ELSA-2026-7350

ELSA-2026-7350 - nodejs:24 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-04-10

Description


nodejs
[1:24.14.1-2]
- Update bundled nghttp2 to 1.68.1

[1:24.14.1-1]
- Update to version 24.14.1

nodejs-nodemon
[3.0.3-3]
- Keep BR on just npm

[3.0.3-2]
- Fix BR for nodejs-npm

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-121581

[2021.06-5]
- nodejs.req to properly detect bundled deps


Related CVEs


CVE-2026-1525
CVE-2026-1526
CVE-2026-1527
CVE-2026-1528
CVE-2026-21637
CVE-2026-21710
CVE-2026-21711
CVE-2026-21712
CVE-2026-21713
CVE-2026-21714
CVE-2026-21715
CVE-2026-21716
CVE-2026-21717
CVE-2026-2229
CVE-2026-25547
CVE-2026-2581
CVE-2026-26996
CVE-2026-27135

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nodejs-24.14.1-2.module+el9.7.0+90866+5a953a4c.src.rpmdfd509b0ca6a6cbf4a55d84d3adf05517aca6961987fad2d48c923fff6dafe66-ol9_aarch64_appstream
nodejs-nodemon-3.0.3-3.module+el9.7.0+90866+5a953a4c.src.rpmc5d4980a070354556b4179aebefc0768e5225996840b6c9e004f755d60b9a3fb-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.7.0+90866+5a953a4c.src.rpm23b34c76121dce0e6c6480fd7766fc12d3f50ee85b211fcb41766e975db47b78-ol9_aarch64_appstream
nodejs-24.14.1-2.module+el9.7.0+90866+5a953a4c.aarch64.rpm0d1b50faa756fe5ce08e500d561c3c19e5d227ebb16f6f5dea81f782d459fd91-ol9_aarch64_appstream
nodejs-devel-24.14.1-2.module+el9.7.0+90866+5a953a4c.aarch64.rpmaf752259b0b533661e0f1f4e76e03ed958a51e7bc66a284d5df5c76d6aa9b884-ol9_aarch64_appstream
nodejs-docs-24.14.1-2.module+el9.7.0+90866+5a953a4c.noarch.rpmc4752a1d6d6e03be72d0e5e6106192ac84b5d2af2b2f43e655ccdc52375db064-ol9_aarch64_appstream
nodejs-full-i18n-24.14.1-2.module+el9.7.0+90866+5a953a4c.aarch64.rpma5b1cc877813039596db849a716d0d7d258788c2e4e2ba05dc4bb2bdcc698629-ol9_aarch64_appstream
nodejs-libs-24.14.1-2.module+el9.7.0+90866+5a953a4c.aarch64.rpm5603ed7855f581a32f1e5f52cf2d98e9ba8651b97611454cc28a86a9c22d4e62-ol9_aarch64_appstream
nodejs-nodemon-3.0.3-3.module+el9.7.0+90866+5a953a4c.noarch.rpm0016047d4515cff9ff2121fb847976da3ae590e9df2a938d710725f69c6b4440-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.7.0+90866+5a953a4c.noarch.rpm681d2a3ff968093391716ac08a7541a314f6847c0f1e87dd53c9fcea019ab87a-ol9_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.7.0+90866+5a953a4c.noarch.rpma277da424fb01b9839fcfb9d6375513f8caf959e0bb79e21fe2ca9521e90a165-ol9_aarch64_appstream
npm-11.11.0-1.24.14.1.2.module+el9.7.0+90866+5a953a4c.noarch.rpm02b56f1b1aaa05177641010b6fcb8e6f6df0c740c300729155b71e65874895f0-ol9_aarch64_appstream
v8-13.6-devel-13.6.233.17-1.24.14.1.2.module+el9.7.0+90866+5a953a4c.aarch64.rpm9641e9c845b31cf0e015d5bec3871466ce30c8ba4b4b720f97d1002e91be16b1-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) nodejs-24.14.1-2.module+el9.7.0+90866+5a953a4c.src.rpmdfd509b0ca6a6cbf4a55d84d3adf05517aca6961987fad2d48c923fff6dafe66-ol9_x86_64_appstream
nodejs-nodemon-3.0.3-3.module+el9.7.0+90866+5a953a4c.src.rpmc5d4980a070354556b4179aebefc0768e5225996840b6c9e004f755d60b9a3fb-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.7.0+90866+5a953a4c.src.rpm23b34c76121dce0e6c6480fd7766fc12d3f50ee85b211fcb41766e975db47b78-ol9_x86_64_appstream
nodejs-24.14.1-2.module+el9.7.0+90866+5a953a4c.x86_64.rpmb245367030ae25a3662ce7a32a5ffaa3e5535c59292ea27b6354c13d4d5af2fc-ol9_x86_64_appstream
nodejs-devel-24.14.1-2.module+el9.7.0+90866+5a953a4c.x86_64.rpm158b152194aa12ca903dcf960f4cd66b5049d85c6a4971003e67ec399c7c9346-ol9_x86_64_appstream
nodejs-docs-24.14.1-2.module+el9.7.0+90866+5a953a4c.noarch.rpmc4752a1d6d6e03be72d0e5e6106192ac84b5d2af2b2f43e655ccdc52375db064-ol9_x86_64_appstream
nodejs-full-i18n-24.14.1-2.module+el9.7.0+90866+5a953a4c.x86_64.rpm7441d20e96cb221ee464a175cb65d70188eb94f9305d81b9623aba7f0927b4a8-ol9_x86_64_appstream
nodejs-libs-24.14.1-2.module+el9.7.0+90866+5a953a4c.x86_64.rpm7ea6723f24a4f8ef88f79862bef197e3236fb2db3a374966706458bcab03f79b-ol9_x86_64_appstream
nodejs-nodemon-3.0.3-3.module+el9.7.0+90866+5a953a4c.noarch.rpm0016047d4515cff9ff2121fb847976da3ae590e9df2a938d710725f69c6b4440-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.7.0+90866+5a953a4c.noarch.rpm681d2a3ff968093391716ac08a7541a314f6847c0f1e87dd53c9fcea019ab87a-ol9_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.7.0+90866+5a953a4c.noarch.rpma277da424fb01b9839fcfb9d6375513f8caf959e0bb79e21fe2ca9521e90a165-ol9_x86_64_appstream
npm-11.11.0-1.24.14.1.2.module+el9.7.0+90866+5a953a4c.noarch.rpm02b56f1b1aaa05177641010b6fcb8e6f6df0c740c300729155b71e65874895f0-ol9_x86_64_appstream
v8-13.6-devel-13.6.233.17-1.24.14.1.2.module+el9.7.0+90866+5a953a4c.x86_64.rpm5dde2fc966a4c9674643fddd23fd78aee9a99c0b6fa0fb838f96b74d832fdafe-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete