[ALSA-2026:62219] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-09-29
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-22.23.2-1.module_el8.10.0+4265+75d28086.aarch64.rpm 150d85ee66e84d6c489f6fbf45b08cb960b46f906ff58522966d3df52af5a37d
aarch64 nodejs-libs-22.23.2-1.module_el8.10.0+4265+75d28086.aarch64.rpm 2b0ab28882b187ddf2f571ef5f927c5e3dcf7cd9532fb8c88f1dd2dfdedcb2de
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el8.10.0+4265+75d28086.aarch64.rpm 33205a16a0eadeb90997309b632bffaa09a1df8b20dd7eb8eb1172ebd9fc9d9e
aarch64 npm-10.9.8-1.22.23.2.1.module_el8.10.0+4265+75d28086.aarch64.rpm 44b07094806ff63ef7052f97b3a34400283adbfe7a85f993da92a5ae47a54bd7
aarch64 nodejs-devel-22.23.2-1.module_el8.10.0+4265+75d28086.aarch64.rpm 59d226e75d1880c838ec685c576fd0ac8f738f487f0e7763f0576d56e888c011
aarch64 nodejs-full-i18n-22.23.2-1.module_el8.10.0+4265+75d28086.aarch64.rpm 8b34a379821168cf0aac4f5bc0f3c473f152ff1a493d5f151f3ce4cdfcc240af
noarch nodejs-docs-22.23.2-1.module_el8.10.0+4265+75d28086.noarch.rpm 7fcbef2421b7eddc45595e95f13d260641cc1c54b31d2bd1992a29d892caf9a5
noarch nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm 95549e780e9ad76b8e49f9c9db940d99cb8260f37e3d9cf05df2baaf6182e412
noarch nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm aaede6e40164690ca8a8b2229ad4ad4e0faea8ce4f2d6cfb3358572d8576dace
noarch nodejs-nodemon-3.1.14-2.module_el8.10.0+4252+aedd4c30.noarch.rpm d508f09b72b84ef9c50dc71a770ee4132d91d9d7bb0812aefa82bd85c7b1d693
ppc64le nodejs-full-i18n-22.23.2-1.module_el8.10.0+4265+75d28086.ppc64le.rpm 44fc3931fd912a1d5a53c5ae94c076959b3a3121e7c2b5ade772a9c679ddb152
ppc64le npm-10.9.8-1.22.23.2.1.module_el8.10.0+4265+75d28086.ppc64le.rpm 51e760e18e9c3982898745c2cafd34150d18451bd4d094768037260e2f35e4f1
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el8.10.0+4265+75d28086.ppc64le.rpm 9c6e2a1f970b49045de7cf2053a95cd529eea9f204aa3f16b86fafdc524f755b
ppc64le nodejs-libs-22.23.2-1.module_el8.10.0+4265+75d28086.ppc64le.rpm b13e2895a958a1bd475c829f390cb3736e2cb70cbcaff82d96b0d18697c5fd31
ppc64le nodejs-devel-22.23.2-1.module_el8.10.0+4265+75d28086.ppc64le.rpm fbae32274585f0b44fb24a36522c99c6803d8f4861344d7cfd3b6845b605458e
ppc64le nodejs-22.23.2-1.module_el8.10.0+4265+75d28086.ppc64le.rpm ff19b5783c1286bb257b30a4e72c50b9bbce39d00b0087197bc72e578d75de32
s390x nodejs-libs-22.23.2-1.module_el8.10.0+4265+75d28086.s390x.rpm 35f5543f71ae761cca697bc93f164eb5421c0a17faf34ed0972b8ceea076da03
s390x v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el8.10.0+4265+75d28086.s390x.rpm 44392adae7ee0f461dffa9a225fc3093c652e15bb164afd595e3408a86fab335
s390x nodejs-devel-22.23.2-1.module_el8.10.0+4265+75d28086.s390x.rpm 695dfd3ac0862f3f22b4c585e4c20b918e6b7827c7b334a5f6d9a931e3a7aeae
s390x nodejs-full-i18n-22.23.2-1.module_el8.10.0+4265+75d28086.s390x.rpm 800d31194d9eb1d04e1e9c6317233f298701069ec655cf46f6d33c42f74413f0
s390x npm-10.9.8-1.22.23.2.1.module_el8.10.0+4265+75d28086.s390x.rpm 8434d6ae8a7c65677b5c6d5f35da1d6f6842db0409c0ae9902e81c412c7f9472
s390x nodejs-22.23.2-1.module_el8.10.0+4265+75d28086.s390x.rpm b8fe88315efc64037c24221c6677cc3372f281a8729a8514f9d8a100857d2a22
x86_64 nodejs-22.23.2-1.module_el8.10.0+4265+75d28086.x86_64.rpm 119a06e9d100e517e3fc46593a7f65eb12b7723e645f3cc94f76ef8ce3c2a330
x86_64 npm-10.9.8-1.22.23.2.1.module_el8.10.0+4265+75d28086.x86_64.rpm 1bb1882373a548db3f364146989084aaacb9d43824d86e1c94ff93421d5f2eb7
x86_64 nodejs-devel-22.23.2-1.module_el8.10.0+4265+75d28086.x86_64.rpm 25078e636e23ad28de413d07fbe040e078afdbf0a44f2559ad14905e39e6ded2
x86_64 nodejs-libs-22.23.2-1.module_el8.10.0+4265+75d28086.x86_64.rpm 4afbb1cc39f03b759e1a1bd12eda4c018bb42175666a819102aeb457c82ad27b
x86_64 nodejs-full-i18n-22.23.2-1.module_el8.10.0+4265+75d28086.x86_64.rpm d02a4eeabdeebb7fbfadbbf8b52ff7473f60e06cbd1dd60a1005cfc8d69b1221
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el8.10.0+4265+75d28086.x86_64.rpm f01cf902803e7215ea77dad953a480b031c0badfa3d244e108d82072c9cfc93c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.