[ALSA-2026:74085] Important: nodejs:24 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-14
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152) * undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-8.10.z] (JIRA:AlmaLinux-249188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-libs-24.21.0-1.module_el8.10.0+4292+21afb960.aarch64.rpm 10a1c8f8ea106c02476c0bde0f2916a8fa1c0538fcc9f67e7f4f54c0c2f2be9e
aarch64 nodejs-24.21.0-1.module_el8.10.0+4292+21afb960.aarch64.rpm 1e4a90515649b89c46b8f2d7c32ae10bb1676f3edfb70dc9363c0bbcc6e4fb39
aarch64 nodejs-devel-24.21.0-1.module_el8.10.0+4292+21afb960.aarch64.rpm 22bc3d82e17a1f215cdde7d00492a929f5c8ead5e7a88c5d5a5ce48aa38066c9
aarch64 v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el8.10.0+4292+21afb960.aarch64.rpm 35c5cc9e2fcb8619245567727ba0fe0443e0795a5fbaacf897c36ec22c981393
aarch64 nodejs-full-i18n-24.21.0-1.module_el8.10.0+4292+21afb960.aarch64.rpm db1e4f0fd92544c9a061c6c7f66ec8dfd478d614c6a91b9203b5d3a6bcc696ef
noarch nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm 318c493f93f2190506361306b5759e5e65eee18e3a8d85b195c800d8b7064bc0
noarch npm-11.19.0-1.24.21.0.1.module_el8.10.0+4292+21afb960.noarch.rpm 638e1b948cbbb3b7c3dc14d88099a23f329c9375e51f55d397013e7afd91bb9e
noarch nodejs-docs-24.21.0-1.module_el8.10.0+4292+21afb960.noarch.rpm 6df6a1694c192ee2a814b5261c0baa9aff7e846f87121dc790679593167f4a12
noarch nodejs-nodemon-3.1.14-2.module_el8.10.0+4250+09238ed4.noarch.rpm 9af610bfd34078e749211d051d0a58ec3936da900b69e735bc529b46435cf37f
noarch nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm f4b4a25dc07327deb51619715aae6bd35d22e29ccfc97141c0b61de3a1995eee
ppc64le nodejs-libs-24.21.0-1.module_el8.10.0+4292+21afb960.ppc64le.rpm 4324c0e2f0dfefd27838bbb894ed373ec3a9ad772372911b3bc83f55944cec44
ppc64le nodejs-full-i18n-24.21.0-1.module_el8.10.0+4292+21afb960.ppc64le.rpm a36105794fcc5119b0104bf257455164cd4f8b6b53b46c2970d87a4b0b2f4288
ppc64le nodejs-24.21.0-1.module_el8.10.0+4292+21afb960.ppc64le.rpm af1df9c109c3a6936385fd6e2f9985d7bcf3fe5b18c5a1ab3e1d438392009744
ppc64le v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el8.10.0+4292+21afb960.ppc64le.rpm b679000332e5366adb522c8ba5457fe7e0d567eb6ceb8d7023aa8c0ca50a2eb9
ppc64le nodejs-devel-24.21.0-1.module_el8.10.0+4292+21afb960.ppc64le.rpm e2876933a1cb80bb2d43e23245dd6e1c4958188010f0f9b039fccbb1cb031cbc
s390x nodejs-full-i18n-24.21.0-1.module_el8.10.0+4292+21afb960.s390x.rpm 0d226df8bedd403de685ccad35726773033a74c1fc4e3c1f8e0d6116e504083e
s390x nodejs-24.21.0-1.module_el8.10.0+4292+21afb960.s390x.rpm 4fb27d3cc73f50af36bbbf940177b8f6e121100ae55084e6a25e5b0bdbd89089
s390x nodejs-libs-24.21.0-1.module_el8.10.0+4292+21afb960.s390x.rpm 65b53c3ab20796d22570604e88747fd42dc07f2028a57f5fce41c514c85ed391
s390x nodejs-devel-24.21.0-1.module_el8.10.0+4292+21afb960.s390x.rpm bf468b287da55746893f79544681529c0dc3e4357a1d683635a9d068186f110a
s390x v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el8.10.0+4292+21afb960.s390x.rpm c0f9f24ceae6fd134a533847b641be8d981ed21c464ab43956f4eebdae8ea87f
x86_64 nodejs-libs-24.21.0-1.module_el8.10.0+4292+21afb960.x86_64.rpm 2fe2f24b18fc1b7c2cf66be328211d0259e733af64c92824ae748bda4e61ceb1
x86_64 nodejs-devel-24.21.0-1.module_el8.10.0+4292+21afb960.x86_64.rpm 3ff7369f8b0a239284c2f3acb1122d5023deff54860c0cbfa324f09cb08c5140
x86_64 v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el8.10.0+4292+21afb960.x86_64.rpm 5f94fe403ac504370447f163692ada77ba6b51f9e4f2830516fdb16c41d277bc
x86_64 nodejs-24.21.0-1.module_el8.10.0+4292+21afb960.x86_64.rpm afb27bf3844891e71eb49492b66a30b344e2dd2246935f4742a4d3ce91118ccd
x86_64 nodejs-full-i18n-24.21.0-1.module_el8.10.0+4292+21afb960.x86_64.rpm d3392f9dc80eaa1803703e8a9debef5e570b183b9bcf3c8ab88a847b5739187f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.