[ALSA-2026:61377] Important: nodejs24 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-09-01
Description:
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) Bug Fix(es) and Enhancement(s): * nodejs24: Rebase to the latest Node.js 24 release [almalinux-10.2.z] (JIRA:AlmaLinux-220543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs24-libs-24.19.0-1.el10_2.aarch64.rpm 34a6cf42990495249d66818c842f8c03456cee0abdb615b0be0ef40edb6d53a1
aarch64 nodejs24-full-i18n-24.19.0-1.el10_2.aarch64.rpm a90547976a5037c77eb830971a2fcdcd81cc83c48707b85c5079b0d1e52b56b6
aarch64 nodejs24-devel-24.19.0-1.el10_2.aarch64.rpm da4255bcb6d7d9e4abd0f20c064d1c2ffa6d8e5b4d9ee9a913a76ad2f856ab2e
aarch64 nodejs24-24.19.0-1.el10_2.aarch64.rpm ec7f6bbb7313eaf3bd036ead15bc1ac6647d332db621af028f37764ad66e0bc9
noarch nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm afa3166dc5e00f1d8df5f85611a54b62dab8bd37e034efff70b640de418fbf6d
noarch nodejs24-docs-24.19.0-1.el10_2.noarch.rpm d3d3383f8710db59beae06da2be66237d330acc7d4a195352659f94e3a452149
ppc64le nodejs24-24.19.0-1.el10_2.ppc64le.rpm 72b7e708863d1dae7c63134c8e1ece9654ab2b37dd91eb0e9e363b07428a0579
ppc64le nodejs24-libs-24.19.0-1.el10_2.ppc64le.rpm 7ae8bd8c3725422dc45a2e6efcebc58ca1117586ccda9ff4fbe1b37dfae3a72f
ppc64le nodejs24-devel-24.19.0-1.el10_2.ppc64le.rpm 8bb30cb5805780cc1de2a3e34d838f54b3d730ccf4840e964e2da1f0e20a1f74
ppc64le nodejs24-full-i18n-24.19.0-1.el10_2.ppc64le.rpm f58ed6c7808251693f6caf176426f51aaa5b6420a0390fe17aaefccd84b69291
s390x nodejs24-libs-24.19.0-1.el10_2.s390x.rpm 1248a1b8b786863bf6c09618c78415c65314685217051d2e8facc7fbda1eca32
s390x nodejs24-devel-24.19.0-1.el10_2.s390x.rpm 585335c8af7c83eca6a0a0ec3cedbcfd6d065e26edc71a3ec31866be1b3f9dac
s390x nodejs24-full-i18n-24.19.0-1.el10_2.s390x.rpm 7e3a4bb4aecc6e9312dd3b31984ad40100cb6f60c68afce24f2d3c4a9d624c73
s390x nodejs24-24.19.0-1.el10_2.s390x.rpm 9ecc7a97856fe38f8abc9834516672e82e2b5d8e5c9d2263667f0a7c66686a68
x86_64 nodejs24-full-i18n-24.19.0-1.el10_2.x86_64.rpm 404cf4c4cf08c5df63e9caadc936b58d046832905cf3f24ae29b633b118a2d27
x86_64 nodejs24-libs-24.19.0-1.el10_2.x86_64.rpm 4bc27ead833f02a22a04a1042ba9ba141f797e06bf123aa8d68851943cf4a921
x86_64 nodejs24-24.19.0-1.el10_2.x86_64.rpm 6392de1a5298d8bbd1c9bcd2508fdf9a4035a1001ba12308f979c6414c337d71
x86_64 nodejs24-devel-24.19.0-1.el10_2.x86_64.rpm 9a0cd0fc0c4a5a09abc903879e50bea7af4a01c66e0f76bf4d22186731542e94
x86_64_v2 nodejs24-devel-24.19.0-1.el10_2.x86_64_v2.rpm 2379ae0df61fcc1f0ad2828de105527366343367a7e68c0420f303a10734bd13
x86_64_v2 nodejs24-libs-24.19.0-1.el10_2.x86_64_v2.rpm 52300ed252fd0295b746717516bd8418cf7f0166db5b56ad5ba2b8dd6b349d4c
x86_64_v2 nodejs24-full-i18n-24.19.0-1.el10_2.x86_64_v2.rpm b5a82a7b0ea12ecf1f0d85ab64c5cdc5c2482bf1848dab56a4a6670d3d9c3b82
x86_64_v2 nodejs24-24.19.0-1.el10_2.x86_64_v2.rpm caae5f1865909b10c9ecd25f7956e91177935fc3f3970f69618d974255d161f6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.