ELSA-2026-500518

ELSA-2026-500518 - nodejs:24 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


nodejs
[1:24.21.0-1.0.1]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Expose the decoder block-switch error and add regression coverage
- Require the patched system Brotli for shared builds

nodejs-nodemon
nodejs-packaging


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nodejs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.src.rpm4dea6803541feb2e36afdc7f09fab18ae47e16503a11eb675e0147ca407614bc-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.src.rpm9d81ac709b44544603a147810b38915d474a8d58172914373e7a9f23318bd37d-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.src.rpm834d57d7c4bdd82742c432c76fd87305eb15db00f697778fc30d5c7f23591feb-ol9_aarch64_appstream
nodejs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.aarch64.rpm34cbb477fad7503aae76d513cfe4d786177e6e5a030dab51dd973ea870b788f5-ol9_aarch64_appstream
nodejs-devel-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.aarch64.rpm8ee612ba7e71932e9027e3e41bd3453a57eb3171c8b7d9ec6423289918c1aa44-ol9_aarch64_appstream
nodejs-docs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.noarch.rpm6a3a07faa66599bca3f55ac8ae7ed592b43fab8b582b76ffc39782797638d8b4-ol9_aarch64_appstream
nodejs-full-i18n-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.aarch64.rpm505e908d5608de5415e1ff489c32a50280c7cfffce7279b5323e8ebc5ab1a0e8-ol9_aarch64_appstream
nodejs-libs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.aarch64.rpm4c1787b40371428abfc12a4720248d45cf8f6a776973925c88609a1da279915c-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.noarch.rpm294df3aab894e69a3db8025359d13da96df7ed29e033d35d8c63adb7e94a810f-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm5eb6a5f146d9a1b82c91a7b419c088c7a16cea176a93e854dd49e76ee8898d09-ol9_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm04cc6849d05fc7de46803cb556ae2f3184824991ba82f49fdaf5b082b78f441a-ol9_aarch64_appstream
npm-11.19.0-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0.noarch.rpm38dea03fec8ee272c2883dc0a21b9a7da627ba9f46df8673ba4fe4731e67dc95-ol9_aarch64_appstream
v8-13.6-devel-13.6.233.17-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0.aarch64.rpm8c07f1bd3ab94a0384656d74e7b7a8e408b8dcfd937c8fa6331eba0efafde047-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) nodejs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.src.rpm4dea6803541feb2e36afdc7f09fab18ae47e16503a11eb675e0147ca407614bc-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.src.rpm9d81ac709b44544603a147810b38915d474a8d58172914373e7a9f23318bd37d-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.src.rpm834d57d7c4bdd82742c432c76fd87305eb15db00f697778fc30d5c7f23591feb-ol9_x86_64_appstream
nodejs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.x86_64.rpm9457f105bc8ea5d906a702fdeced6721e20c1f1b5b877401dbd98c09ce145e5e-ol9_x86_64_appstream
nodejs-devel-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.x86_64.rpmfa43f47e7ad78965e89ccd75c76ab11a7db42e83beb281a1e07a06d287b92ebd-ol9_x86_64_appstream
nodejs-docs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.noarch.rpm6a3a07faa66599bca3f55ac8ae7ed592b43fab8b582b76ffc39782797638d8b4-ol9_x86_64_appstream
nodejs-full-i18n-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.x86_64.rpm2db39e3f25229f51b84259137ca246798a6efb87e438ad9bff42634273c0a525-ol9_x86_64_appstream
nodejs-libs-24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0.x86_64.rpm42e3f54913d084459f3d0de1a31dd798b992e50419557ce2d1f490715496036a-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.noarch.rpm294df3aab894e69a3db8025359d13da96df7ed29e033d35d8c63adb7e94a810f-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm5eb6a5f146d9a1b82c91a7b419c088c7a16cea176a93e854dd49e76ee8898d09-ol9_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm04cc6849d05fc7de46803cb556ae2f3184824991ba82f49fdaf5b082b78f441a-ol9_x86_64_appstream
npm-11.19.0-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0.noarch.rpm38dea03fec8ee272c2883dc0a21b9a7da627ba9f46df8673ba4fe4731e67dc95-ol9_x86_64_appstream
v8-13.6-devel-13.6.233.17-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0.x86_64.rpme2b07289f53faa9b3a358858582a1ae22cc58c45f06800f6f647742dd5bbcfe8-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete