[El-errata] ELSA-2025-1611 Important: Oracle Linux 8 nodejs:22 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-1611

http://linux.oracle.com/errata/ELSA-2025-1611.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-22.13.1-1.module+el8.10.0+90518+cdafa262.x86_64.rpm
nodejs-devel-22.13.1-1.module+el8.10.0+90518+cdafa262.x86_64.rpm
nodejs-docs-22.13.1-1.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-full-i18n-22.13.1-1.module+el8.10.0+90518+cdafa262.x86_64.rpm
nodejs-libs-22.13.1-1.module+el8.10.0+90518+cdafa262.x86_64.rpm
nodejs-nodemon-3.0.1-1.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90518+cdafa262.noarch.rpm
npm-10.9.2-1.22.13.1.1.module+el8.10.0+90518+cdafa262.x86_64.rpm
v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+90518+cdafa262.x86_64.rpm

aarch64:
nodejs-22.13.1-1.module+el8.10.0+90518+cdafa262.aarch64.rpm
nodejs-devel-22.13.1-1.module+el8.10.0+90518+cdafa262.aarch64.rpm
nodejs-docs-22.13.1-1.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-full-i18n-22.13.1-1.module+el8.10.0+90518+cdafa262.aarch64.rpm
nodejs-libs-22.13.1-1.module+el8.10.0+90518+cdafa262.aarch64.rpm
nodejs-nodemon-3.0.1-1.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.10.0+90518+cdafa262.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90518+cdafa262.noarch.rpm
npm-10.9.2-1.22.13.1.1.module+el8.10.0+90518+cdafa262.aarch64.rpm
v8-12.4-devel-12.4.254.21-1.22.13.1.1.module+el8.10.0+90518+cdafa262.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//nodejs-22.13.1-1.module+el8.10.0+90518+cdafa262.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//nodejs-nodemon-3.0.1-1.module+el8.10.0+90518+cdafa262.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//nodejs-packaging-2021.06-4.module+el8.10.0+90518+cdafa262.src.rpm

Related CVEs:

CVE-2025-22150
CVE-2025-23083
CVE-2025-23085




Description of changes:

nodejs
[22.13.1-1]
- Upgrade to version 22.13.1
  Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
  Resolves: RHEL-76362 RHEL-76897

[22.11.0-1]
- Upgrade to nodejs 22.11.0.
  Resolves: RHEL-35991

[22.4.1-4]
- Exclude ix86 arches from building.
  Related: RHEL-35991

[22.4.1-4]
- Initial import of nodeJS 22
  Resolves: RHEL-35991

nodejs-nodemon
nodejs-packaging