Alerts This Week
Warning Icon 1 401
Alerts This Week
Warning Icon 1 401

Oracle Linux 9 ELSA-2026-7896 Nodejs Important DoS Threat

oracle
Calendar Grey April 15, 2026
Oracle Linux Logo Esm H88
Updated nodejs for Oracle Linux 9 addresses critical issues including DoS risks. Learn about recent security updates and CVEs.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

nodejs [1:20.20.2-1] - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 [2.0.20-2] - Patch bundled glob-parent - Resolves: CVE-2021-35065 [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-3517 [2.0.15-1] - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121579 [2021.06-5] - nodejs.req to properly detect bundled deps

Topics%20covered

Topics Covered

security advisory denial of service security update important Oracle Linux nodejs

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/nodejs-20.20.2-1.module+el9.7.0+90874+6d84790f.src.rpm http://oss.oracle.com/ol9/SRPMS-updates/nodejs-nodemon-3.0.1-1.module+el9.7.0+90874+6d84790f.src.rpm http://oss.oracle.com/ol9/SRPMS-updates/nodejs-packaging-2021.06-6.module+el9.7.0+90874+6d84790f.src.rpm

x86_64

nodejs-20.20.2-1.module+el9.7.0+90874+6d84790f.x86_64.rpm nodejs-devel-20.20.2-1.module+el9.7.0+90874+6d84790f.x86_64.rpm nodejs-docs-20.20.2-1.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-full-i18n-20.20.2-1.module+el9.7.0+90874+6d84790f.x86_64.rpm nodejs-nodemon-3.0.1-1.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-packaging-2021.06-6.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.7.0+90874+6d84790f.noarch.rpm npm-10.8.2-1.20.20.2.1.module+el9.7.0+90874+6d84790f.x86_64.rpm

aarch64

nodejs-20.20.2-1.module+el9.7.0+90874+6d84790f.aarch64.rpm nodejs-devel-20.20.2-1.module+el9.7.0+90874+6d84790f.aarch64.rpm nodejs-docs-20.20.2-1.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-full-i18n-20.20.2-1.module+el9.7.0+90874+6d84790f.aarch64.rpm nodejs-nodemon-3.0.1-1.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-packaging-2021.06-6.module+el9.7.0+90874+6d84790f.noarch.rpm nodejs-packaging-bundler-2021.06-6.module+el9.7.0+90874+6d84790f.noarch.rpm npm-10.8.2-1.20.20.2.1.module+el9.7.0+90874+6d84790f.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-21710 CVE-2026-26996 CVE-2026-27135 CVE-2026-27904

Topics%20covered

Topics Covered

security advisory denial of service security update important Oracle Linux nodejs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here