Back Linuxsecurity

Oracle Linux 9 nodejs Important Security Patch ELSA-2026-61386

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

nodejs [1:24.19.0-1] - Update to version 24.19.0 nodejs-nodemon [3.1.14-3] - Fix CVE-2026-69152 - brace-expansion [3.1.14-2] - Correction to sources for 3.1.14. [3.1.14-1] - Update to version 3.1.14 [3.0.3-3] - Keep BR on just npm [3.0.3-2] - Fix BR for nodejs-npm nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121569 [2021.06-5] - nodejs.req to properly detect bundled deps

nodejs-24.19.0-1.module+el9.8.0+91009+5d530ccd.x86_64.rpm nodejs-devel-24.19.0-1.module+el9.8.0+91009+5d530ccd.x86_64.rpm nodejs-docs-24.19.0-1.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-full-i18n-24.19.0-1.module+el9.8.0+91009+5d530ccd.x86_64.rpm nodejs-libs-24.19.0-1.module+el9.8.0+91009+5d530ccd.x86_64.rpm nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm npm-11.17.0-1.24.19.0.1.module+el9.8.0+91009+5d530ccd.noarch.rpm v8-13.6-devel-13.6.233.17-1.24.19.0.1.module+el9.8.0+91009+5d530ccd.x86_64.rpm

nodejs-24.19.0-1.module+el9.8.0+91009+5d530ccd.aarch64.rpm nodejs-devel-24.19.0-1.module+el9.8.0+91009+5d530ccd.aarch64.rpm nodejs-docs-24.19.0-1.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-full-i18n-24.19.0-1.module+el9.8.0+91009+5d530ccd.aarch64.rpm nodejs-libs-24.19.0-1.module+el9.8.0+91009+5d530ccd.aarch64.rpm nodejs-nodemon-3.1.14-3.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-packaging-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91009+5d530ccd.noarch.rpm npm-11.17.0-1.24.19.0.1.module+el9.8.0+91009+5d530ccd.noarch.rpm v8-13.6-devel-13.6.233.17-1.24.19.0.1.module+el9.8.0+91009+5d530ccd.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Node.js Security Vulnerabilities in Oracle Linux 9 and 10 Oracle has released multiple security advisories for Node.js vulnerabilities affecting Oracle Linux 9 and 10. The advisories include ELSA-2026-61383 and ELSA-2026-61386 for Oracle Linux 9, addressing CVEs such as CVE-2026-56846, CVE-2026-56848, and CVE-2026-69152. The vulnerabilities could potentially allow for remote code execution and denial of service attacks. Oracle Linux 10 also received an update (ELSA-2026-61376) that addresses similar vulnerabilities with Node.js version 22.23.2. Administrators are urged to apply the patches immediately to mitigate risks. The updates include important fixes and enhancements to the Node.js packages and their dependencies. The advisories emphasize the importance of maintaining up-to-date systems to prevent exploitation. As of now, there are no confirmed reports of active exploitation for these vulnerabilities. 5 sources 58

Extracted Entities

CVEs (4)

CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 CVE-2026-69152

IP Addresses (2)

1.24.19.0 13.6.233.17