Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:1842

Опубликовано: 06 фев. 2026
Источник: rocky
Оценка: Important

Описание

Important: nodejs24 security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.

Security Fix(es):

  • nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)

  • nodejs: Nodejs denial of service (CVE-2026-21637)

  • nodejs: Nodejs denial of service (CVE-2025-59466)

  • nodejs: Nodejs denial of service (CVE-2025-59465)

  • nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)

  • nodejs: Nodejs file permissions bypass (CVE-2025-55130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
nodejs24-full-i18nx86_641.el10_1nodejs24-full-i18n-24.13.0-1.el10_1.x86_64.rpm
nodejs24-develx86_641.el10_1nodejs24-devel-24.13.0-1.el10_1.x86_64.rpm
nodejs24-libsx86_641.el10_1nodejs24-libs-24.13.0-1.el10_1.x86_64.rpm
nodejs24-docsnoarch1.el10_1nodejs24-docs-24.13.0-1.el10_1.noarch.rpm
nodejs24x86_641.el10_1nodejs24-24.13.0-1.el10_1.x86_64.rpm
nodejs24-npmnoarch1.24.13.0.1.el10_1nodejs24-npm-11.6.2-1.24.13.0.1.el10_1.noarch.rpm

Показывать по

Связанные уязвимости

rocky
около 1 месяца назад

Important: nodejs:20 security update

rocky
около 1 месяца назад

Important: nodejs:22 security update

rocky
около 1 месяца назад

Important: nodejs:24 security update

rocky
около 1 месяца назад

Important: nodejs:20 security update

rocky
около 1 месяца назад

Important: nodejs:22 security update