[ELSA-2023-5363] nodejs:18 security, bug fix, and enhancement update

Severity Important

Affected Packages 8

CVEs 4

nodejs
[1:18.17.1-1]
- Rebase to version 18.17.1
Resolves: rhbz#2228940
Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
- Specify proper OpenSSL configuration section build
Related: rhbz#2226726

nodejs-nodemon
[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

nodejs-packaging

Package	Affected Version
pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.2	< 9.6.7-1.18.17.1.1.module+el9.2.0+21169+1d24b6cc
pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.2	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc
pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-9.1	< 2021.06-4.module+el9.1.0+20762+f52d7401
pkg:rpm/oraclelinux/nodejs-packaging-bundler?distro=oraclelinux-9.1	< 2021.06-4.module+el9.1.0+20762+f52d7401
pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.2	< 3.0.1-1.module+el9.2.0+21169+1d24b6cc
pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.2	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc
pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.2	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc
pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-9.2	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc

ID

ELSA-2023-5363

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2023-5363.html

Published

2023-10-05T00:00:00
(11 months ago)

Modified

2023-10-05T00:00:00
(11 months ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2023-5363	https://linux.oracle.com/errata/ELSA-2023-5363.html
CVE	CVE-2023-32006	https://linux.oracle.com/cve/CVE-2023-32006.html
CVE	CVE-2023-32002	https://linux.oracle.com/cve/CVE-2023-32002.html
CVE	CVE-2022-25883	https://linux.oracle.com/cve/CVE-2022-25883.html
CVE	CVE-2023-32559	https://linux.oracle.com/cve/CVE-2023-32559.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/npm?distro=oraclelinux-9.2	oraclelinux	npm	< 9.6.7-1.18.17.1.1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs?distro=oraclelinux-9.2	oraclelinux	nodejs	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-packaging?distro=oraclelinux-9.1	oraclelinux	nodejs-packaging	< 2021.06-4.module+el9.1.0+20762+f52d7401	oraclelinux-9.1
Affected	pkg:rpm/oraclelinux/nodejs-packaging-bundler?distro=oraclelinux-9.1	oraclelinux	nodejs-packaging-bundler	< 2021.06-4.module+el9.1.0+20762+f52d7401	oraclelinux-9.1
Affected	pkg:rpm/oraclelinux/nodejs-nodemon?distro=oraclelinux-9.2	oraclelinux	nodejs-nodemon	< 3.0.1-1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-full-i18n?distro=oraclelinux-9.2	oraclelinux	nodejs-full-i18n	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-docs?distro=oraclelinux-9.2	oraclelinux	nodejs-docs	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2
Affected	pkg:rpm/oraclelinux/nodejs-devel?distro=oraclelinux-9.2	oraclelinux	nodejs-devel	< 18.17.1-1.module+el9.2.0+21169+1d24b6cc	oraclelinux-9.2

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date