Oracle Errata System
Oracle Linux
5.11
2026-07-08T15:04:21
ELSA-2026-35892: nodejs:22 security, bug fix, and enhancement update (IMPORTANT)
Oracle Linux 9
nodejs
[1:22.23.1-1]
- Update to version 22.23.1
Resolves: RHEL-186622 RHEL-185998 RHEL-183669
Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338
nodejs-nodemon
[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883
[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065
[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517
[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com
nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-120511
[2021.06-5]
- nodejs.req to properly detect bundled deps
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-11525
CVE-2026-12151
CVE-2026-42338
CVE-2026-48615
CVE-2026-48618
CVE-2026-48619
CVE-2026-48928
CVE-2026-48930
CVE-2026-48933
CVE-2026-48934
CVE-2026-48935
CVE-2026-6733
CVE-2026-9678
cpe:/a:oracle:linux:9::appstream
npm
nodejs-libs
nodejs
nodejs-devel
nodejs-nodemon
oraclelinux-release
nodejs-packaging
v8-12.4-devel
nodejs-packaging-bundler
nodejs-docs
nodejs-full-i18n
/etc/dnf/modules.d/nodejs.module
\[nodejs\][\w\W]*
1
bc4d06a08d8b756f
\nstream\s*=\s*22\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*22\b
^9
aarch64
1:22.23.1-1.module+el9.8.0+90947+d3e8e647
0:3.0.1-1.module+el9.8.0+90947+d3e8e647
0:2021.06-6.module+el9.8.0+90947+d3e8e647
1:10.9.8-1.22.23.1.1.module+el9.8.0+90947+d3e8e647
3:12.4.254.21-1.22.23.1.1.module+el9.8.0+90947+d3e8e647
x86_64