[ALSA-2026:61376] Important: nodejs22 security update
Type:
security
Severity:
important
Release date:
2026-09-01
Description:
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed devices. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-devel-22.23.2-1.el10_2.aarch64.rpm 0ee79a30a7f54534b545e12899b8a72adfc5c292b58797b97bee3c05767527e4
aarch64 nodejs-npm-10.9.8-1.22.23.2.1.el10_2.aarch64.rpm 0fdc5d65743c63e24cf4d64deb6e1e04cdb23bc4bd13e7dfd3ae44486c627089
aarch64 nodejs-libs-22.23.2-1.el10_2.aarch64.rpm 368bec944957ed098a1294837dc64b59da2c014f4424894d868eda82d7dc4ba5
aarch64 nodejs-22.23.2-1.el10_2.aarch64.rpm 54cb1e531e0689552f1cbf24e4467235735cd17a36662530dcfc975380cbde2e
aarch64 nodejs-full-i18n-22.23.2-1.el10_2.aarch64.rpm ba03ef2ba9701c6de06854e5ae481fe1365e6aa975f79dea6d8e8fe94c6a79cd
noarch nodejs-docs-22.23.2-1.el10_2.noarch.rpm c9f5cc58213b857b0d4326ca1f1f1fd1cda4ecc64776646fcfb759c191300495
ppc64le nodejs-full-i18n-22.23.2-1.el10_2.ppc64le.rpm 2b3922c24c18a0140fd43395014532e9e5a4728e9c326a6d37335e6a637c14d6
ppc64le nodejs-libs-22.23.2-1.el10_2.ppc64le.rpm 601151e5a4ae7b4bb91d625324b865815befb3992580ba2f739be710ae6bcfb8
ppc64le nodejs-devel-22.23.2-1.el10_2.ppc64le.rpm ab76ed85ac657b89e541005479443b941c973b63bfcdba327d77b6cdf602242b
ppc64le nodejs-22.23.2-1.el10_2.ppc64le.rpm aeee6820c24fd4eaa64245e1d21abc8c5377b646ca419809170f0a8c5677dfde
ppc64le nodejs-npm-10.9.8-1.22.23.2.1.el10_2.ppc64le.rpm f269ec8e3a2d7e475fab5c40b771290ac1c45ca9da5ede7fea229a0b00f4b8c7
s390x nodejs-npm-10.9.8-1.22.23.2.1.el10_2.s390x.rpm 642c824b0bb74eb8463c7599b73e07de899308a3f10b0b0555e80409f334ea6b
s390x nodejs-full-i18n-22.23.2-1.el10_2.s390x.rpm 82d6ea842100dd8161614f2fb563d2fbcd6141927ffa45742b1fb73e0685e99a
s390x nodejs-libs-22.23.2-1.el10_2.s390x.rpm a5e238dcb4665a9fa735d94ad45a8b9f227acbb0776b893eb15528053a0e7eb8
s390x nodejs-devel-22.23.2-1.el10_2.s390x.rpm d8feedbb394f6e361aadfb89f55f3cc8f960a005728962078a0c8f5484404df6
s390x nodejs-22.23.2-1.el10_2.s390x.rpm e37add652359609138181e70276546c2226bb04a1332beaf5a951f1f892d251c
x86_64 nodejs-devel-22.23.2-1.el10_2.x86_64.rpm 1c7b4f4ff7712e98509a87f3d9d4f451b59a50124dd44187d3f0bc9bfec225fa
x86_64 nodejs-full-i18n-22.23.2-1.el10_2.x86_64.rpm 89b877e731970bbc521888f580ea8c18acb77ca76bec158c5b87b7024d6ebe3e
x86_64 nodejs-22.23.2-1.el10_2.x86_64.rpm bdf5d005e60f96f54e11b50f08bb2566ede77d81e2c4ab25ec916d9937cb552b
x86_64 nodejs-npm-10.9.8-1.22.23.2.1.el10_2.x86_64.rpm e7b06590b0c48cdcd12f8a36cb775ac39dc1bda6a897b8248585e31b1b102d5a
x86_64 nodejs-libs-22.23.2-1.el10_2.x86_64.rpm efa1729f04db8181e645147d3824cf60af99da893d12d34cf34228f6465e2b01
x86_64_v2 nodejs-devel-22.23.2-1.el10_2.x86_64_v2.rpm 1b45c899a6632b8ac813b1a0867e3310fad522dfcd5a75f17ec4b08858880c2c
x86_64_v2 nodejs-npm-10.9.8-1.22.23.2.1.el10_2.x86_64_v2.rpm 23ea80cd46c7df768c5b302fb2adb4f9b3842f78417174198585b2d25d699237
x86_64_v2 nodejs-full-i18n-22.23.2-1.el10_2.x86_64_v2.rpm 3f2dfb8b07c38fd2d9d9719796d0772b4c922ed825feff69d436c3d487ae6c21
x86_64_v2 nodejs-22.23.2-1.el10_2.x86_64_v2.rpm 89bd1ef7ee09f17db42700cd9940ec74ec253ba380f7058b936981403bd9b565
x86_64_v2 nodejs-libs-22.23.2-1.el10_2.x86_64_v2.rpm bb68d290def26ff11ebf4edb34480c9b0c41171dc6916eb86c824671215fef15
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.