elsa-2026-62583-0

oracle_linux
Description

nodejs [1:24.18.0-3] - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 [1:24.18.0-3] - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-218252 RHEL-218257 [1:24.18.0-2] - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 [1:24.18.0-1] - Update to version 24.18.0 Resolves: RHEL-168744 [1:24.14.1-2] - Update bundled nghttp2 to 1.68.1 Related: RHEL-151374 [1:24.14.1-1] - Update to 24.14.0 Resolves: RHEL-151374 [1:24.13.0-1] - Update to 24.13.0 Resolves: RHEL-135257 [1:24.4.1-1] - Initial import of nodejs:24 nodejs-nodemon [3.1.14-2] - Rebase npm/brace-expansion to 5.0.9 Fixes: CVE-2026-69152 Resolves: RHEL-223789 [3.1.14-1] - Rebase to 3.1.14 - Switch from using remys fork as a source to npm. - Resolves: RHEL-208657 [3.0.3-1] - Initial import into nodejs:24 module nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121576 [2021.06-5] - nodejs.req to properly detect bundled deps [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild [2021.06-2] - Fix hard-coded output directory in the bundler [2021.06-1] - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata [2021.01-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild [2021.01-2] - nodejs-packaging-bundler improvements to handle uncommon characters [2021.01] - Add nodejs-packaging-bundler and update README.md [2020.09-1] - Move to dist-git as the upstream

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-56846",
    "CVE-2026-56848",
    "CVE-2026-58043"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "nodejs\n[1:24.18.0-3]\n- deps: update npm/ip-address to 10.4.0\n- deps: update npm/brace-expansion to 5.9.0\n  Fix: CVE-2026-69192  CVE-2026-54272 CVE-2026-69152\n  Resolves: RHEL-223388 RHEL-223907 RHEL-223792\n\n[1:24.18.0-3]\n- Backport patch update sqlite to 3.53.4\n  Fixes: CVE-2026-11824, CVE-2026-11822\n  Resolves: RHEL-218252 RHEL-218257\n\n[1:24.18.0-2]\n- Backport patches for various CVEs\n  Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149\n  Resolves: RHEL-194176 RHEL-194179 RHEL-208658\n\n[1:24.18.0-1]\n- Update to version 24.18.0\n  Resolves: RHEL-168744\n\n[1:24.14.1-2]\n- Update bundled nghttp2 to 1.68.1\n  Related: RHEL-151374\n\n[1:24.14.1-1]\n- Update to 24.14.0\n  Resolves: RHEL-151374\n\n[1:24.13.0-1]\n- Update to 24.13.0\n  Resolves: RHEL-135257\n\n[1:24.4.1-1]\n- Initial import of nodejs:24\n\nnodejs-nodemon\n[3.1.14-2]\n- Rebase npm/brace-expansion to 5.0.9\n  Fixes: CVE-2026-69152\n  Resolves: RHEL-223789\n\n[3.1.14-1]\n- Rebase to 3.1.14\n- Switch from using remys fork as a source to npm.\n- Resolves: RHEL-208657\n\n[3.0.3-1]\n- Initial import into nodejs:24 module\n\nnodejs-packaging\n[2021.06-6]\n- Properly handle @group/package deps in nodejs-symlink-deps\n  Resolves: RHEL-121576\n\n[2021.06-5]\n- nodejs.req to properly detect bundled deps\n\n[2021.06-4]\n- NPM bundler: also find namespaced bundled dependencies\n\n[2021.06-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild\n\n[2021.06-2]\n- Fix hard-coded output directory in the bundler\n\n[2021.06-1]\n- Update to 2021.06-1\n- bundler: Handle archaic license metadata\n- bundler: Warn about bundled dependencies with no license metadata\n\n[2021.01-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild\n\n[2021.01-2]\n- nodejs-packaging-bundler improvements to handle uncommon characters\n\n[2021.01]\n- Add nodejs-packaging-bundler and update README.md\n\n[2020.09-1]\n- Move to dist-git as the upstream",
  "id": "ELSA-2026-62583-0",
  "ovalId": "oval:com.oracle.elsa:def:2026625830",
  "source": "oracle_linux",
  "title": "ELSA-2026-62583-0:  nodejs:24 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-62583-0.html"
}
View JSON API Download JSON