Summary
nodejs
[1:22.16.0-2]
- Patch fix for sqlite CVE-2025-6965
Resolves: RHEL-103835
[1:22.15-1-1]
- Update to 22.16.0
Fixes: CVE-2025-23166
- Resolves: RHEL-91596 RHEL-92859
[1:22.15.0-1]
- Update to 22.15.0
- Drop upstream patches
[1:22.13.1-4]
- Patch fix for sqlite CVE-2025-31498
Resolves: RHEL-87300
[1:22.13.1-3]
- Update c-ares to newest version with fix for CVE-2025-31498
Resolves: RHEL-86581
[1:22.13.1-2]
- Remove obsolete lua pretransaction script from spec file
Resolves: RHEL-81117 RHEL-71410
- Disable npm update notifications for users
Resolves: RHEL-81080
[22.13.1-1]
- Upgrade to version 22.13.1
Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
Resolves: RHEL-76362 RHEL-76897
[22.11.0-1]
- Upgrade to nodejs 22.11.0.
Resolves: RHEL-35991
[22.4.1-4]
- Exclude ix86 arches from building.
Related: RHEL-35991
[22.4.1-4]
- Initial import of nodeJS 22
Resolves: RHEL-35991
nodejs-nodemon
nodejs-packaging
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | nodejs | 1:22.16.0-2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-devel | 1:22.16.0-2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-docs | 1:22.16.0-2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-full-i18n | 1:22.16.0-2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-libs | 1:22.16.0-2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | nodejs-packaging-bundler | 0:2021.06-4.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | npm | 1:10.9.2-1.22.16.0.2.module+el8.10.0+90633+72602921 |
| Oracle Linux · 8 | v8-12.4-devel | 3:12.4.254.21-1.22.16.0.2.module+el8.10.0+90633+72602921 |
Vulnerabilities 1
-
High 7.2
Integer Truncation on SQLite
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.