ELSA-2026-62219-0

ELSA-2026-62219-0 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-02

Description


nodejs
[1:22.23.2-1]
- Update to version 22.23.2
Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043
Resolves: RHEL-235693 RHEL-235688 RHEL-235662

nodejs-nodemon
[3.1.14-2]
- Rebase npm/brace-expansion to 5.0.9
Fixes: CVE-2026-69152
Resolves: RHEL-223760

[3.1.14-1]
- Rebase to 3.1.14
- Switch from using remys fork as a source to npm.
- Resolves: RHEL-208659

[3.0.1-1]
- Exclude ix86 arches from building.
Related: RHEL-35991

[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517

[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com

[2.0.7-1]
- Resolves: RHBZ#1953991
- Update to 2.0.7 to resolve CVE-2020-28469

[2.0.3-1]
- Updated

[1.18.3-1]
- Resolves: #1615413
- Updated
- bundled

nodejs-packaging
[2021.06-4]
- Exclude ix86 arches from building.
Related: RHEL-35991

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream

[25-1]
- Fix incorrect bundled library detection for Requires


Related CVEs


CVE-2026-56846
CVE-2026-56848
CVE-2026-58043

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-22.23.2-1.module+el8.10.0+91012+ae4911b6.src.rpm4a54d453b3c1960e91c4ed674cde9ea541f21ea4abe2d4ca114d6cb596360084-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91012+ae4911b6.src.rpm78a5430d6dada16f19a103f546669bad9e05482ff21305bc4b99378f0e9fb5c2-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91012+ae4911b6.src.rpm92f9761f71eff237dffad247bdcb22e317b5f2653e8e60473b1a45ea37873b37-ol8_aarch64_appstream
nodejs-22.23.2-1.module+el8.10.0+91012+ae4911b6.aarch64.rpm2d2a8177d434dff6fad99a90ab4d9b90f76408a217d50863092f3b1bf7aad40a-ol8_aarch64_appstream
nodejs-devel-22.23.2-1.module+el8.10.0+91012+ae4911b6.aarch64.rpm51d14341405b56255f3b313ad853eb6849622539e3f2c7707106c0d1aeccb8e1-ol8_aarch64_appstream
nodejs-docs-22.23.2-1.module+el8.10.0+91012+ae4911b6.noarch.rpmbcb5136112037dc77a12545cf9cbd2c5769d0626122106495d4da0234a1ecb49-ol8_aarch64_appstream
nodejs-full-i18n-22.23.2-1.module+el8.10.0+91012+ae4911b6.aarch64.rpm0ce2893dfa9d4550c2c791ac0427af906401e71b6da82951add07a93ca6563f5-ol8_aarch64_appstream
nodejs-libs-22.23.2-1.module+el8.10.0+91012+ae4911b6.aarch64.rpm99b84c47a3406899229683aa070881a21639fb735bcb500b135b8f0fe3110e25-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91012+ae4911b6.noarch.rpmb9b43311940095cb307e7dad702db8c5a8710b874a894fa5d47f8cb21a116458-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91012+ae4911b6.noarch.rpm2f83d10f1190c191d73cd9e8687555c0ec3c0b57de92782e39004c21e237eb7a-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+91012+ae4911b6.noarch.rpm97dc023b9686f7fac079b25aa2b131db33c47693a8847949e548452ba5167e6b-ol8_aarch64_appstream
npm-10.9.8-1.22.23.2.1.module+el8.10.0+91012+ae4911b6.aarch64.rpm8193d726e77d534796d0d74a471624d2381b15bb0a16549ba08037ae96b7b032-ol8_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el8.10.0+91012+ae4911b6.aarch64.rpmc3bc5d6a7dc2454b049a533df886b8b62a7bf0761ccdf658e819f7eb6e9c2907-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-22.23.2-1.module+el8.10.0+91012+ae4911b6.src.rpm4a54d453b3c1960e91c4ed674cde9ea541f21ea4abe2d4ca114d6cb596360084-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91012+ae4911b6.src.rpm78a5430d6dada16f19a103f546669bad9e05482ff21305bc4b99378f0e9fb5c2-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91012+ae4911b6.src.rpm92f9761f71eff237dffad247bdcb22e317b5f2653e8e60473b1a45ea37873b37-ol8_x86_64_appstream
nodejs-22.23.2-1.module+el8.10.0+91012+ae4911b6.x86_64.rpm44d5964902c52c704e0c52234ec716e038a1815586f42ca0a2050224cb6d1611-ol8_x86_64_appstream
nodejs-devel-22.23.2-1.module+el8.10.0+91012+ae4911b6.x86_64.rpm64783fe1cbe89c558a5bdb0a357836ce5f7a58223375df24bc1545096f2dc0ce-ol8_x86_64_appstream
nodejs-docs-22.23.2-1.module+el8.10.0+91012+ae4911b6.noarch.rpmbcb5136112037dc77a12545cf9cbd2c5769d0626122106495d4da0234a1ecb49-ol8_x86_64_appstream
nodejs-full-i18n-22.23.2-1.module+el8.10.0+91012+ae4911b6.x86_64.rpm65327cbab73cc81926dd043e900fb22ea3234cddfe03476efc420f0d68c2c04d-ol8_x86_64_appstream
nodejs-libs-22.23.2-1.module+el8.10.0+91012+ae4911b6.x86_64.rpmfbf07c95d22ba2c55ca0a4463d83beb1dae007fa2b25b535c3b1f35906fc2dbf-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91012+ae4911b6.noarch.rpmb9b43311940095cb307e7dad702db8c5a8710b874a894fa5d47f8cb21a116458-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91012+ae4911b6.noarch.rpm2f83d10f1190c191d73cd9e8687555c0ec3c0b57de92782e39004c21e237eb7a-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+91012+ae4911b6.noarch.rpm97dc023b9686f7fac079b25aa2b131db33c47693a8847949e548452ba5167e6b-ol8_x86_64_appstream
npm-10.9.8-1.22.23.2.1.module+el8.10.0+91012+ae4911b6.x86_64.rpm574533d4be5ac4e452a17d6ec4ca75373f7709d1cee4e5e0b12c1ead4a0dd6c4-ol8_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el8.10.0+91012+ae4911b6.x86_64.rpmbd57461fb6699284726e4de6a6d769cc944d6727af03dc09d6dead4cbe13337d-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete