[ALSA-2026:61386] Important: nodejs:24 security update
Type:
security
Severity:
important
Release date:
2026-09-01
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.aarch64.rpm 03e9202d33475146093aa3169ab29f2d791301bd2d5654425d268c75d94e4f60
aarch64 v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.aarch64.rpm 070ef79e87e84abad3d76c61018eb8f80170812d8a3e454ea09dd12636d25dd8
aarch64 nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.aarch64.rpm 61e91cec11c4b7772180b33bb2a48fdef24795d0239a97ec88828ec632dcc1c8
aarch64 nodejs-24.19.0-1.module_el9.8.0+301+084fac05.aarch64.rpm 68f5bd361fafd5c890b163ce9ad6406e9340ef2df81f513a54c055b8118bdce1
aarch64 nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.aarch64.rpm e4efac2a2cbd0388eadc7dacadff387f98e7f117886ed4d0e175ab6193235de2
noarch nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b
noarch nodejs-docs-24.19.0-1.module_el9.8.0+301+084fac05.noarch.rpm 6b79a2f327c28ae2162ae997dfdb6299749be495174f71a83bfc01986ade4afc
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a
noarch npm-11.17.0-1.24.19.0.1.module_el9.8.0+301+084fac05.noarch.rpm c6914f0c7aa777d9357f2895ae67a8bae88b7446eb82b6c70af657b804da2e1a
noarch nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4
ppc64le nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.ppc64le.rpm 38986b917de8095961816e54597bc8b4eee042cfa76408fb9dc7c9505f25b17b
ppc64le nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.ppc64le.rpm 5106cb9e15fa028d53fd85d537b647c77acfb24a1057c3fe37f1a3c1a9c2fff8
ppc64le nodejs-24.19.0-1.module_el9.8.0+301+084fac05.ppc64le.rpm 589d5d9d68b07f7dc8ee232586c9c282c4f461477d0987ad84ead73e13911cbc
ppc64le nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.ppc64le.rpm 82335b54fe1553b4273bf2d1dac4e514c2f13d02378ed4e0f1d0b987f37a789f
ppc64le v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.ppc64le.rpm b560ac7a66e5f5a063b15548589f1533ce98b584978c84c76050c14446234dc2
s390x nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm 3cde8f09554f6a3000d2f4ad81850aae574694406bdb57e7514a0966032f25e2
s390x nodejs-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm 6292fc75ee76b255485b654700f2f7f2d2d96c64b021af81f5ab4238e07155cb
s390x v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.s390x.rpm bb4dc6f570194ea1bc7524f5aafe96170633fc6ae951f6a806297b4058b07281
s390x nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm cd769f2b1cd2d44df9b1910768bce447ab03a3e3e172f44a2ae606d9846dadfc
s390x nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm f26d9ad97b8a9a44027b7998142d049e29e58f20bd47fcc8b8080465b04afe1b
x86_64 v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.x86_64.rpm 3168bc49859833c4962d765eb5903657043c6c3d989a2c0451de0434e1a70035
x86_64 nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 3d78c33784b651fa7766be86bf762bd74543a36f22fea5a8064d9178a50ccbfb
x86_64 nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 4c57bb265ab09c45eca60f9c8513a3c082b64ace2cf6f60fab45bd5fab148839
x86_64 nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 5eae72f3f701b84092706cb0be7197d7a61e56546cf2a67bc17e699727feb460
x86_64 nodejs-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm dbbadf3b2dfc05c322ecda9e2582de3f950ad19ec12bcc0e4f1192068aa9340f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.