ELSA-2021-3666

ELSA-2021-3666 - nodejs:14 security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-09-27

Description

nodejs
[1:14.17.5-1]
- Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
- CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
- Resolves RHBZ#1847529 (make FIPS always available)
- Resolves: RHBZ#1988599, RHBZ#1994000, RHBZ#1993998, RHBZ#1993095
- Resolves: RHBZ#1994028, RHBZ#1994402, RHBZ#1994406, RHBZ#1994398
- Resolves: RHBZ#1993924 (make FIPS always available)

[1:14.17.3-3]
- Resolves: RHBZ#1991584, RHBZ#1991578
- Resolves CVE-2021-23362 CVE-2021-27290
- Bump for missing mentions of CVEs

Related CVEs

CVE-2021-22939

CVE-2021-3672

CVE-2021-32804

CVE-2021-22940

CVE-2021-32803

CVE-2021-22930

CVE-2021-22931

CVE-2021-23343

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nodejs-14.17.5-1.module+el8.4.0+20313+f90c2973.src.rpm	cc0dcaf8ef621643b4f6061673b3ca4cbb4784881d60213285249177f51356e2	-	ol8_aarch64_appstream
	nodejs-nodemon-2.0.3-1.module+el8.3.0+7818+6cd30d85.src.rpm	4746dc32b71bd16851cfb479f6ea44f44bd2dce3063da430b626160eacd193d3	-	ol8_aarch64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.src.rpm	c6e3f13fc0fffcdf1324993e6715e3774bd22ec8d6831ef8c60f9265d829f26f	-	ol8_aarch64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.src.rpm	c6e3f13fc0fffcdf1324993e6715e3774bd22ec8d6831ef8c60f9265d829f26f	-	ol8_aarch64_appstream_developer
	nodejs-14.17.5-1.module+el8.4.0+20313+f90c2973.aarch64.rpm	2d36c4e72ca12270544412a1433bc1ddd6420746e3b8043ee85e6b3036ba1e8c	-	ol8_aarch64_appstream
	nodejs-devel-14.17.5-1.module+el8.4.0+20313+f90c2973.aarch64.rpm	a964f2d96257ce8fd5a89858e20e7fde65593e000a63d85e8fc3d2256a29af36	-	ol8_aarch64_appstream
	nodejs-docs-14.17.5-1.module+el8.4.0+20313+f90c2973.noarch.rpm	c03bbe52fc2c0857148baf5ee0a96192f8ce9ba381c2a8b35055b299e6fe004f	-	ol8_aarch64_appstream
	nodejs-full-i18n-14.17.5-1.module+el8.4.0+20313+f90c2973.aarch64.rpm	adda93efe4069f1d80ea21662f2524d062fbe7a417744c67d4fb147208759b6e	-	ol8_aarch64_appstream
	nodejs-nodemon-2.0.3-1.module+el8.3.0+7818+6cd30d85.noarch.rpm	90d1ca69c4e49c26bc622dbf61969abf7a7c51ff1cc55990d2df1f1ae965455f	-	ol8_aarch64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.noarch.rpm	22c881f41b441d36d0070893587fb5182793bfbdfbd516b7bb9305592748796d	-	ol8_aarch64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.noarch.rpm	22c881f41b441d36d0070893587fb5182793bfbdfbd516b7bb9305592748796d	-	ol8_aarch64_appstream_developer
	npm-6.14.14-1.14.17.5.1.module+el8.4.0+20313+f90c2973.aarch64.rpm	d497be091217f6205a79a10c55badab8dd318281147cb20d57ce523e99b708f0	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	nodejs-14.17.5-1.module+el8.4.0+20313+f90c2973.src.rpm	cc0dcaf8ef621643b4f6061673b3ca4cbb4784881d60213285249177f51356e2	-	ol8_x86_64_appstream
	nodejs-nodemon-2.0.3-1.module+el8.3.0+7818+6cd30d85.src.rpm	4746dc32b71bd16851cfb479f6ea44f44bd2dce3063da430b626160eacd193d3	-	ol8_x86_64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.src.rpm	c6e3f13fc0fffcdf1324993e6715e3774bd22ec8d6831ef8c60f9265d829f26f	-	ol8_x86_64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.src.rpm	c6e3f13fc0fffcdf1324993e6715e3774bd22ec8d6831ef8c60f9265d829f26f	-	ol8_x86_64_appstream_developer
	nodejs-14.17.5-1.module+el8.4.0+20313+f90c2973.x86_64.rpm	e308b279f31c58d64d8cb003404730503f292a0375e71ae33ed59d6fcd1b4356	-	ol8_x86_64_appstream
	nodejs-devel-14.17.5-1.module+el8.4.0+20313+f90c2973.x86_64.rpm	e7ee6c96010d8cb417b245cb9d018354ff79c87965332fd60224e0eb8043421a	-	ol8_x86_64_appstream
	nodejs-docs-14.17.5-1.module+el8.4.0+20313+f90c2973.noarch.rpm	c03bbe52fc2c0857148baf5ee0a96192f8ce9ba381c2a8b35055b299e6fe004f	-	ol8_x86_64_appstream
	nodejs-full-i18n-14.17.5-1.module+el8.4.0+20313+f90c2973.x86_64.rpm	56506cffb92d398316c46235b489f874a4bf68722c8f391f7c508073a1442561	-	ol8_x86_64_appstream
	nodejs-nodemon-2.0.3-1.module+el8.3.0+7818+6cd30d85.noarch.rpm	90d1ca69c4e49c26bc622dbf61969abf7a7c51ff1cc55990d2df1f1ae965455f	-	ol8_x86_64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.noarch.rpm	22c881f41b441d36d0070893587fb5182793bfbdfbd516b7bb9305592748796d	-	ol8_x86_64_appstream
	nodejs-packaging-23-3.module+el8.3.0+7818+6cd30d85.noarch.rpm	22c881f41b441d36d0070893587fb5182793bfbdfbd516b7bb9305592748796d	-	ol8_x86_64_appstream_developer
	npm-6.14.14-1.14.17.5.1.module+el8.4.0+20313+f90c2973.x86_64.rpm	c5ce4d7c5a341bf2eb57638ce3074efe8cf6567a465e45b8537b55e8ec9d96d7	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team