nodejs:20 security update

2024-08-2600:00:00

linux.oracle.com

nodejs

security update

cve-2024-36137

cve-2024-22018

cve-2024-22020

nodemon

packaging

unix

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

Percentile

16.3%

JSON

nodejs
[1:20.16.0-1]

Update to 20.16.0
Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020
nodejs-nodemon
nodejs-packaging

OSVersionArchitecturePackageVersionFilename
oracle linux9srcnodejs< 20.16.0-1.modulenodejs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.src.rpm
oracle linux9srcnodejs-nodemon< 3.0.1-1.modulenodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.src.rpm
oracle linux9srcnodejs-packaging< 2021.06-4.modulenodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.src.rpm
oracle linux9aarch64nodejs< 20.16.0-1.modulenodejs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux9aarch64nodejs-devel< 20.16.0-1.modulenodejs-devel-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux9noarchnodejs-docs< 20.16.0-1.modulenodejs-docs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.noarch.rpm
oracle linux9aarch64nodejs-full-i18n< 20.16.0-1.modulenodejs-full-i18n-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux9noarchnodejs-nodemon< 3.0.1-1.modulenodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
oracle linux9noarchnodejs-packaging< 2021.06-4.modulenodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
oracle linux9noarchnodejs-packaging-bundler< 2021.06-4.modulenodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	nodejs	< 20.16.0-1.module	nodejs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.src.rpm
oracle linux	9	src	nodejs-nodemon	< 3.0.1-1.module	nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.src.rpm
oracle linux	9	src	nodejs-packaging	< 2021.06-4.module	nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.src.rpm
oracle linux	9	aarch64	nodejs	< 20.16.0-1.module	nodejs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux	9	aarch64	nodejs-devel	< 20.16.0-1.module	nodejs-devel-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux	9	noarch	nodejs-docs	< 20.16.0-1.module	nodejs-docs-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.noarch.rpm
oracle linux	9	aarch64	nodejs-full-i18n	< 20.16.0-1.module	nodejs-full-i18n-20.16.0-1.module+el9.4.0+90390+ec2aa9c0.aarch64.rpm
oracle linux	9	noarch	nodejs-nodemon	< 3.0.1-1.module	nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
oracle linux	9	noarch	nodejs-packaging	< 2021.06-4.module	nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
oracle linux	9	noarch	nodejs-packaging-bundler	< 2021.06-4.module	nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm