ELBA-2025-35380

ELBA-2025-35380 - yarnpkg Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2025-06-13

Description

[1.22.22-8]
- Refresh bundle tarball for CVE-2025-48387

[1.22.22-7]
- Fix CVE-2024-12905

[1.22.22-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

[1.22.22-5]
- Update bundled ws (CVE-2024-37890)

[1.22.22-4]
- Update bundled elliptic (CVE-2024-48949)

[1.22.22-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1.22.22-2]
- Backport patch for CVE-2024-4067

[1.22.22-1]
- Update to 1.22.22

[1.22.21-2]
- Backport patches for CVE-2022-37599, CVE-2023-26136, CVE-2023-46234

[1.22.21-1]
- Update to 1.22.21

[1.22.19-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.19-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	yarnpkg-1.22.22-8.el9.src.rpm	4f5ea9757340e346ecaf289b21f31ca6cec864b5836166379373184da8fddfb9	-	ol9_x86_64_developer_EPEL
	yarnpkg-1.22.22-8.el9.x86_64.rpm	0351fe6f44017084e3674ad3d62e7b6d67b63c98d20415956065890cd885a137	-	ol9_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team