ELSA-2026-500520

ELSA-2026-500520 - nodejs:24 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


nodejs
[1:24.21.0-1.0.1]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Expose the decoder block-switch error and add regression coverage
- Require the patched system Brotli for shared builds

nodejs-nodemon
nodejs-packaging


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.src.rpm4c5ea19bf8633e5bd351e214fc91e3f07869c0b764b1b6e8bf6d12ffa3bcaab2-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91054+4b1a799c.src.rpmdaa5d1b67a29be89e70835176530a3a9314865b6dbb0b89770d8b8684b57aa99-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+91054+4b1a799c.src.rpma4bb78627f5ef5c6debbfbd52af5de22c6764ffc6702f83471a62046d74ead9c-ol8_aarch64_appstream
nodejs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.aarch64.rpm13a8a6adca47a727b3ddabc7507d87ad7844d78cf2c3a5806f07f99312511c24-ol8_aarch64_appstream
nodejs-devel-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.aarch64.rpm451396b3f43a023072f216b3341bbd095c205489c72cf1ca76c4e8c7518a4c26-ol8_aarch64_appstream
nodejs-docs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.noarch.rpm58ca9612f4498606435a7e8f88e3c0d879e4b77f10586bf5cc2220dd39a27e93-ol8_aarch64_appstream
nodejs-full-i18n-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.aarch64.rpmdf93b55861b9fcbe6a26be7a25575e781e7b1da871a3305bf3f11b63423077c3-ol8_aarch64_appstream
nodejs-libs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.aarch64.rpm0f0047a18b3219f7ab284227ec37755c5b1bc001c1ce61dc54fe24efd2def819-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91054+4b1a799c.noarch.rpm0d3b514a623650b3bcd425cc67f2bccdb0d9a406c0c059fe8ba6c6925f814d38-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+91054+4b1a799c.noarch.rpmcabda19951a14e9c9cb61547c90679fa32aa9d99ed5314ee49157f7c8e17f3eb-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+91054+4b1a799c.noarch.rpm528a16b844cadf1954951c61c4928303cd51778c04063a01df3ac82fe04b54bd-ol8_aarch64_appstream
npm-11.19.0-1.24.21.0.1.0.1.module+el8.10.0+91086+e75af208.noarch.rpmb4e4c03b97baf3c81a19daaf78782a20ac214d7ed9561f09eaf2824b12101622-ol8_aarch64_appstream
v8-13.6-devel-13.6.233.17-1.24.21.0.1.0.1.module+el8.10.0+91086+e75af208.aarch64.rpm89a67bda890fca4bf09af5116d0fa661e2df69c9227e4d92d5de23a1c840d1de-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.src.rpm4c5ea19bf8633e5bd351e214fc91e3f07869c0b764b1b6e8bf6d12ffa3bcaab2-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91054+4b1a799c.src.rpmdaa5d1b67a29be89e70835176530a3a9314865b6dbb0b89770d8b8684b57aa99-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+91054+4b1a799c.src.rpma4bb78627f5ef5c6debbfbd52af5de22c6764ffc6702f83471a62046d74ead9c-ol8_x86_64_appstream
nodejs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.x86_64.rpm94ce728a4c7626a6ab2172924a1c75dca61cdf9e375794233b867eeda689ccff-ol8_x86_64_appstream
nodejs-devel-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.x86_64.rpmd947ede72d24d3458d93a4488f5a0f3efd99247122ed536660fa9f36fc573d58-ol8_x86_64_appstream
nodejs-docs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.noarch.rpm58ca9612f4498606435a7e8f88e3c0d879e4b77f10586bf5cc2220dd39a27e93-ol8_x86_64_appstream
nodejs-full-i18n-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.x86_64.rpm41112cecdfb4bb2f4411f3d3143ec8f6225f7dccb5a0bb56fa5afa6a34d98b55-ol8_x86_64_appstream
nodejs-libs-24.21.0-1.0.1.module+el8.10.0+91086+e75af208.x86_64.rpmb0d308561a0396dfa3e997d3bb1714c4ffa01c030263713ff7d2c896081adcbf-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91054+4b1a799c.noarch.rpm0d3b514a623650b3bcd425cc67f2bccdb0d9a406c0c059fe8ba6c6925f814d38-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+91054+4b1a799c.noarch.rpmcabda19951a14e9c9cb61547c90679fa32aa9d99ed5314ee49157f7c8e17f3eb-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+91054+4b1a799c.noarch.rpm528a16b844cadf1954951c61c4928303cd51778c04063a01df3ac82fe04b54bd-ol8_x86_64_appstream
npm-11.19.0-1.24.21.0.1.0.1.module+el8.10.0+91086+e75af208.noarch.rpmb4e4c03b97baf3c81a19daaf78782a20ac214d7ed9561f09eaf2824b12101622-ol8_x86_64_appstream
v8-13.6-devel-13.6.233.17-1.24.21.0.1.0.1.module+el8.10.0+91086+e75af208.x86_64.rpm885bc52b6acde7c14fbbff3530c276de23bd750b24b305606100a0c825340d38-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete