[ELSA-2023-4330] 18 security, bug fix, and enhancement update

Severity Moderate

Affected Packages 8

CVEs 4

nodejs
[1:18.16.1-1]
- Rebase to 18.16.1
Resolves: rhbz#2188292 rhbz#2187683
Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
- Replace /usr/etc/npmrc symlink with builtin configuration
Resolves: rhbz#2222285

nodejs-nodemon
nodejs-packaging

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.2	< 9.5.1-1.18.16.1.1.module+el9.2.0+21133+486db26c
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.2	< 18.16.1-1.module+el9.2.0+21133+486db26c
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-9.1	< 2021.06-4.module+el9.1.0+20762+f52d7401
pkg:rpm/oraclelinux/nodejs-packaging-bundler?distro=oraclelinux-9.1	< 2021.06-4.module+el9.1.0+20762+f52d7401
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.2	< 2.0.20-2.module+el9.2.0+21038+115df6a2
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.2	< 18.16.1-1.module+el9.2.0+21133+486db26c
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.2	< 18.16.1-1.module+el9.2.0+21133+486db26c
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-9.2	< 18.16.1-1.module+el9.2.0+21133+486db26c

ID

ELSA-2023-4330

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2023-4330.html

Published

2023-08-02T00:00:00
(13 months ago)

Modified

2023-08-02T00:00:00
(13 months ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2023-4330	https://linux.oracle.com/errata/ELSA-2023-4330.html
CVE	CVE-2023-30588	https://linux.oracle.com/cve/CVE-2023-30588.html
CVE	CVE-2023-30589	https://linux.oracle.com/cve/CVE-2023-30589.html
CVE	CVE-2023-30590	https://linux.oracle.com/cve/CVE-2023-30590.html
CVE	CVE-2023-30581	https://linux.oracle.com/cve/CVE-2023-30581.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.2	oraclelinux	npm	< 9.5.1-1.18.16.1.1.module+el9.2.0+21133+486db26c	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.2	oraclelinux	nodejs	< 18.16.1-1.module+el9.2.0+21133+486db26c	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-9.1	oraclelinux	nodejs-packaging	< 2021.06-4.module+el9.1.0+20762+f52d7401	oraclelinux-9.1
Affected	pkg:rpm/oraclelinux/nodejs-packaging-bundler?distro=oraclelinux-9.1	oraclelinux	nodejs-packaging-bundler	< 2021.06-4.module+el9.1.0+20762+f52d7401	oraclelinux-9.1
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.2	oraclelinux	nodejs-nodemon	< 2.0.20-2.module+el9.2.0+21038+115df6a2	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.2	oraclelinux	nodejs-full-i18n	< 18.16.1-1.module+el9.2.0+21133+486db26c	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.2	oraclelinux	nodejs-docs	< 18.16.1-1.module+el9.2.0+21133+486db26c	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-9.2	oraclelinux	nodejs-devel	< 18.16.1-1.module+el9.2.0+21133+486db26c	oraclelinux-9.2

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date