Oracle Errata System Oracle Linux 5.11 2026-07-31T19:53:13 Oracle Linux 9 nodejs [1:24.18.0-3] - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar [1:24.18.0-2] - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion [1:24.18.0-1] - Update to version 24.18.0 [1:24.14.1-2] - Update bundled nghttp2 to 1.68.1 [1:24.14.1-1] - Update to version 24.14.1 [1:24.13.0-1] - Update to version 24.13.0 [1:24.11.1-2] - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment [1:24.11.1-1] - Update to version 24.11.1 [1:24.4.1-7] - Add patch to prevent fips usage segfault [1:24.4.1-6] - Rename nodejs-npm back to npm nodejs-nodemon [3.1.14-2] - Correction to sources for 3.1.14. [3.1.14-1] - Update to version 3.1.14 nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121569 [2021.06-5] - nodejs.req to properly detect bundled deps IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-13149 CVE-2026-59873 CVE-2026-59874 cpe:/a:oracle:linux:9::appstream