Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-54371

Опубликовано: 14 авг. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-54371: nodejs:24 security update (IMPORTANT)

nodejs [1:24.18.0-3]

  • deps: update npm/ip-address to 10.4.0
  • deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792

[1:24.18.0-3]

  • Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-218252 RHEL-218257

[1:24.18.0-2]

  • Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658

[1:24.18.0-1]

  • Update to version 24.18.0 Resolves: RHEL-168744

[1:24.14.1-2]

  • Update bundled nghttp2 to 1.68.1 Related: RHEL-151374

[1:24.14.1-1]

  • Update to 24.14.0 Resolves: RHEL-151374

[1:24.13.0-1]

  • Update to 24.13.0 Resolves: RHEL-135257

[1:24.4.1-1]

  • Initial import of nodejs:24

nodejs-nodemon [3.1.14-2]

  • Rebase npm/brace-expansion to 5.0.9 Fixes: CVE-2026-69152 Resolves: RHEL-223789

[3.1.14-1]

  • Rebase to 3.1.14
  • Switch from using remys fork as a source to npm.
  • Resolves: RHEL-208657

[3.0.3-1]

  • Initial import into nodejs:24 module

nodejs-packaging [2021.06-6]

  • Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121576

[2021.06-5]

  • nodejs.req to properly detect bundled deps

[2021.06-4]

  • NPM bundler: also find namespaced bundled dependencies

[2021.06-3]

[2021.06-2]

  • Fix hard-coded output directory in the bundler

[2021.06-1]

  • Update to 2021.06-1
  • bundler: Handle archaic license metadata
  • bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]

[2021.01-2]

  • nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]

  • Add nodejs-packaging-bundler and update README.md

[2020.09-1]

  • Move to dist-git as the upstream

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module nodejs:24 is enabled

nodejs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-devel

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-docs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-full-i18n

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-libs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-nodemon

3.1.14-2.module+el8.10.0+90988+ddbb43dc

nodejs-packaging

2021.06-6.module+el8.10.0+90988+ddbb43dc

nodejs-packaging-bundler

2021.06-6.module+el8.10.0+90988+ddbb43dc

npm

11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc

v8-13.6-devel

13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc

Oracle Linux x86_64

Module nodejs:24 is enabled

nodejs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-devel

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-docs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-full-i18n

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-libs

24.18.0-3.module+el8.10.0+90988+ddbb43dc

nodejs-nodemon

3.1.14-2.module+el8.10.0+90988+ddbb43dc

nodejs-packaging

2021.06-6.module+el8.10.0+90988+ddbb43dc

nodejs-packaging-bundler

2021.06-6.module+el8.10.0+90988+ddbb43dc

npm

11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc

v8-13.6-devel

13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc

Связанные уязвимости

rocky
6 дней назад

Important: nodejs:24 security update

rocky
6 дней назад

Important: nodejs:24 security update

oracle-oval
14 дней назад

ELSA-2026-55603: nodejs:24 security update (IMPORTANT)

rocky
6 дней назад

Important: nodejs:22 security update

rocky
6 дней назад

Important: nodejs:22 security update