ALEA-2021:4200 new module: nodejs:16

Not scored Published

This is an enhancement update adding Node.js 16 as a Technology Preview, not a security vulnerability fix.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is ALEA-2021:4200?

ALEA-2021:4200 is a vulnerability in nodejs-packaging, published on 9 Nov 2021.

Official description

This enhancement update adds the nodejs:16 module to AlmaLinuxas a Technology Preview. A future update will provide a Long Term Support (LTS) version of Node.js 16, which will be fully supported. (BZ#1953991)

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

For information on AlmaLinux scope of support for Technology Preview features, see Technology Preview Features Support Scope.

Which versions are affected by ALEA-2021:4200?

Linux distribution packages (2)
nodejs-packaging AlmaLinux:8All versions25-1.module_el8.5.0+246+05401605
nodejs-packaging AlmaLinux:8All versions25-1.module_el8.5.0+2605+45d748af

How do I fix ALEA-2021:4200?

Upgrade to a fixed version.

Is ALEA-2021:4200 being exploited?

There is no known exploitation of ALEA-2021:4200 in the wild and no public exploit code.

Sources

Is ALEA-2021:4200 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free