A nodejs:18 security, bug fix, and enhancement update has been released for Oracle Linux 8.

El-errata: ELSA-2022-8833 Moderate: Oracle Linux 8 nodejs:18 security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2022-8833

  http://linux.oracle.com/errata/ELSA-2022-8833.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-18.12.1-2.module+el8.7.0+20890+579912a9.x86_64.rpm
nodejs-devel-18.12.1-2.module+el8.7.0+20890+579912a9.x86_64.rpm
nodejs-docs-18.12.1-2.module+el8.7.0+20890+579912a9.noarch.rpm
nodejs-full-i18n-18.12.1-2.module+el8.7.0+20890+579912a9.x86_64.rpm
nodejs-nodemon-2.0.20-1.module+el8.7.0+20890+579912a9.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.7.0+20766+0a247725.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.7.0+20766+0a247725.noarch.rpm
npm-8.19.2-1.18.12.1.2.module+el8.7.0+20890+579912a9.x86_64.rpm

aarch64:
nodejs-18.12.1-2.module+el8.7.0+20890+579912a9.aarch64.rpm
nodejs-devel-18.12.1-2.module+el8.7.0+20890+579912a9.aarch64.rpm
nodejs-docs-18.12.1-2.module+el8.7.0+20890+579912a9.noarch.rpm
nodejs-full-i18n-18.12.1-2.module+el8.7.0+20890+579912a9.aarch64.rpm
nodejs-nodemon-2.0.20-1.module+el8.7.0+20890+579912a9.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.7.0+20766+0a247725.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.7.0+20766+0a247725.noarch.rpm
npm-8.19.2-1.18.12.1.2.module+el8.7.0+20890+579912a9.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/nodejs-18.12.1-2.module+el8.7.0+20890+579912a9.src.rpm
  http://oss.oracle.com/ol8/SRPMS-updates/nodejs-nodemon-2.0.20-1.module+el8.7.0+20890+579912a9.src.rpm
  http://oss.oracle.com/ol8/SRPMS-updates/nodejs-packaging-2021.06-4.module+el8.7.0+20766+0a247725.src.rpm

Related CVEs:

CVE-2022-3517
CVE-2022-43548



Description of changes:

nodejs
[1:18.12.1-2]
- Update version of bundled histogram

[1:18.12.1-1]
- Rebase to version 18.12.1
Resolves: rhbz#2125580 CVE-2022-43548 CVE-2022-3517

[1:18.9.1-1]
- Rebase to version 18.9.1
Resolves: CVE-2022-35255 CVE-2022-35256

nodejs-nodemon
[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517

_______________________________________________