ELSA-2023-2655

ELSA-2023-2655 - nodejs and nodejs-nodemon security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-05-17

Description

nodejs
[1:16.19.1-1]
- Rebase to 16.19.1
- Resolves: rhbz#2153714
- Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
- Resolves: CVE-2022-25881 CVE-2022-4904

nodejs-nodemon
[2.0.20-3]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

Related CVEs

CVE-2022-25881

CVE-2023-24807

CVE-2023-23918

CVE-2022-4904

CVE-2023-23920

CVE-2023-23936

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	nodejs-16.19.1-1.el9_2.src.rpm	073660fe8aa9e6aaf30e20a3eeadda8b57beefadb5ced024c1d42cd498d3f0c2	-	ol9_aarch64_appstream
	nodejs-nodemon-2.0.20-3.el9_2.src.rpm	8a4c751d338161fb54bf603e0511b8603b3ee930c76ca5bd7e17942c72d98266	-	ol9_aarch64_appstream
	nodejs-16.19.1-1.el9_2.aarch64.rpm	aaae3fca647450581c80a77c65d5d5434ebbd36bdb4df7c539261ff2e2d65c13	-	ol9_aarch64_appstream
	nodejs-docs-16.19.1-1.el9_2.noarch.rpm	973b1981726d8595f23f6e40773908a8838800c42c223fc2a7f42e9e31f970eb	-	ol9_aarch64_appstream
	nodejs-full-i18n-16.19.1-1.el9_2.aarch64.rpm	2440f479266591536087de6932f4416f717f228d8473cd8779f379c7829774a4	-	ol9_aarch64_appstream
	nodejs-libs-16.19.1-1.el9_2.aarch64.rpm	c3c12dd7119525334f277f0838a6eff1e12c476ffd1b595e5f09316aa3d34ce1	-	ol9_aarch64_appstream
	nodejs-nodemon-2.0.20-3.el9_2.noarch.rpm	dff94a9861dc28c1512f3fb68f891175176a8dfcdf45b81e89ade651f7ec9167	-	ol9_aarch64_appstream
	npm-8.19.3-1.16.19.1.1.el9_2.aarch64.rpm	8a2f8835730ce6c67ca23552aa7cd1d8948b7c91f116bbc4b9b209363e0ae04f	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	nodejs-16.19.1-1.el9_2.src.rpm	073660fe8aa9e6aaf30e20a3eeadda8b57beefadb5ced024c1d42cd498d3f0c2	-	ol9_x86_64_appstream
	nodejs-nodemon-2.0.20-3.el9_2.src.rpm	8a4c751d338161fb54bf603e0511b8603b3ee930c76ca5bd7e17942c72d98266	-	ol9_x86_64_appstream
	nodejs-16.19.1-1.el9_2.x86_64.rpm	3ebdb8beb7f11164c06e616ef6d28030550bccf3bb0a7cc40f8f838cbad60f01	-	ol9_x86_64_appstream
	nodejs-docs-16.19.1-1.el9_2.noarch.rpm	973b1981726d8595f23f6e40773908a8838800c42c223fc2a7f42e9e31f970eb	-	ol9_x86_64_appstream
	nodejs-full-i18n-16.19.1-1.el9_2.x86_64.rpm	ce40e9462bb1818ea140272b601237c094411db7ee10b994ec0e67b3451d511e	-	ol9_x86_64_appstream
	nodejs-libs-16.19.1-1.el9_2.i686.rpm	e835382eb03577e237cc8a93bed93c94157f2db848af1834cdc8d89ba4dd7cad	-	ol9_x86_64_appstream
	nodejs-libs-16.19.1-1.el9_2.x86_64.rpm	6a9d5184778927577f3e873246d7e154e9a9127d92636c3af3ec2c63cd2c5a81	-	ol9_x86_64_appstream
	nodejs-nodemon-2.0.20-3.el9_2.noarch.rpm	dff94a9861dc28c1512f3fb68f891175176a8dfcdf45b81e89ade651f7ec9167	-	ol9_x86_64_appstream
	npm-8.19.3-1.16.19.1.1.el9_2.x86_64.rpm	c9b26655ab12ef93d911df7d40f53c2edaabe75e732d49ef96c358da5d6b67e9	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team