Oracle Errata System
Oracle Linux
5.11
2026-10-26T21:18:04
ELSA-2026-500518: nodejs:24 security update (IMPORTANT)
Oracle Linux 9
nodejs
[1:24.21.0-1.0.1]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Expose the decoder block-switch error and add regression coverage
- Require the patched system Brotli for shared builds
nodejs-nodemon
nodejs-packaging
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-111497
cpe:/a:oracle:linux:9::appstream
npm
nodejs-libs
v8-13.6-devel
nodejs
nodejs-devel
nodejs-nodemon
oraclelinux-release
nodejs-packaging
nodejs-packaging-bundler
nodejs-docs
nodejs-full-i18n
/etc/dnf/modules.d/nodejs.module
\[nodejs\][\w\W]*
1
bc4d06a08d8b756f
\nstream\s*=\s*24\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*24\b
^9
aarch64
1:24.21.0-1.0.1.module+el9.8.0+91083+7bce9ac0
0:3.1.14-3.module+el9.8.0+91009+5d530ccd
0:2021.06-6.module+el9.8.0+91009+5d530ccd
1:11.19.0-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0
3:13.6.233.17-1.24.21.0.1.0.1.module+el9.8.0+91083+7bce9ac0
x86_64