Skip to content
OpenAdvisories
High ELSA-2022-4796 1 CVE

Important: nodejs:16 security update (Oracle Linux 8)

Published May 30, 2022 · Updated May 30, 2022

Ecosystem: Oracle Linux

Summary

nodejs
[1:16.14.0-4]
- Apply lock file validation fixes
- Resolves CVE-2021-43616
- Resolves: RHBZ#2070012

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 8 nodejs 1:16.14.0-4.module+el8.6.0+20672+19f3909b
Oracle Linux · 8 nodejs-devel 1:16.14.0-4.module+el8.6.0+20672+19f3909b
Oracle Linux · 8 nodejs-docs 1:16.14.0-4.module+el8.6.0+20672+19f3909b
Oracle Linux · 8 nodejs-full-i18n 1:16.14.0-4.module+el8.6.0+20672+19f3909b
Oracle Linux · 8 nodejs-nodemon 0:2.0.15-1.module+el8.6.0+20672+19f3909b
Oracle Linux · 8 nodejs-packaging 0:25-1.module+el8.5.0+20388+4b61e68d
Oracle Linux · 8 npm 1:8.3.1-1.16.14.0.4.module+el8.6.0+20672+19f3909b

Vulnerabilities 1

  • Critical 9.0
    CVE-2021-43616 Public exploit

    The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in pac…

    npm npm npm Debian Ubuntu Alpine