Oracle Errata System
Oracle Linux
5.11
2026-09-02T15:18:26
ELSA-2026-61383-0: nodejs:22 security update (IMPORTANT)
Oracle Linux 9
nodejs
[1:22.23.2-1]
- Update to version 22.23.2
Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043
Resolves: RHEL-234381 RHEL-234831 RHEL-234896
nodejs-nodemon
[3.1.14-1]
- Rebase to 3.1.14
- Change
%setup -q
/usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch |
/usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch
- Resolves: RHEL-208677
nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-120511
[2021.06-5]
- nodejs.req to properly detect bundled deps
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-56846
CVE-2026-56848
CVE-2026-58043
cpe:/a:oracle:linux:9::appstream
npm
nodejs-libs
nodejs
nodejs-devel
nodejs-nodemon
oraclelinux-release
nodejs-packaging
v8-12.4-devel
nodejs-packaging-bundler
nodejs-docs
nodejs-full-i18n
/etc/dnf/modules.d/nodejs.module
\[nodejs\][\w\W]*
1
bc4d06a08d8b756f
\nstream\s*=\s*22\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*22\b
^9
aarch64
1:22.23.2-1.module+el9.8.0+91010+e0f4f255
0:3.1.14-2.module+el9.8.0+91010+e0f4f255
0:2021.06-6.module+el9.8.0+91010+e0f4f255
1:10.9.8-1.22.23.2.1.module+el9.8.0+91010+e0f4f255
3:12.4.254.21-1.22.23.2.1.module+el9.8.0+91010+e0f4f255
x86_64