ELSA-2025-8506

ELSA-2025-8506 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-06-04

Description


nodejs
[1:22.15-1-1]
- Update to 22.16.0
Fixes: CVE-2025-23166
- Resolves: RHEL-91596 RHEL-92859

[1:22.15.0-1]
- Update to 22.15.0
- Drop upstream patches

[1:22.13.1-4]
- Patch fix for sqlite CVE-2025-31498
Resolves: RHEL-87300

[1:22.13.1-3]
- Update c-ares to newest version with fix for CVE-2025-31498
Resolves: RHEL-86581

[1:22.13.1-2]
- Remove obsolete lua pretransaction script from spec file
Resolves: RHEL-81117 RHEL-71410
- Disable npm update notifications for users
Resolves: RHEL-81080

[22.13.1-1]
- Upgrade to version 22.13.1
Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
Resolves: RHEL-76362 RHEL-76897

[22.11.0-1]
- Upgrade to nodejs 22.11.0.
Resolves: RHEL-35991

[22.4.1-4]
- Exclude ix86 arches from building.
Related: RHEL-35991

[22.4.1-4]
- Initial import of nodeJS 22
Resolves: RHEL-35991

nodejs-nodemon
nodejs-packaging


Related CVEs


CVE-2025-23166

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-22.16.0-1.module+el8.10.0+90605+76e4d41a.src.rpm7504f208c4fcadddd4be7944884260c6a6422c62bea49b636f76ea71bce83b94-ol8_aarch64_appstream
nodejs-nodemon-3.0.1-1.module+el8.10.0+90605+76e4d41a.src.rpm17f2bc64cee5c26d0f244d4d0e345a097a9c32781cf163fa14869e4fa77265e7-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+90605+76e4d41a.src.rpm8e97980ce3e7e9e9dac77d9b4d7dbc32ed1b7a65011fba654fd74ca78e405685-ol8_aarch64_appstream
nodejs-22.16.0-1.module+el8.10.0+90605+76e4d41a.aarch64.rpmfa815676c1b43ea1b5cee7daa3df6366315ecba2f23f4798fdef6fa88d1b83d5-ol8_aarch64_appstream
nodejs-devel-22.16.0-1.module+el8.10.0+90605+76e4d41a.aarch64.rpm28c660c217cfa0f51864e12c0160285c6c6485533f6ac56e4db640827cf354a3-ol8_aarch64_appstream
nodejs-docs-22.16.0-1.module+el8.10.0+90605+76e4d41a.noarch.rpm9b0c843b4cdb3715922b2caea5888d62539e748bae58073c8df8351f37e6abd9-ol8_aarch64_appstream
nodejs-full-i18n-22.16.0-1.module+el8.10.0+90605+76e4d41a.aarch64.rpm36aa31762da4b4d29a2de3092e1af92ef5b34b93d0a331999716e41093156866-ol8_aarch64_appstream
nodejs-libs-22.16.0-1.module+el8.10.0+90605+76e4d41a.aarch64.rpme3937d71597813b5a58de26fb026c42a85150622ee336e06f8131c103d987d1d-ol8_aarch64_appstream
nodejs-nodemon-3.0.1-1.module+el8.10.0+90605+76e4d41a.noarch.rpm258c32ce6a438019995ab14e8a4b1cd4c2704dc212a9dc34ed2b8390185c4a11-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+90605+76e4d41a.noarch.rpm94d24a43d8a2a4b4bf45b46740dc17461829ba88bccb9ceadfad4805668a9c73-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90605+76e4d41a.noarch.rpm97557666445381250b5c780ba4ff179ba1b4e8452e08f332f9941f16d0136dc5-ol8_aarch64_appstream
npm-10.9.2-1.22.16.0.1.module+el8.10.0+90605+76e4d41a.aarch64.rpm7342b385168194dafd0d19ffa16a245b58c2f2173bd36a679b374e81b38e89a9-ol8_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.16.0.1.module+el8.10.0+90605+76e4d41a.aarch64.rpm15f04a34384fcbd61cff4575de2e1c24928d1937c5ac8eddda66739112cfdcae-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-22.16.0-1.module+el8.10.0+90605+76e4d41a.src.rpm7504f208c4fcadddd4be7944884260c6a6422c62bea49b636f76ea71bce83b94-ol8_x86_64_appstream
nodejs-nodemon-3.0.1-1.module+el8.10.0+90605+76e4d41a.src.rpm17f2bc64cee5c26d0f244d4d0e345a097a9c32781cf163fa14869e4fa77265e7-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+90605+76e4d41a.src.rpm8e97980ce3e7e9e9dac77d9b4d7dbc32ed1b7a65011fba654fd74ca78e405685-ol8_x86_64_appstream
nodejs-22.16.0-1.module+el8.10.0+90605+76e4d41a.x86_64.rpm97b87a805fcf17130a0303329175937f55bbeaca563af3ec623faab7e7778d02-ol8_x86_64_appstream
nodejs-devel-22.16.0-1.module+el8.10.0+90605+76e4d41a.x86_64.rpmebbe749883c63c2e3c01d189d8f22ae804bffa13a3893669ec3882daa01a80a8-ol8_x86_64_appstream
nodejs-docs-22.16.0-1.module+el8.10.0+90605+76e4d41a.noarch.rpm9b0c843b4cdb3715922b2caea5888d62539e748bae58073c8df8351f37e6abd9-ol8_x86_64_appstream
nodejs-full-i18n-22.16.0-1.module+el8.10.0+90605+76e4d41a.x86_64.rpm8fb573172021f6f262d37541ee7181ac2fa5fb0057b2101919c53eca70dc4409-ol8_x86_64_appstream
nodejs-libs-22.16.0-1.module+el8.10.0+90605+76e4d41a.x86_64.rpm77fdf9d2e2f4a7d64b2eb9a5802ef358e9d198c2ca52a11989b5250304f6b100-ol8_x86_64_appstream
nodejs-nodemon-3.0.1-1.module+el8.10.0+90605+76e4d41a.noarch.rpm258c32ce6a438019995ab14e8a4b1cd4c2704dc212a9dc34ed2b8390185c4a11-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+90605+76e4d41a.noarch.rpm94d24a43d8a2a4b4bf45b46740dc17461829ba88bccb9ceadfad4805668a9c73-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90605+76e4d41a.noarch.rpm97557666445381250b5c780ba4ff179ba1b4e8452e08f332f9941f16d0136dc5-ol8_x86_64_appstream
npm-10.9.2-1.22.16.0.1.module+el8.10.0+90605+76e4d41a.x86_64.rpm5a0fa7e196125835ac9bc8969cd5e3a3f906f5d3a2a03c0e08fd6e5ea297d225-ol8_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.16.0.1.module+el8.10.0+90605+76e4d41a.x86_64.rpmce7871a9a1eb894b502428233654a9946cc5f1e6c2cf6c4503dd5a83d4dca827-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete