Oracle alert ELSA-2026-47057 (nodejs:24)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-47057 Important: Oracle Linux 9 nodejs:24 security update | |
| Date: | Fri, 31 Jul 2026 15:41:27 -0700 | |
| Message-ID: | <mailman.300.1785537701.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-47057 http://linux.oracle.com/errata/ELSA-2026-47057.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: nodejs-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm nodejs-devel-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm nodejs-docs-24.18.0-3.module+el9.8.0+90974+83075495.noarch.rpm nodejs-full-i18n-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm nodejs-libs-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm nodejs-nodemon-3.1.14-2.module+el9.8.0+90974+83075495.noarch.rpm nodejs-packaging-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm npm-11.16.0-1.24.18.0.3.module+el9.8.0+90974+83075495.noarch.rpm v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el9.8.0+90974+83075495.x86_64.rpm aarch64: nodejs-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm nodejs-devel-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm nodejs-docs-24.18.0-3.module+el9.8.0+90974+83075495.noarch.rpm nodejs-full-i18n-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm nodejs-libs-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm nodejs-nodemon-3.1.14-2.module+el9.8.0+90974+83075495.noarch.rpm nodejs-packaging-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm npm-11.16.0-1.24.18.0.3.module+el9.8.0+90974+83075495.noarch.rpm v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el9.8.0+90974+83075495.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/nodejs-24.18.0-3.... http://oss.oracle.com/ol9/SRPMS-updates/nodejs-nodemon-3.... http://oss.oracle.com/ol9/SRPMS-updates/nodejs-packaging-... Related CVEs: CVE-2026-13149 CVE-2026-59873 CVE-2026-59874 Description of changes: nodejs [1:24.18.0-3] - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar [1:24.18.0-2] - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion [1:24.18.0-1] - Update to version 24.18.0 [1:24.14.1-2] - Update bundled nghttp2 to 1.68.1 [1:24.14.1-1] - Update to version 24.14.1 [1:24.13.0-1] - Update to version 24.13.0 [1:24.11.1-2] - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment [1:24.11.1-1] - Update to version 24.11.1 [1:24.4.1-7] - Add patch to prevent fips usage segfault [1:24.4.1-6] - Rename nodejs-npm back to npm nodejs-nodemon [3.1.14-2] - Correction to sources for 3.1.14. [3.1.14-1] - Update to version 3.1.14 nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121569 [2021.06-5] - nodejs.req to properly detect bundled deps _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata