ELSA-2026-61383-0

ELSA-2026-61383-0 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-01

Description


nodejs
[1:22.23.2-1]
- Update to version 22.23.2
Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043
Resolves: RHEL-234381 RHEL-234831 RHEL-234896

nodejs-nodemon
[3.1.14-1]
- Rebase to 3.1.14
- Change
%setup -q




/usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch |
/usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch


- Resolves: RHEL-208677

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-120511

[2021.06-5]
- nodejs.req to properly detect bundled deps


Related CVEs


CVE-2026-56846
CVE-2026-56848
CVE-2026-58043

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nodejs-22.23.2-1.module+el9.8.0+91010+e0f4f255.src.rpmc5470c94b46e6acc9cc79120a9f22189157eda74f63cab2e52a87b782852a147-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.src.rpm77d3c807612130bfe940e4a16766416ad1b3ea321cd92efbebfe2cc3053f862d-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.src.rpm6d341ed26e1268fbf465ce25d3b1f1d4eb4d12830958f909af2ce649030d76f6-ol9_aarch64_appstream
nodejs-22.23.2-1.module+el9.8.0+91010+e0f4f255.aarch64.rpm09d2408924116105ddd8afc919480dbb618de6886625d8f3fe8f5436cc3a0197-ol9_aarch64_appstream
nodejs-devel-22.23.2-1.module+el9.8.0+91010+e0f4f255.aarch64.rpm9199d9ba629082fbc57181c58b3ccc9530571d2b1164e9930a3bcb7227f6cddd-ol9_aarch64_appstream
nodejs-docs-22.23.2-1.module+el9.8.0+91010+e0f4f255.noarch.rpm9565f562dc46ecd75c47c5ef209b81d1f0d0ccd0dc6fcbddf44afc79341dee7b-ol9_aarch64_appstream
nodejs-full-i18n-22.23.2-1.module+el9.8.0+91010+e0f4f255.aarch64.rpma7232bed2d5e11b7a73a21ac5425e1383da6145f80aed8a53556307ce50dbbb5-ol9_aarch64_appstream
nodejs-libs-22.23.2-1.module+el9.8.0+91010+e0f4f255.aarch64.rpm216f63d5c23c35c47017fac14db8a6f77a7302d9fcb8117fc92906c8f48a02a5-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.noarch.rpmf3814a67931fdd04596242a0162d3ba08b15cc55e42a3080b8f999fd19b553c1-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpm99f5d90350bc1ba909c679601562085a52fb0ff3f05fef90c2d210efbb7829e0-ol9_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpmd50e4f118178582c30d8143a94c1feee61b963e55783188e51ef038a60d8e0f0-ol9_aarch64_appstream
npm-10.9.8-1.22.23.2.1.module+el9.8.0+91010+e0f4f255.aarch64.rpmbed76fbc1585baedde0f6b153ef212573f2b8a50f7c1f8228ca7363bc8f3e041-ol9_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el9.8.0+91010+e0f4f255.aarch64.rpm15d8185180fded11107df665cc87232bb45a888551835df45c6fb61c7c0dae70-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) nodejs-22.23.2-1.module+el9.8.0+91010+e0f4f255.src.rpmc5470c94b46e6acc9cc79120a9f22189157eda74f63cab2e52a87b782852a147-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.src.rpm77d3c807612130bfe940e4a16766416ad1b3ea321cd92efbebfe2cc3053f862d-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.src.rpm6d341ed26e1268fbf465ce25d3b1f1d4eb4d12830958f909af2ce649030d76f6-ol9_x86_64_appstream
nodejs-22.23.2-1.module+el9.8.0+91010+e0f4f255.x86_64.rpm87dd4e3053688c0e7d5fea79f741c9cd362ccb5b2f91d84229cc3a6600982d8f-ol9_x86_64_appstream
nodejs-devel-22.23.2-1.module+el9.8.0+91010+e0f4f255.x86_64.rpm7f6783dc107f85bf8b15cdb0296a42730c78e4a5f707bab77eb498d7f51fa7a7-ol9_x86_64_appstream
nodejs-docs-22.23.2-1.module+el9.8.0+91010+e0f4f255.noarch.rpm9565f562dc46ecd75c47c5ef209b81d1f0d0ccd0dc6fcbddf44afc79341dee7b-ol9_x86_64_appstream
nodejs-full-i18n-22.23.2-1.module+el9.8.0+91010+e0f4f255.x86_64.rpmdd4d153ef8fde2105c4312168ce0bdcb8694590693625335c2c60dcce53d6721-ol9_x86_64_appstream
nodejs-libs-22.23.2-1.module+el9.8.0+91010+e0f4f255.x86_64.rpm60810eb592b4d4216e295d625072e1d4e2d36b14095ed94017e813aa44ab9086-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.noarch.rpmf3814a67931fdd04596242a0162d3ba08b15cc55e42a3080b8f999fd19b553c1-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpm99f5d90350bc1ba909c679601562085a52fb0ff3f05fef90c2d210efbb7829e0-ol9_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpmd50e4f118178582c30d8143a94c1feee61b963e55783188e51ef038a60d8e0f0-ol9_x86_64_appstream
npm-10.9.8-1.22.23.2.1.module+el9.8.0+91010+e0f4f255.x86_64.rpmdfc7fa3c571f07896f4058aa4b70c40b33e54e06f46f119eb1e62573ff8ff08b-ol9_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el9.8.0+91010+e0f4f255.x86_64.rpme3c2cbc6e4b616d6083ad38d1806ed658eb29e94c34e8f5fefec4bc01d7a3b72-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete