Summary
[1:16.20.2-1]
- Update to 16.20.2-1
Resolves CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | nodejs | 1:16.20.2-1.el9_2 |
| Oracle Linux · 9 | nodejs-docs | 1:16.20.2-1.el9_2 |
| Oracle Linux · 9 | nodejs-full-i18n | 1:16.20.2-1.el9_2 |
| Oracle Linux · 9 | nodejs-libs | 1:16.20.2-1.el9_2 |
| Oracle Linux · 9 | npm | 1:8.19.4-1.16.20.2.1.el9_2 |
Vulnerabilities 3
-
Critical 9.8
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition f…
-
High 8.8
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the poli…
-
High 7.5
A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.…