Alerts This Week
Warning Icon 1 1,111
Alerts This Week
Warning Icon 1 1,111

Oracle Linux 8 nodejs Important Vulnerability Advisory ELSA-2026-8339

oracle
Calendar Grey April 19, 2026
Oracle Linux Logo Esm H88
Oracle Linux 8 nodejs update addresses important security issues. Ensure timely application of patches to safeguard systems.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

nodejs [1:20.20.2-1] - Update to version 20.20.2 - Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-154018 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 [2.0.20-2] - Patch bundled glob-parent - Resolves: CVE-2021-35065 [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-3517 [2.0.19-1] - Rebase to 2.0.19 Resolves: CVE-2022-33987 [2.0.15-1] - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com [2.0.7-1] - Resolves: RHBZ#1953991 - Update to 2.0.7 to resolve CVE-2020-28469 [2.0.3-1] - Updated [1.18.3-1] - Resolves: #1615413 - Updated - bundled [1.11.0-2] - rh-nodejs8 rebuild [1.11.0-1] - Updated with script nodejs-packaging [2021.06-5] - nodejs.req properly detect bundled deps [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] -...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory important application update software issue Oracle Linux nodejs

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates/nodejs-20.20.2-1.module+el8.10.0+90878+0d41f8c0.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/nodejs-packaging-2021.06-5.module+el8.10.0+90878+0d41f8c0.src.rpm

x86_64

nodejs-20.20.2-1.module+el8.10.0+90878+0d41f8c0.x86_64.rpm nodejs-devel-20.20.2-1.module+el8.10.0+90878+0d41f8c0.x86_64.rpm nodejs-docs-20.20.2-1.module+el8.10.0+90878+0d41f8c0.noarch.rpm nodejs-full-i18n-20.20.2-1.module+el8.10.0+90878+0d41f8c0.x86_64.rpm nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.noarch.rpm nodejs-packaging-2021.06-5.module+el8.10.0+90878+0d41f8c0.noarch.rpm nodejs-packaging-bundler-2021.06-5.module+el8.10.0+90878+0d41f8c0.noarch.rpm npm-10.8.2-1.20.20.2.1.module+el8.10.0+90878+0d41f8c0.x86_64.rpm

aarch64

nodejs-20.20.2-1.module+el8.10.0+90878+0d41f8c0.aarch64.rpm nodejs-devel-20.20.2-1.module+el8.10.0+90878+0d41f8c0.aarch64.rpm nodejs-docs-20.20.2-1.module+el8.10.0+90878+0d41f8c0.noarch.rpm nodejs-full-i18n-20.20.2-1.module+el8.10.0+90878+0d41f8c0.aarch64.rpm nodejs-nodemon-3.0.1-1.module+el8.10.0+90743+b61054a8.noarch.rpm nodejs-packaging-2021.06-5.module+el8.10.0+90878+0d41f8c0.noarch.rpm nodejs-packaging-bundler-2021.06-5.module+el8.10.0+90878+0d41f8c0.noarch.rpm npm-10.8.2-1.20.20.2.1.module+el8.10.0+90878+0d41f8c0.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-21710 CVE-2026-26996 CVE-2026-27135 CVE-2026-27904

Topics%20covered

Topics Covered

security advisory important application update software issue Oracle Linux nodejs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here