ELEA-2025-8879

ELEA-2025-8879 - nodejs:18 bug fix and enhancement update

Type:	ENHANCEMENT
Impact:	NA
Release Date:	2025-06-12

Description

nodejs
[1:18.20.8-1]
- Update to version 18.20.8
Resolves: RHEL-83532 RHEL-89595

[1:18.20.6-2]
- Disable npm's update-notifier
Resolves: RHEL-81076

[1:18.20.6-1]
- Update to version 18.20.6
Resolves: RHEL-76801
Fixes: CVE-2025-23085

[1:18.20.4-1]
- Update to 18.20.4
Fixes: CVE-2024-22020 CVE-2024-28863

[1:18.20.2-2]
- Removes .ps1 files

[1:18.20.2-1]
- Rebase to 18.20.2
- Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629

[1:18.19.1-1]
- Rebase to version 18.19.1
- Fixes: CVE-2024-21892 CVE-2024-22019 (high)
- Fixes: CVE-2023-46809 (medium)

[1:18.19.0-1]
- Rebase to version 18.19.0
Resolves: RHEL-21436

[1:18.17.1-1]
- Rebase to version 18.17.1
Resolves: rhbz#2228940
Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
- Specify proper OpenSSL configuration section build
Related: rhbz#2226726

[1:18.16.1-2]
- Fix segfault that happens when processing fips-related options
Resolves: BZ#2226726

[1:18.16.1-1]
- Rebase to 18.16.1
Resolves: rhbz#2188292 rhbz#2187683
Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
- Replace /usr/etc/npmrc symlink with builtin configuration
Resolves: rhbz#2222285

[1:18.14.2-3]
- Update bundled c-ares to 1.19.1
Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

nodejs-nodemon
nodejs-packaging

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	nodejs-18.20.8-1.module+el9.6.0+90614+f11b29ab.src.rpm	98233387f3859ab87855cdcb8679e7cbcf155061faaf369c055e0e0c47852470	-	ol9_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.5.0+90514+74072e0a.src.rpm	cee744a0108b0e32e69547781eb366e16f2aa02d54e233dc105ace6d371fde07	-	ol9_aarch64_appstream
	nodejs-packaging-2021.06-4.module+el9.5.0+90514+74072e0a.src.rpm	e8c7c809ae9fab1ba799dc413d3479bd924b1156f11648e2e9adb8c8abd58769	-	ol9_aarch64_appstream
	nodejs-18.20.8-1.module+el9.6.0+90614+f11b29ab.aarch64.rpm	7e84362512ca48eb1fd107bbb82166aeb3cffe34d92d64af3b08db57afa4a5b6	-	ol9_aarch64_appstream
	nodejs-devel-18.20.8-1.module+el9.6.0+90614+f11b29ab.aarch64.rpm	cba82a94207a8da8767ef796dce52f04a9c2e73fa00dc48de9725b013dff01a4	-	ol9_aarch64_appstream
	nodejs-docs-18.20.8-1.module+el9.6.0+90614+f11b29ab.noarch.rpm	b74464242166d19d0393bcf772c8b68b0e914dfe1e3ce7be9dd4e2236b988f02	-	ol9_aarch64_appstream
	nodejs-full-i18n-18.20.8-1.module+el9.6.0+90614+f11b29ab.aarch64.rpm	f8b853364b802f5df8be4bd40129dc6a1c54bdec140d42bd1af7b676d18e8d61	-	ol9_aarch64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.5.0+90514+74072e0a.noarch.rpm	4513f2b59f509a847978e7b63298fff599eec0679a7cde25cf19eb10b6142c87	-	ol9_aarch64_appstream
	nodejs-packaging-2021.06-4.module+el9.5.0+90514+74072e0a.noarch.rpm	9190c08f7b37c879ccd1bc3d9ecacedc514f95da57d453532621adc273d0fa66	-	ol9_aarch64_appstream
	nodejs-packaging-bundler-2021.06-4.module+el9.5.0+90514+74072e0a.noarch.rpm	0a0bc98503994179451ce9b416a4d8fec2923c4abdcde703e1b71330d5f5313a	-	ol9_aarch64_appstream
	npm-10.8.2-1.18.20.8.1.module+el9.6.0+90614+f11b29ab.aarch64.rpm	faf9e08f6e1b1f6b4d5991fb437d9707ae4d370d32a3101a9b53fe8dc2ad2414	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	nodejs-18.20.8-1.module+el9.6.0+90614+f11b29ab.src.rpm	98233387f3859ab87855cdcb8679e7cbcf155061faaf369c055e0e0c47852470	-	ol9_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.5.0+90514+74072e0a.src.rpm	cee744a0108b0e32e69547781eb366e16f2aa02d54e233dc105ace6d371fde07	-	ol9_x86_64_appstream
	nodejs-packaging-2021.06-4.module+el9.5.0+90514+74072e0a.src.rpm	e8c7c809ae9fab1ba799dc413d3479bd924b1156f11648e2e9adb8c8abd58769	-	ol9_x86_64_appstream
	nodejs-18.20.8-1.module+el9.6.0+90614+f11b29ab.x86_64.rpm	d26ee12b9b01d442177d5bc7dd4527a0682ca1e61ba349b5cff2d22ab82ef38f	-	ol9_x86_64_appstream
	nodejs-devel-18.20.8-1.module+el9.6.0+90614+f11b29ab.x86_64.rpm	458e8bc90c2c5ddb980617d1e4913a64a0215ac5c3d817e0dd93aa8ad7c6f2f3	-	ol9_x86_64_appstream
	nodejs-docs-18.20.8-1.module+el9.6.0+90614+f11b29ab.noarch.rpm	b74464242166d19d0393bcf772c8b68b0e914dfe1e3ce7be9dd4e2236b988f02	-	ol9_x86_64_appstream
	nodejs-full-i18n-18.20.8-1.module+el9.6.0+90614+f11b29ab.x86_64.rpm	fcb4409994dfddf430c4329d8fd0a2e215eb4661b8a824a9766ea66e8d1370cf	-	ol9_x86_64_appstream
	nodejs-nodemon-3.0.1-1.module+el9.5.0+90514+74072e0a.noarch.rpm	4513f2b59f509a847978e7b63298fff599eec0679a7cde25cf19eb10b6142c87	-	ol9_x86_64_appstream
	nodejs-packaging-2021.06-4.module+el9.5.0+90514+74072e0a.noarch.rpm	9190c08f7b37c879ccd1bc3d9ecacedc514f95da57d453532621adc273d0fa66	-	ol9_x86_64_appstream
	nodejs-packaging-bundler-2021.06-4.module+el9.5.0+90514+74072e0a.noarch.rpm	0a0bc98503994179451ce9b416a4d8fec2923c4abdcde703e1b71330d5f5313a	-	ol9_x86_64_appstream
	npm-10.8.2-1.18.20.8.1.module+el9.6.0+90614+f11b29ab.x86_64.rpm	3be10dd808dd8c373f717a26cd9f564e0e0d87f7aed29b1bdd34d2d2ab3d8643	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team