ELSA-2026-39868

ELSA-2026-39868 - nodejs:24 security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-20

Description


nodejs
[1:24.18.0-1]
- Update to version 24.18.0
Resolves: RHEL-168744

nodejs-nodemon
[3.0.3-1]
- Initial import into nodejs:24 module

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-121576

[2021.06-5]
- nodejs.req to properly detect bundled deps

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream


Related CVEs


CVE-2026-11525
CVE-2026-12151
CVE-2026-42338
CVE-2026-48615
CVE-2026-48618
CVE-2026-48619
CVE-2026-48928
CVE-2026-48930
CVE-2026-48933
CVE-2026-48934
CVE-2026-48935
CVE-2026-6733
CVE-2026-6734
CVE-2026-9678
CVE-2026-9697

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-24.18.0-1.module+el8.10.0+90961+a86f8457.src.rpm56fbc8a4c66cf48722e71929411b4556ca3dc80bb3944fbbc7c45bdcb462f6f5-ol8_aarch64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90961+a86f8457.src.rpmde446c01499ae5c4fe7fea717765cf99f4c8a00ed50f86fc6b82bb6e6e3313f0-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90961+a86f8457.src.rpm492b6d1b39b407472bd9b17a020875288d00ec51a1f8377f7da9cc43474d104a-ol8_aarch64_appstream
nodejs-24.18.0-1.module+el8.10.0+90961+a86f8457.aarch64.rpm32dbc0d0328fd71ccc7b11999e193d21c91d5e1c3c2e588533d5b50e6af4fa3b-ol8_aarch64_appstream
nodejs-devel-24.18.0-1.module+el8.10.0+90961+a86f8457.aarch64.rpm4000d1c6ad808674cfe04b1e1a3e2795a14c34d530241dbd4150ce848d221cdc-ol8_aarch64_appstream
nodejs-docs-24.18.0-1.module+el8.10.0+90961+a86f8457.noarch.rpm4da2dba6e4988ef5161de1f9f3b1bfe9b4360e30d5026d9e79fd4dab28d61bff-ol8_aarch64_appstream
nodejs-full-i18n-24.18.0-1.module+el8.10.0+90961+a86f8457.aarch64.rpmcae3e8a32f76d4a1dcc49c10fc58f70b46e3121c2805172c7eb78056e8cd3e2e-ol8_aarch64_appstream
nodejs-libs-24.18.0-1.module+el8.10.0+90961+a86f8457.aarch64.rpm4e12323f15254690e1d73c21298b8beb3aa39152791c717367b0a632c38ded8c-ol8_aarch64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90961+a86f8457.noarch.rpmfb864576bc1d09d7145061e0bb1e8c00a4293315bc9ae35214e9f198765786c0-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90961+a86f8457.noarch.rpm606887ab1becfdde3d444a3b092b7d3d561599e5714db6c9b9ee287554e6dc7d-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90961+a86f8457.noarch.rpmf8fee351e3cee57bb3b3058f74402976d50e8d48bbaf05a7bdb38e96f5e7916d-ol8_aarch64_appstream
npm-11.16.0-1.24.18.0.1.module+el8.10.0+90961+a86f8457.noarch.rpm6b48422346b948eab15f9cb94083b1806ccae45f72e8014ed7b9b7378bb0b3df-ol8_aarch64_appstream
v8-13.6-devel-13.6.233.17-1.24.18.0.1.module+el8.10.0+90961+a86f8457.aarch64.rpmc92ac1281cb2bea9f3cad7af2cdddb8010bc9569394650cde27ed6d721eb8b73-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-24.18.0-1.module+el8.10.0+90961+a86f8457.src.rpm56fbc8a4c66cf48722e71929411b4556ca3dc80bb3944fbbc7c45bdcb462f6f5-ol8_x86_64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90961+a86f8457.src.rpmde446c01499ae5c4fe7fea717765cf99f4c8a00ed50f86fc6b82bb6e6e3313f0-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90961+a86f8457.src.rpm492b6d1b39b407472bd9b17a020875288d00ec51a1f8377f7da9cc43474d104a-ol8_x86_64_appstream
nodejs-24.18.0-1.module+el8.10.0+90961+a86f8457.x86_64.rpm85845821f195351b2c2a80844e2f40114a0383b229b02d49ccb2fcf86d1291f7-ol8_x86_64_appstream
nodejs-devel-24.18.0-1.module+el8.10.0+90961+a86f8457.x86_64.rpm4aa6a44abbb80e862c3c4b62fe8bc4120cf981f8e6150b27011f70d24ef1bda0-ol8_x86_64_appstream
nodejs-docs-24.18.0-1.module+el8.10.0+90961+a86f8457.noarch.rpm4da2dba6e4988ef5161de1f9f3b1bfe9b4360e30d5026d9e79fd4dab28d61bff-ol8_x86_64_appstream
nodejs-full-i18n-24.18.0-1.module+el8.10.0+90961+a86f8457.x86_64.rpm3fa97c18b75d0a075f7dcc93887e24f0a24f67aedfdfbb88a940d1ac6ec34cc2-ol8_x86_64_appstream
nodejs-libs-24.18.0-1.module+el8.10.0+90961+a86f8457.x86_64.rpmdce6ad8ba80c8e42e0cf7614c18af09c433bcb1737c7989fc9fcc0719add0d3b-ol8_x86_64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90961+a86f8457.noarch.rpmfb864576bc1d09d7145061e0bb1e8c00a4293315bc9ae35214e9f198765786c0-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90961+a86f8457.noarch.rpm606887ab1becfdde3d444a3b092b7d3d561599e5714db6c9b9ee287554e6dc7d-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90961+a86f8457.noarch.rpmf8fee351e3cee57bb3b3058f74402976d50e8d48bbaf05a7bdb38e96f5e7916d-ol8_x86_64_appstream
npm-11.16.0-1.24.18.0.1.module+el8.10.0+90961+a86f8457.noarch.rpm6b48422346b948eab15f9cb94083b1806ccae45f72e8014ed7b9b7378bb0b3df-ol8_x86_64_appstream
v8-13.6-devel-13.6.233.17-1.24.18.0.1.module+el8.10.0+90961+a86f8457.x86_64.rpm39298ad535e296247d1e1d061f3b5e16fc27120804d77b4d907c2351dd8d46c5-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete