[ALSA-2026:75864] Important: nodejs22 security update
Type:
security
Severity:
important
Release date:
2026-10-06
Description:
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed devices. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-22.23.2-3.el10_2.aarch64.rpm 1a4a7fa6ebfdb25f7d1dd8009c2fbb4ac7c16ccf1de5e69196e5ac46c040645f
aarch64 nodejs-devel-22.23.2-3.el10_2.aarch64.rpm 266364e849d0a46457610c31bcfa6d2f58e54685c4aabadb2bce626741204bac
aarch64 nodejs-full-i18n-22.23.2-3.el10_2.aarch64.rpm 33b5700e9b2260fda63f209e45dedd469610a5709291f2412a3ccf2c2744d508
aarch64 nodejs-npm-10.9.8-1.22.23.2.3.el10_2.aarch64.rpm 54068d320825bfd3177544be30d1d66b264141da7a840bce81be71b3c3988d8b
aarch64 nodejs-libs-22.23.2-3.el10_2.aarch64.rpm e0eee12c4bb3baa58dadc5207f45d95ce0f14e9c8cd61e3dc4dd9752299e3021
noarch nodejs-docs-22.23.2-3.el10_2.noarch.rpm 214fba9be3d9a6ef94f9450d61364b06af4c6aa7e8bf11fcc46229596bed6a07
ppc64le nodejs-npm-10.9.8-1.22.23.2.3.el10_2.ppc64le.rpm 20d2071e5506af16bb45e8f9eec3726fc75a9237aab06770a7c3611b0ba52c2d
ppc64le nodejs-libs-22.23.2-3.el10_2.ppc64le.rpm 3ed4c542f94a7319bf71a019f5482abfd36e732b59e5f06ce4625a3060c4d872
ppc64le nodejs-22.23.2-3.el10_2.ppc64le.rpm 414c918319f148d9381a94f36067c0598c200306ad8bd203c4a6784bd8057e6e
ppc64le nodejs-full-i18n-22.23.2-3.el10_2.ppc64le.rpm b9523c239e243c1b196a87e06d9b7f82ac71b94a09042b7055417709f9dd41f9
ppc64le nodejs-devel-22.23.2-3.el10_2.ppc64le.rpm e899dcd8642aaf170cde2e79ff875812d96e36f69c1382990fce74ab244366f8
s390x nodejs-22.23.2-3.el10_2.s390x.rpm 1d9ece426ed501ff50c752df319885a89d5e3af6c6fb19f632ecf510bf0981fc
s390x nodejs-libs-22.23.2-3.el10_2.s390x.rpm 597d1fb2fa9ef7b7023ecf10a6b75165ed7436d8328cf04c0a3b9c50c4a831e9
s390x nodejs-npm-10.9.8-1.22.23.2.3.el10_2.s390x.rpm 5c3c8848f68f588ec1bfb321756ea06c5442b5a36ebd65746d6aec6375774a82
s390x nodejs-full-i18n-22.23.2-3.el10_2.s390x.rpm 6b70ba7f827639b1d1aa5e514e1ac40b36ab807fd3ba7fbca8db3b8f5494e715
s390x nodejs-devel-22.23.2-3.el10_2.s390x.rpm e0dc5237da26b2b3dabf2e47b8d02dde81f3aed453a232d46960a9ddd04c739c
x86_64 nodejs-libs-22.23.2-3.el10_2.x86_64.rpm 05a1e4ad67463a1e57321eb8faea8532de85f8046e1ad4ee4ffec271b3970f7b
x86_64 nodejs-npm-10.9.8-1.22.23.2.3.el10_2.x86_64.rpm 1020b90562993a44933da4bcd1b39c37e869f145b3bfeda0c206bb534b1d308e
x86_64 nodejs-devel-22.23.2-3.el10_2.x86_64.rpm 79543284e1db16ea4ce23e07eb6abdf11ea66e4c0931bb241ef114e72ddf7a62
x86_64 nodejs-full-i18n-22.23.2-3.el10_2.x86_64.rpm daa11c110a86d2b9a4035749896dedb01775d60ee2e7ecf474c48f3089dc150b
x86_64 nodejs-22.23.2-3.el10_2.x86_64.rpm f10e0e238bef28fc92c2666ac83fc70a2577d219dd6113287ac0f651717a236d
x86_64_v2 nodejs-full-i18n-22.23.2-3.el10_2.x86_64_v2.rpm 3fa6db40a2b2ee20aee9a10b39221b78a9cd37ccb2c1412bc5983db29477acf0
x86_64_v2 nodejs-npm-10.9.8-1.22.23.2.3.el10_2.x86_64_v2.rpm 671efe4fba14fe0f5ec8e9553b35f17e2e1eecaa12f07f9d0f060c997125f86c
x86_64_v2 nodejs-22.23.2-3.el10_2.x86_64_v2.rpm ac9639fb89a48e7ca30794ae9d9fc066a5153fc2ff3882041f37e9c7e6502a03
x86_64_v2 nodejs-libs-22.23.2-3.el10_2.x86_64_v2.rpm da6552a177bf598b1eebca4b6995179f4d2907daf9a1c1a5709e8cb67f345b53
x86_64_v2 nodejs-devel-22.23.2-3.el10_2.x86_64_v2.rpm db7643c55b69e5fcbe5f14fcd955b8324280bf0e09f5bf39a6e94e1fbab23211
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.