Chapter 9. Node.js

9.1. Supported Node.js Base Images

Table 9.1. Node.js 8 LTS

Node.js base imageRelease

registry.access.redhat.com/rhoar-nodejs/nodejs-8

8.12.0-0

Table 9.2. Node.js 10 LTS

Node.js base imageRelease

registry.access.redhat.com/rhoar-nodejs/nodejs-10

10.12.0-0

9.2. Technology Preview Node.js Base Images

Table 9.3. Node.js 10 LTS

9.3. Supported Node.js RPM Packages

Table 9.4. Node.js 8 LTS

Package nameArchitecture/TypeVersionDescription

rhoar-nodejs-8.12.0-4.el7.src.rpm

SRPMS

8.12.0

RHOAR Node.js 8 (LTS) sources

rhoar-nodejs-docs-8.12.0-4.el7.noarch.rpm

noarch

8.12.0

RHOAR Node.js 8 API documentation

npm-6.4.1-1.8.12.0.4.el7.x86_64.rpm

x86_64

6.4.1

npm package manager

rhoar-nodejs-8.12.0-4.el7.x86_64.rpm

x86_64

8.12.0

RHOAR Node.js (LTS) 8 binaries

rhoar-nodejs-debuginfo-8.12.0-4.el7.x86_64.rpm

x86_64

8.12.0

debug information for the RHOAR Node.js 8 package

Table 9.5. Node.js 10 LTS

Package nameArchitecture/TypeVersionDescription

rhoar-nodejs-10.12.0-1.el7.src.rpm

SRPMS

10.12.0

RHOAR Node.js 10 (LTS) sources

rhoar-nodejs-docs-10.12.0-1.el7.noarch.rpm

noarch

10.12.0

RHOAR Node.js 10 API documentation

npm-6.4.1-1.10.12.0.1.el7.x86_64.rpm

x86_64

6.4.1

npm package manager

rhoar-nodejs-10.12.0-1.el7.x86_64.rpm

x86_64

10.12.0

RHOAR Node.js 10 (LTS) binaries

rhoar-nodejs-debuginfo-10.12.0-1.el7.x86_64.rpm

x86_64

10.12.0

debug information for the RHOAR Node.js 10 package

npm-6.4.1-1.10.12.0.1.el7.ppc64le.rpm

PPC64LE

6.4.1

npm package manager

rhoar-nodejs-10.12.0-1.el7.ppc64le.rpm

PPC64LE

10.12.0

RHOAR Node.js 10 (LTS) binaries

rhoar-nodejs-debuginfo-10.12.0-1.el7.ppc64le.rpm

PPC64LE

10.12.0

debug information for the RHOAR Node.js 10 package

9.4. Community Node.js npm modules

The RHOAR Node.js base image allows you to develop a Node.js application for OpenShift using any of the community Node.js modules available through npm. Community npm modules are not supported by Red Hat.

9.5. Resolved Node.js Issues

Node.js 8.12.0

The RHOAR Node.js release is a Red Hat product release aligned with the community Node.js LTS release version 8.12.0. The current productized release contains aggregated bug fixes and enhancements introduced in community versions 8.11.4 through 8.12.0. For a list of issues resolved in this release, see the Node.js 8.12.0 changelog.

Security Bug Fixes

Bugfixes listed below for 8.12.0 applicable to 10.12.0 are addressed in both releases, but listed only once. Bugfixes specific to 10.12.0 only are listed separately under the Node.js 10 subsection.

9.5.1. CVE-2018-14634

Affected component
kernel
Issue summary
Integer overflow in Linux’s create_elf_tables function
Red Hat CVE database entry
CVE-2018-14634
Bugzilla Bug ID
1624498

9.5.2. CVE-2018-12384

Affected component
nss
Issue summary
ServerHello.random is all zeros when handling a v2-compatible ClientHello
Red Hat CVE database entry
CVE-2018-12384
Bugzilla Bug ID
1622089

Node.js 10.12.0

The RHOAR Node.js release is a Red Hat product release aligned with the community Node.js LTS release version 10.12.0. The current productized release contains aggregated bug fixes and enhancements introduced in the upstream between versions 10.10.0 and 10.11.0. For a list of issues resolved in this release, see the Node.js 10.12.0 changelog.

9.5.3. CVE-2018-14634

Security Bug Fixes

Affected component
kernel
Issue summary
Integer overflow in Linux’s create_elf_tables function
Red Hat CVE database entry
CVE-2018-14634
Bugzilla Bug ID
1624498