ELSA-2026-2420

ELSA-2026-2420 - nodejs:24 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-02-10

Description

nodejs
[1:24.13.0-1]
- Update to 24.13.0
Resolves: RHEL-135257

[1:24.4.1-1]
- Initial import of nodejs:24

nodejs-nodemon
[3.0.3-1]
- Initial import into nodejs:24 module

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-121576

[2021.06-5]
- nodejs.req to properly detect bundled deps

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream

Related CVEs

CVE-2025-55130

CVE-2025-55131

CVE-2025-55132

CVE-2025-59465

CVE-2025-59466

CVE-2026-21637

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nodejs-24.13.0-0.module+el8.10.0+90779+0cc618fe.src.rpm	b523a9cb06e65fcd55ae9ab6295de12b53131ffdd8e67a9b44876eb17a531df3	-	ol8_aarch64_appstream
	nodejs-nodemon-3.0.3-1.module+el8.10.0+90779+0cc618fe.src.rpm	abfbc37e31a026459518403269452fc740c38aac77f54b3f19163e397ed36780	-	ol8_aarch64_appstream
	nodejs-packaging-2021.06-6.module+el8.10.0+90779+0cc618fe.src.rpm	ffb9ad0f8ce448e1bed64ad7b2f46f5c0cf4d02e5e2b85891c02a0793e7f7014	-	ol8_aarch64_appstream
	nodejs-24.13.0-0.module+el8.10.0+90779+0cc618fe.aarch64.rpm	8927625f0af0fddb1b2e954ba0c500714794acb8634b7c3fcf00317072d9c446	-	ol8_aarch64_appstream
	nodejs-devel-24.13.0-0.module+el8.10.0+90779+0cc618fe.aarch64.rpm	48088a13de48b5e0f38d4170e4e6782dd4c2350cb1584ec7ee12aae0b3378541	-	ol8_aarch64_appstream
	nodejs-docs-24.13.0-0.module+el8.10.0+90779+0cc618fe.noarch.rpm	6b60614d399160e69e6000fb983e15874f37c14a76565ce3e29c8c2368a05397	-	ol8_aarch64_appstream
	nodejs-full-i18n-24.13.0-0.module+el8.10.0+90779+0cc618fe.aarch64.rpm	1532c9df23cde39690211ce3fb4d37ecedb0870822afc3ad98d797fddf7d0a2f	-	ol8_aarch64_appstream
	nodejs-libs-24.13.0-0.module+el8.10.0+90779+0cc618fe.aarch64.rpm	77a46d180ea32ae8b4c535fa8686686d331d2573337ed5ef139589b9a7738c6c	-	ol8_aarch64_appstream
	nodejs-nodemon-3.0.3-1.module+el8.10.0+90779+0cc618fe.noarch.rpm	00deaa6a3598adf9dea06107f5ed23649a0966e6fd53bd1d815465591dbf94b1	-	ol8_aarch64_appstream
	nodejs-packaging-2021.06-6.module+el8.10.0+90779+0cc618fe.noarch.rpm	ff52f8eb3196f834a80a39ceffc4094cdea4c81801874210b1fd5ab713b7fa43	-	ol8_aarch64_appstream
	nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90779+0cc618fe.noarch.rpm	74f52bfd1d10346612a673e0b0117c7ed55bbb32d96b7a61a5ed634f155095f5	-	ol8_aarch64_appstream
	npm-11.6.2-1.24.13.0.0.module+el8.10.0+90779+0cc618fe.noarch.rpm	bf7763bdac28492e4bd4a12320666a410e3561aa0c14ebd573d41afd0a731e09	-	ol8_aarch64_appstream
	v8-13.6-devel-13.6.233.17-1.24.13.0.0.module+el8.10.0+90779+0cc618fe.aarch64.rpm	c53449d7e621718a8385c2075eb1004c4e0bce456119c8abd2f797e532215ce9	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	nodejs-24.13.0-0.module+el8.10.0+90779+0cc618fe.src.rpm	b523a9cb06e65fcd55ae9ab6295de12b53131ffdd8e67a9b44876eb17a531df3	-	ol8_x86_64_appstream
	nodejs-nodemon-3.0.3-1.module+el8.10.0+90779+0cc618fe.src.rpm	abfbc37e31a026459518403269452fc740c38aac77f54b3f19163e397ed36780	-	ol8_x86_64_appstream
	nodejs-packaging-2021.06-6.module+el8.10.0+90779+0cc618fe.src.rpm	ffb9ad0f8ce448e1bed64ad7b2f46f5c0cf4d02e5e2b85891c02a0793e7f7014	-	ol8_x86_64_appstream
	nodejs-24.13.0-0.module+el8.10.0+90779+0cc618fe.x86_64.rpm	71862a96f03366fdea63c605d4019ea6286e252ba3601ce68532be73303f408b	-	ol8_x86_64_appstream
	nodejs-devel-24.13.0-0.module+el8.10.0+90779+0cc618fe.x86_64.rpm	7639e1f9509a30c75a75d022a63340e0b3d70c69b69866510658661026cd0f95	-	ol8_x86_64_appstream
	nodejs-docs-24.13.0-0.module+el8.10.0+90779+0cc618fe.noarch.rpm	6b60614d399160e69e6000fb983e15874f37c14a76565ce3e29c8c2368a05397	-	ol8_x86_64_appstream
	nodejs-full-i18n-24.13.0-0.module+el8.10.0+90779+0cc618fe.x86_64.rpm	18114a2d24986ddabc3983d3670060536f06b1732ed32a674d650767db9deac7	-	ol8_x86_64_appstream
	nodejs-libs-24.13.0-0.module+el8.10.0+90779+0cc618fe.x86_64.rpm	c974f5877c96be5452ce6bacfe2fdf603187bee18cdef2f4b9bc171c79f3ff37	-	ol8_x86_64_appstream
	nodejs-nodemon-3.0.3-1.module+el8.10.0+90779+0cc618fe.noarch.rpm	00deaa6a3598adf9dea06107f5ed23649a0966e6fd53bd1d815465591dbf94b1	-	ol8_x86_64_appstream
	nodejs-packaging-2021.06-6.module+el8.10.0+90779+0cc618fe.noarch.rpm	ff52f8eb3196f834a80a39ceffc4094cdea4c81801874210b1fd5ab713b7fa43	-	ol8_x86_64_appstream
	nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90779+0cc618fe.noarch.rpm	74f52bfd1d10346612a673e0b0117c7ed55bbb32d96b7a61a5ed634f155095f5	-	ol8_x86_64_appstream
	npm-11.6.2-1.24.13.0.0.module+el8.10.0+90779+0cc618fe.noarch.rpm	bf7763bdac28492e4bd4a12320666a410e3561aa0c14ebd573d41afd0a731e09	-	ol8_x86_64_appstream
	v8-13.6-devel-13.6.233.17-1.24.13.0.0.module+el8.10.0+90779+0cc618fe.x86_64.rpm	5b147ad7bcf1adffd0666c0387a2c96040e29c9849a9d623822eeaf3dd426937	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team