ELSA-2026-500515

ELSA-2026-500515 - nodejs24 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


[24.21.0-1.0.2]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Require fixed OL10 system Brotli for builds without bundled Brotli


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) nodejs24-24.21.0-1.0.2.el10_2.src.rpm187bbc44b277b2be58ef7dc192df1cea3b9fbf8c1713255ce6ed14a0c1f44d89-ol10_aarch64_appstream
nodejs24-24.21.0-1.0.2.el10_2.aarch64.rpm6aee9f86e14198655acae34ff8cc9944c51e7733727ac78559ab723c92207ea8-ol10_aarch64_appstream
nodejs24-devel-24.21.0-1.0.2.el10_2.aarch64.rpm1452fbc73a76e3f7cfd69eb2e22562145fb499847956f52329da0f0e9f4b2179-ol10_aarch64_appstream
nodejs24-docs-24.21.0-1.0.2.el10_2.noarch.rpm61ab05d40a23c912b13436f02912ca2765aeae5082c14e167936db7d5faa5dbf-ol10_aarch64_appstream
nodejs24-full-i18n-24.21.0-1.0.2.el10_2.aarch64.rpm88139bccaaf099b3dc2517a78092b4241c56eb9d49d75a3bef66738fad75209b-ol10_aarch64_appstream
nodejs24-libs-24.21.0-1.0.2.el10_2.aarch64.rpm03511d27aa779554800d0e1b8f652b561db90ffaa3a61d12cdb2f70b07829b9e-ol10_aarch64_appstream
nodejs24-npm-11.19.0-1.24.21.0.1.0.2.el10_2.noarch.rpmb98b111a24f5b874d2c9148e985bf8636e746b26bd5a9198fb49ad3c2d9687d0-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) nodejs24-24.21.0-1.0.2.el10_2.src.rpm187bbc44b277b2be58ef7dc192df1cea3b9fbf8c1713255ce6ed14a0c1f44d89-ol10_x86_64_appstream
nodejs24-24.21.0-1.0.2.el10_2.x86_64.rpmdf1dd822b7ee57bac00805f03ab0172f844d21e2666601d393867f5a4f17f746-ol10_x86_64_appstream
nodejs24-devel-24.21.0-1.0.2.el10_2.x86_64.rpm43bec441b8d8cb59336c9f0c3598c9d28d4f87a9cfb04a05857991e3166089db-ol10_x86_64_appstream
nodejs24-docs-24.21.0-1.0.2.el10_2.noarch.rpm61ab05d40a23c912b13436f02912ca2765aeae5082c14e167936db7d5faa5dbf-ol10_x86_64_appstream
nodejs24-full-i18n-24.21.0-1.0.2.el10_2.x86_64.rpm36b0d08a709240a8588d14f225c84fab9da13ee8142a63c5258804b87b500276-ol10_x86_64_appstream
nodejs24-libs-24.21.0-1.0.2.el10_2.x86_64.rpmf61bd1754ad1edfa6c651084a3be606c2f78f4314f5d7977239abedc3f8617ee-ol10_x86_64_appstream
nodejs24-npm-11.19.0-1.24.21.0.1.0.2.el10_2.noarch.rpmb98b111a24f5b874d2c9148e985bf8636e746b26bd5a9198fb49ad3c2d9687d0-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete