ELBA-2025-23364

ELBA-2025-23364 - nodejs:20 bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-01-05

Description

nodejs
[1:20.19.5-1]
- Update to version 20.19.5
Resolves: RHEL-100423

[1:20.19.2-1]
- Update to version 20.19.2
Fixes: CVE-2025-23166
Resolves: RHEL-91595 RHEL-89598 RHEL-92854

[1:20.19.1-1]
- Update to version 20.19.1
Resolves: RHEL-78763

[1:20.18.2-4]
- Update c-ares to 1.34.5 to address CVE-2025-31498

[1:20.18.2-3]
- Remove obsolete lua pretransaction script from spec file
Resolves: RHEL-81125

[1:20.18.2-2]
- Disable npm's update-notifier
Resolves: RHEL-81077

[1:20.18.2-1]
- Update to version 20.18.2
Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
Resolves: RHEL-76001 RHEL-76146

[1:20.16.0-1]
- Update to 20.16.0
Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020

[1:20.12.2-2]
- Backport nghttp2 patch for CVE-2024-28182

[1:20.12.2-1]
- Rebase to version 20.12.0
Addresses CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
Addresses CVE-2024-25629 (c-ares)

nodejs-nodemon
[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517

[2.0.19-1]
- Rebase to 2.0.19
Resolves: CVE-2022-33987

[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com

[2.0.7-1]
- Resolves: RHBZ#1953991
- Update to 2.0.7 to resolve CVE-2020-28469

[2.0.3-1]
- Updated

[1.18.3-1]
- Resolves: #1615413
- Updated
- bundled

[1.11.0-2]
- rh-nodejs8 rebuild

[1.11.0-1]
- Updated with script

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nodejs-20.19.5-1.module+el8.10.0+90743+b61054a8.src.rpm	317a9eab9b7f49f42617f2cf6a5e8949f249c42da37222222cae82da26251d93	-	ol8_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.src.rpm	69344d52950e8b016abae5ffd8a1d68bb9d834f8dbd97fc7e1812c75a2549ffb	-	ol8_aarch64_appstream
	nodejs-20.19.5-1.module+el8.10.0+90743+b61054a8.aarch64.rpm	e40067b691965e3761e93cb6cc3f5d64b37e9a3529ea5bd6cf09766f05a7b28a	-	ol8_aarch64_appstream
	nodejs-devel-20.19.5-1.module+el8.10.0+90743+b61054a8.aarch64.rpm	c0ef512e2228aa902a73cecaf855598dc648ae8f77ab8f98953c64911ac00cce	-	ol8_aarch64_appstream
	nodejs-docs-20.19.5-1.module+el8.10.0+90743+b61054a8.noarch.rpm	6404280589bbc85f616c378bd0275703e6c75145aaf96cdc40e866c921b5d44d	-	ol8_aarch64_appstream
	nodejs-full-i18n-20.19.5-1.module+el8.10.0+90743+b61054a8.aarch64.rpm	e09670814b30979a01e329840d81eb23aab6359c5d07e410757bd88019e86224	-	ol8_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.noarch.rpm	a69039d29e5ac8bd94dd2a76f4070c3610464fae006c16efc45bddde4e0fcc96	-	ol8_aarch64_appstream
	npm-10.8.2-1.20.19.5.1.module+el8.10.0+90743+b61054a8.aarch64.rpm	d5e7f24e5d2572fff0ec03129ac5e50efc3a9c36fec542e371c1c3d1adea09e8	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	nodejs-20.19.5-1.module+el8.10.0+90743+b61054a8.src.rpm	317a9eab9b7f49f42617f2cf6a5e8949f249c42da37222222cae82da26251d93	-	ol8_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.src.rpm	69344d52950e8b016abae5ffd8a1d68bb9d834f8dbd97fc7e1812c75a2549ffb	-	ol8_x86_64_appstream
	nodejs-20.19.5-1.module+el8.10.0+90743+b61054a8.x86_64.rpm	244e1bb6c2148ffb1d988c3f9f6d483c78100a3015564e6e4bdbb2ed339dc3f7	-	ol8_x86_64_appstream
	nodejs-devel-20.19.5-1.module+el8.10.0+90743+b61054a8.x86_64.rpm	44f2a9ce016a5c174191241d9b1d49e804ce32a3726923d18f47ce4963702bba	-	ol8_x86_64_appstream
	nodejs-docs-20.19.5-1.module+el8.10.0+90743+b61054a8.noarch.rpm	6404280589bbc85f616c378bd0275703e6c75145aaf96cdc40e866c921b5d44d	-	ol8_x86_64_appstream
	nodejs-full-i18n-20.19.5-1.module+el8.10.0+90743+b61054a8.x86_64.rpm	b34607e336d1f59fcb427743811da3eb14674bf1f24cf68b9fd7d3544e1da683	-	ol8_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.noarch.rpm	a69039d29e5ac8bd94dd2a76f4070c3610464fae006c16efc45bddde4e0fcc96	-	ol8_x86_64_appstream
	npm-10.8.2-1.20.19.5.1.module+el8.10.0+90743+b61054a8.x86_64.rpm	076b1f333b2a77abc54c36397b499f0ea5407dc0d11c6d4855782754f86021b0	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team