nodejs-packaging
[23-3]
- Updated
- Removed pathfix.py

[23-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[23-1]
- Ensure nodejs(engine) is required for packages with no dependencies

Package Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.6 < 6.14.17-1.14.20.1.2.module+el8.6.0+20874+338992dc
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.6 < 14.20.1-2.module+el8.6.0+20874+338992dc
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3 < 23-3.module+el8.3.0+7818+6cd30d85
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.6 < 2.0.19-2.module+el8.6.0+20729+8fb6d84e
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.6 < 14.20.1-2.module+el8.6.0+20874+338992dc
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.6 < 14.20.1-2.module+el8.6.0+20874+338992dc
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.6 < 14.20.1-2.module+el8.6.0+20874+338992dc
ID
ELSA-2022-7830
Severity
moderate
URL
https://linux.oracle.com/errata/ELSA-2022-7830.html
Published
2022-11-15T00:00:00
(22 months ago)
Modified
2022-11-15T00:00:00
(22 months ago)
Rights
Copyright 2022 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/npm?distro=oraclelinux-8.6 oraclelinux npm < 6.14.17-1.14.20.1.2.module+el8.6.0+20874+338992dc oraclelinux-8.6
Affected pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-8.6 oraclelinux nodejs < 14.20.1-2.module+el8.6.0+20874+338992dc oraclelinux-8.6
Affected pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-8.3 oraclelinux nodejs-packaging < 23-3.module+el8.3.0+7818+6cd30d85 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-8.6 oraclelinux nodejs-nodemon < 2.0.19-2.module+el8.6.0+20729+8fb6d84e oraclelinux-8.6
Affected pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-8.6 oraclelinux nodejs-full-i18n < 14.20.1-2.module+el8.6.0+20874+338992dc oraclelinux-8.6
Affected pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-8.6 oraclelinux nodejs-docs < 14.20.1-2.module+el8.6.0+20874+338992dc oraclelinux-8.6
Affected pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-8.6 oraclelinux nodejs-devel < 14.20.1-2.module+el8.6.0+20874+338992dc oraclelinux-8.6
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date