[ALSA-2026:61383] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-09-01
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.aarch64.rpm 5a81ffd55c295477afcf9372599a4bcd9298390ebaa5b00d975d04a21528895d
aarch64 npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.aarch64.rpm 8d7842d3c8e77e673576aeaa77f731b19f812f0496fa77c8f1ab6a7cfaefa23e
aarch64 nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.aarch64.rpm bb0ec9bc8165a1dbd0276b86135a4d4381ad64fe7a05082ef6a8391e0a6864d4
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.aarch64.rpm c779216bcedf2d01ece1a08120be34229edf406c1720aa952a48f6548c6d8cd7
aarch64 nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.aarch64.rpm f60be6c8756e5bdbd257cc554670d5cd9fbc100782b0e661a1fd2f1d9a84df03
aarch64 nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.aarch64.rpm f83b89a56ed75f203a83c5ed06f027293804ede6529a00bf3440a39b1d433371
noarch nodejs-nodemon-3.1.14-2.module_el9.8.0+291+0bb98cce.noarch.rpm 36bfb4903244fdf5e11e5ef3cf579bd330a0b7dc8b53b9d7e7a3d490ff6c1e4c
noarch nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210
noarch nodejs-docs-22.23.2-1.module_el9.8.0+302+959ebcd4.noarch.rpm d5f00dee1013bd6ca5404a82ca89d383299eeeb366e77cdf7a21bdf73a8a7351
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042
ppc64le nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.ppc64le.rpm 2703ddb1bcc0275c4df8c951ddff93ace6dc79ab3802a1dadd0fc7b6533f4d54
ppc64le nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.ppc64le.rpm 37ef99767c06dcf20d91c81418cb147c31b2d85d3f0fdabf83c1d37bb6157817
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.ppc64le.rpm 62018b323275541dd53af3b7f2665c67fb58e5c4a26302bbd1eeb9e259dd1597
ppc64le npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.ppc64le.rpm b8353d200203650ae54e73e610cffc681db030d96a2e0797dbceb2606bc2debc
ppc64le nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.ppc64le.rpm d472c7b27d46222956bdaeced4df7c4cbbd326be21209b050beb836444c606e5
ppc64le nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.ppc64le.rpm d4ae76dad939f7915fc5351177ba555c62ff22277fbb2b5d092a76d7dddc208f
s390x nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm 36a7731d5608c9dc70c31eb68dfd619e2cbcffbc71129e9dc5b1d490788c1fdf
s390x v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.s390x.rpm 3d7f3b6157db1e4f41b352dee094ce2f41fb0b1001d49c468cf3fdb7284d1aa3
s390x npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.s390x.rpm 4a53b843850b7a3dc92f7767a09ceafdeb07f3d3bc15ab8942be417465bf5d23
s390x nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm 897cd16b1fc7714cfa930a92c695f325c793a12a0b6985469c403b3a284e1b24
s390x nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm cab6904906a27d2e0dfd14e60cc5ffd141b8d8740e3dffca2b8f114027d9fd65
s390x nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm db3598c7665eb110a014c55c62acfce182260e4634c350f949610225644c64cf
x86_64 nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm 33c5555e13b76ce1aff62f1e4baed7ec9e3703fe4d5aa925a006e164a66dd4f9
x86_64 npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.x86_64.rpm 5ebccce833a59e82df34194a29fd744401613bef8cad339c724d1e5437b6d79f
x86_64 nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm 6a9282497350e46e2c258ffc9fe40628b4d6d22339a62cd5e0514517869e8722
x86_64 nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm a9ccf373da04b5903222a0f8083dc0505c2e42071909f9a254041c503fcb0cf2
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.x86_64.rpm f715186e306b5c8abea108cfbcf84c6296cf44a8aa3b2a7937fdac3324a6780a
x86_64 nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm f9e86707de8fb75fee60f40ab4aa2caf0aaec7849da687ad49caae2897f36654
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.