[El-errata] ELSA-2025-1443 Important: Oracle Linux 9 nodejs:20 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-1443

http://linux.oracle.com/errata/ELSA-2025-1443.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-20.18.2-1.module+el9.5.0+90512+230358da.x86_64.rpm
nodejs-devel-20.18.2-1.module+el9.5.0+90512+230358da.x86_64.rpm
nodejs-docs-20.18.2-1.module+el9.5.0+90512+230358da.noarch.rpm
nodejs-full-i18n-20.18.2-1.module+el9.5.0+90512+230358da.x86_64.rpm
nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
npm-10.8.2-1.20.18.2.1.module+el9.5.0+90512+230358da.x86_64.rpm

aarch64:
nodejs-20.18.2-1.module+el9.5.0+90512+230358da.aarch64.rpm
nodejs-devel-20.18.2-1.module+el9.5.0+90512+230358da.aarch64.rpm
nodejs-docs-20.18.2-1.module+el9.5.0+90512+230358da.noarch.rpm
nodejs-full-i18n-20.18.2-1.module+el9.5.0+90512+230358da.aarch64.rpm
nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
npm-10.8.2-1.20.18.2.1.module+el9.5.0+90512+230358da.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-20.18.2-1.module+el9.5.0+90512+230358da.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.src.rpm

Related CVEs:

CVE-2025-22150
CVE-2025-23083
CVE-2025-23085




Description of changes:

nodejs
[1:20.18.2]
- Update to version 20.18.2
  Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
  Resolves: RHEL-76363 RHEL-76554 RHEL-76540

[1:20.18.1-1]
- Update to version 20.18.1

nodejs-nodemon
nodejs-packaging