ELSA-2026-55603

Описание

nodejs [1:24.18.0-6]

• Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8).

[1:24.18.0-5]

• Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address

[1:24.18.0-4]

• deps: update sqlite to 3.53.4

[1:24.18.0-3]

• Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar

[1:24.18.0-2]

• Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion

[1:24.18.0-1]

• Update to version 24.18.0

[1:24.14.1-2]

• Update bundled nghttp2 to 1.68.1

[1:24.14.1-1]

• Update to version 24.14.1

[1:24.13.0-1]

• Update to version 24.13.0

[1:24.11.1-2]

• Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment

nodejs-nodemon [3.1.14-3]

• Fix CVE-2026-69152 - brace-expansion

[3.1.14-2]

• Correction to sources for 3.1.14.

[3.1.14-1]

• Update to version 3.1.14

[3.0.3-3]

• Keep BR on just npm

[3.0.3-2]

• Fix BR for nodejs-npm

nodejs-packaging [2021.06-6]

• Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121569

[2021.06-5]

• nodejs.req to properly detect bundled deps