Back Linuxsecurity

Oracle Linux 10 Nodejs Key Security Update ELSA-2026-61376

Linuxsecurity •LinuxSecurity Advisories • September 2, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

[1:22.23.1-4.0.1] - Add c-ares as dependency [orabug 39781219]

nodejs-22.23.2-1.0.1.el10_2.x86_64.rpm nodejs-devel-22.23.2-1.0.1.el10_2.x86_64.rpm nodejs-docs-22.23.2-1.0.1.el10_2.noarch.rpm nodejs-full-i18n-22.23.2-1.0.1.el10_2.x86_64.rpm nodejs-libs-22.23.2-1.0.1.el10_2.x86_64.rpm nodejs-npm-10.9.8-1.22.23.2.1.0.1.el10_2.x86_64.rpm

nodejs-22.23.2-1.0.1.el10_2.aarch64.rpm nodejs-devel-22.23.2-1.0.1.el10_2.aarch64.rpm nodejs-docs-22.23.2-1.0.1.el10_2.noarch.rpm nodejs-full-i18n-22.23.2-1.0.1.el10_2.aarch64.rpm nodejs-libs-22.23.2-1.0.1.el10_2.aarch64.rpm nodejs-npm-10.9.8-1.22.23.2.1.0.1.el10_2.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Node.js Security Vulnerabilities in Oracle Linux 9 and 10 Oracle has released multiple security advisories for Node.js vulnerabilities affecting Oracle Linux 9 and 10. The advisories include ELSA-2026-61383 and ELSA-2026-61386 for Oracle Linux 9, addressing CVEs such as CVE-2026-56846, CVE-2026-56848, and CVE-2026-69152. The vulnerabilities could potentially allow for remote code execution and denial of service attacks. Oracle Linux 10 also received an update (ELSA-2026-61376) that addresses similar vulnerabilities with Node.js version 22.23.2. Administrators are urged to apply the patches immediately to mitigate risks. The updates include important fixes and enhancements to the Node.js packages and their dependencies. The advisories emphasize the importance of maintaining up-to-date systems to prevent exploitation. As of now, there are no confirmed reports of active exploitation for these vulnerabilities. 5 sources 58

Extracted Entities

Oracle Linux 10 Nodejs Key Security Update ELSA-2026-61376

The full story

Extracted Entities

CVEs (3)

IP Addresses (1)

Platforms (1)