ELBA-2025-23316

ELBA-2025-23316 - nodejs:22 bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-01-06

Description

nodejs
[1:22.19.0-1]
- Update to 22.19.0
Resolves: RHEL-111912

[1:22.16.0-2]
- Patch fix for CVE-2025-6965
Resolves: RHEL-103851

[1:22.16.0-1]
- Update to 22.16.0
Resolves: RHEL-89600 RHEL-92872 RHEL-92420

[1:22.15.0-1]
- Update to 22.15.0
- Drop upstream patches
Resolves: RHEL-87319 RHEL-86586

[1:22.13.1-4]
- Patch fix for sqlite CVE-2025-31498
Resolves: RHEL-87319

[1:22.13.1-3]
- Update c-ares to newest version with fix for CVE-2025-31498
Resolves: RHEL-86586

[1:22.13.1-2]
- Remove obsolete lua pretransaction script from spec file
Resolves: RHEL-81119
- Disable npm update notifications for users
Resolves: RHEL-81158

[1:22.13.1-1]
- Update to version 22.13.1
Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
Resolves: RHEL-76354

[1:22.11.0-1]
- Update to version 22.11.0

[22.4.1-4]
- Initial import of nodeJS 22

nodejs-nodemon
[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517

[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com

nodejs-packaging
[2021.06-5]
- nodejs.req to properly detect bundled deps

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	nodejs-22.19.0-2.module+el9.7.0+90752+34782e9c.src.rpm	b087c3f8be40cab426ab63cffb4ce3b633f321e420dda4a9a207b56f27a74a65	-	ol9_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.7.0+90752+34782e9c.src.rpm	6dc69f16429b6abde701374542c5b490103219f902376557b2d1d067f433d1a5	-	ol9_aarch64_appstream
	nodejs-packaging-2021.06-5.module+el9.7.0+90752+34782e9c.src.rpm	0b552894e29cf8ed465fb5ff2b1ca8defbd0637c6161c620eeae1f657fabfe11	-	ol9_aarch64_appstream
	nodejs-22.19.0-2.module+el9.7.0+90752+34782e9c.aarch64.rpm	dc0b5f09646a895a0aa556379f4221c68e2a70ec1367626d1ee73a12d4807c46	-	ol9_aarch64_appstream
	nodejs-devel-22.19.0-2.module+el9.7.0+90752+34782e9c.aarch64.rpm	d0ae8a241629fed9c936d916afb694a3689d1dff1badad63ed6dce76c203f165	-	ol9_aarch64_appstream
	nodejs-docs-22.19.0-2.module+el9.7.0+90752+34782e9c.noarch.rpm	427e4dcb7959e1d91f7732de4f011788870e1e9f32fe713923951ddfb77ccc5e	-	ol9_aarch64_appstream
	nodejs-full-i18n-22.19.0-2.module+el9.7.0+90752+34782e9c.aarch64.rpm	295be5aaa6a97af91479aa192e7068986b682afe8c02361c91abf759c2909318	-	ol9_aarch64_appstream
	nodejs-libs-22.19.0-2.module+el9.7.0+90752+34782e9c.aarch64.rpm	af06c52d2c589357db7c710ac1fcab00880ec7038e443c1d2cb539f4418f7282	-	ol9_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.7.0+90752+34782e9c.noarch.rpm	0de97d1889a452d020f6e1853c87f06f831487976d086a549426c8e1772042e3	-	ol9_aarch64_appstream
	nodejs-packaging-2021.06-5.module+el9.7.0+90752+34782e9c.noarch.rpm	351cc1bb9098c86697a95987d799c6e2e677607f98e28ebe0217fe349fc0c418	-	ol9_aarch64_appstream
	nodejs-packaging-bundler-2021.06-5.module+el9.7.0+90752+34782e9c.noarch.rpm	1461b8511a127ed3e62585ae11b5e0c28c893bbd8fbf8b1315bdf58236a54ea2	-	ol9_aarch64_appstream
	npm-10.9.3-1.22.19.0.2.module+el9.7.0+90752+34782e9c.aarch64.rpm	f86b5b51501d9d620bddcc49797d8c01ba838c1ad29948535ae719f4a668cbf8	-	ol9_aarch64_appstream
	v8-12.4-devel-12.4.254.21-1.22.19.0.2.module+el9.7.0+90752+34782e9c.aarch64.rpm	bd325585ed69400f7ebbdcb4a773e55aaaa59250d454c98ec595ca9750bbcc81	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	nodejs-22.19.0-2.module+el9.7.0+90752+34782e9c.src.rpm	b087c3f8be40cab426ab63cffb4ce3b633f321e420dda4a9a207b56f27a74a65	-	ol9_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.7.0+90752+34782e9c.src.rpm	6dc69f16429b6abde701374542c5b490103219f902376557b2d1d067f433d1a5	-	ol9_x86_64_appstream
	nodejs-packaging-2021.06-5.module+el9.7.0+90752+34782e9c.src.rpm	0b552894e29cf8ed465fb5ff2b1ca8defbd0637c6161c620eeae1f657fabfe11	-	ol9_x86_64_appstream
	nodejs-22.19.0-2.module+el9.7.0+90752+34782e9c.x86_64.rpm	c3028f51d88c8484b7b5aa0b6a2bd9b1d78504566ac550bf65a98037303488f9	-	ol9_x86_64_appstream
	nodejs-devel-22.19.0-2.module+el9.7.0+90752+34782e9c.x86_64.rpm	23f4a1ef85c826fd76b0fd0d0c5786af7b42a01c70199190c490cb173b074aa7	-	ol9_x86_64_appstream
	nodejs-docs-22.19.0-2.module+el9.7.0+90752+34782e9c.noarch.rpm	427e4dcb7959e1d91f7732de4f011788870e1e9f32fe713923951ddfb77ccc5e	-	ol9_x86_64_appstream
	nodejs-full-i18n-22.19.0-2.module+el9.7.0+90752+34782e9c.x86_64.rpm	e965e86dbd3d36c8dd9ee5af81e8985c2ae6cd59c76d566d4a4e155d75ea5a46	-	ol9_x86_64_appstream
	nodejs-libs-22.19.0-2.module+el9.7.0+90752+34782e9c.x86_64.rpm	a45052949132b5276b08c13215c7daea1154087f0152aab00ffbaca747b5e95e	-	ol9_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.7.0+90752+34782e9c.noarch.rpm	0de97d1889a452d020f6e1853c87f06f831487976d086a549426c8e1772042e3	-	ol9_x86_64_appstream
	nodejs-packaging-2021.06-5.module+el9.7.0+90752+34782e9c.noarch.rpm	351cc1bb9098c86697a95987d799c6e2e677607f98e28ebe0217fe349fc0c418	-	ol9_x86_64_appstream
	nodejs-packaging-bundler-2021.06-5.module+el9.7.0+90752+34782e9c.noarch.rpm	1461b8511a127ed3e62585ae11b5e0c28c893bbd8fbf8b1315bdf58236a54ea2	-	ol9_x86_64_appstream
	npm-10.9.3-1.22.19.0.2.module+el9.7.0+90752+34782e9c.x86_64.rpm	ec0f8850627af7f51d1ce51cb3eb53c29ffc79698f1e11fbf1fabdb93d0b402d	-	ol9_x86_64_appstream
	v8-12.4-devel-12.4.254.21-1.22.19.0.2.module+el9.7.0+90752+34782e9c.x86_64.rpm	03b2014df7a44579e91501b6633aa9e5901a03df5282706e906fc8ae1e6faaf2	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team