ELSA-2026-7670

ELSA-2026-7670 - nodejs:24 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-04-13

Description


nodejs
[1:24.14.1-2]
- Update bundled nghttp2 to 1.68.1
Related: RHEL-151374

[1:24.14.1-1]
- Update to 24.14.0
Resolves: RHEL-151374

nodejs-nodemon
[3.0.3-1]
- Initial import into nodejs:24 module

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-121576

[2021.06-5]
- nodejs.req to properly detect bundled deps

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream


Related CVEs


CVE-2026-1525
CVE-2026-1526
CVE-2026-1527
CVE-2026-1528
CVE-2026-21637
CVE-2026-21710
CVE-2026-21711
CVE-2026-21712
CVE-2026-21713
CVE-2026-21714
CVE-2026-21715
CVE-2026-21716
CVE-2026-21717
CVE-2026-2229
CVE-2026-2581
CVE-2026-26996
CVE-2026-27135

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-24.14.1-2.module+el8.10.0+90873+35652ecc.src.rpm5adad8ff31bebced52d40d3a099fef6acda54f87ff5c4751025564ee60cbc85d-ol8_aarch64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90873+35652ecc.src.rpm0d14f34345a76c81b7f4c276e470fa4f6bacf4cc1b128db321b9469d122d0d85-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90873+35652ecc.src.rpm53a6bfd7de0e49c5044003894440253ef55d90b9a6a562b75f6ff63a61eb1bd4-ol8_aarch64_appstream
nodejs-24.14.1-2.module+el8.10.0+90873+35652ecc.aarch64.rpm1fb8f9f473bb328bca76424050381a6f6de8f78f8795978b43daf0b94780d167-ol8_aarch64_appstream
nodejs-devel-24.14.1-2.module+el8.10.0+90873+35652ecc.aarch64.rpm109febbd6a5542a99425172adc36ef5638ea60b9593a9e573428c5ed2456e194-ol8_aarch64_appstream
nodejs-docs-24.14.1-2.module+el8.10.0+90873+35652ecc.noarch.rpm72e5bd3fed61f84850abd96cfdd05940f1fde95a5f7a5d7b5ff510d2ccc3a9fb-ol8_aarch64_appstream
nodejs-full-i18n-24.14.1-2.module+el8.10.0+90873+35652ecc.aarch64.rpm257736094193e4df5ce7e1e15448b3f9011af72a92c0ab661e594dd3afaa3204-ol8_aarch64_appstream
nodejs-libs-24.14.1-2.module+el8.10.0+90873+35652ecc.aarch64.rpmc0a79de4d88f2108f7235947736c4917920ae8ff70386b3702807bd4127461da-ol8_aarch64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90873+35652ecc.noarch.rpm6b9f1c6378a7ee36eb434b359fd17a0ca028b74812182e3d79199fc9840c582d-ol8_aarch64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90873+35652ecc.noarch.rpm29bc00f1146654fb2b55af17b10c212f29a3e449d8c89cc936225b5d2cdb47ad-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90873+35652ecc.noarch.rpme2406f5b1d64027e9b2dfbd51f6fe552ffab7a101dbc315371834957f44136b9-ol8_aarch64_appstream
npm-11.11.0-1.24.14.1.2.module+el8.10.0+90873+35652ecc.noarch.rpm6e98fc6a65f0a56799f57f7c3a38c1279de7c01a1d03a66978fc70a22e61d404-ol8_aarch64_appstream
v8-13.6-devel-13.6.233.17-1.24.14.1.2.module+el8.10.0+90873+35652ecc.aarch64.rpm7839f3eca1301138ddca7e4bdbf7bae957997580fb14593c945ffbd0cd2ae14f-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-24.14.1-2.module+el8.10.0+90873+35652ecc.src.rpm5adad8ff31bebced52d40d3a099fef6acda54f87ff5c4751025564ee60cbc85d-ol8_x86_64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90873+35652ecc.src.rpm0d14f34345a76c81b7f4c276e470fa4f6bacf4cc1b128db321b9469d122d0d85-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90873+35652ecc.src.rpm53a6bfd7de0e49c5044003894440253ef55d90b9a6a562b75f6ff63a61eb1bd4-ol8_x86_64_appstream
nodejs-24.14.1-2.module+el8.10.0+90873+35652ecc.x86_64.rpmb9cc92aad1429c16ba9c757308b920f1f1ffdaf4642053df70f2beb162aa5180-ol8_x86_64_appstream
nodejs-devel-24.14.1-2.module+el8.10.0+90873+35652ecc.x86_64.rpm2df2c74434d6363ebfdff5fcef4190dcedc4e2bc172957c08483b652fd3133f2-ol8_x86_64_appstream
nodejs-docs-24.14.1-2.module+el8.10.0+90873+35652ecc.noarch.rpm72e5bd3fed61f84850abd96cfdd05940f1fde95a5f7a5d7b5ff510d2ccc3a9fb-ol8_x86_64_appstream
nodejs-full-i18n-24.14.1-2.module+el8.10.0+90873+35652ecc.x86_64.rpmf6e81d33b40ec56660417b15b2c89f2f235b27c03b0a8b22d399196ae5352cc8-ol8_x86_64_appstream
nodejs-libs-24.14.1-2.module+el8.10.0+90873+35652ecc.x86_64.rpm5ac757d420dc5bc55fcdba0bdabced19dc128186d3cbe2140b194f0fccd16697-ol8_x86_64_appstream
nodejs-nodemon-3.0.3-1.module+el8.10.0+90873+35652ecc.noarch.rpm6b9f1c6378a7ee36eb434b359fd17a0ca028b74812182e3d79199fc9840c582d-ol8_x86_64_appstream
nodejs-packaging-2021.06-6.module+el8.10.0+90873+35652ecc.noarch.rpm29bc00f1146654fb2b55af17b10c212f29a3e449d8c89cc936225b5d2cdb47ad-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90873+35652ecc.noarch.rpme2406f5b1d64027e9b2dfbd51f6fe552ffab7a101dbc315371834957f44136b9-ol8_x86_64_appstream
npm-11.11.0-1.24.14.1.2.module+el8.10.0+90873+35652ecc.noarch.rpm6e98fc6a65f0a56799f57f7c3a38c1279de7c01a1d03a66978fc70a22e61d404-ol8_x86_64_appstream
v8-13.6-devel-13.6.233.17-1.24.14.1.2.module+el8.10.0+90873+35652ecc.x86_64.rpm95637ee041b8467972282e99d304b3b73f9a2aeeac6509262cfaacfaabf4366e-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete