Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Rocky Linux RLSA-2026-2420 fixes major Denial of Service flaws in Node.js

rocky
Calendar Grey February 11, 2026
Rockylinux Esm H88
Node.js update fixes important security issues on Rocky Linux including DoS and permissions compromises.
Important: nodejs:24 security update

Summary

An update is available for nodejs, nodejs-nodemon, module.nodejs-packaging, nodejs-packaging, module.nodejs, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory denial of service important nodejs rocky linux filesystem permissions

RPMs

nodejs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.src.rpm

nodejs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

nodejs-debuginfo-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-debuginfo-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

nodejs-debugsource-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-debugsource-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

nodejs-devel-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-devel-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

nodejs-docs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.noarch.rpm

nodejs-full-i18n-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-full-i18n-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

nodejs-libs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.aarch64.rpm

nodejs-libs-1:24.13.0-0.module+el8.10.0+40079+1d83e08b.x86_64.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2025-55130

https://www.cve.org/CVERecord?id=CVE-2025-55131

https://www.cve.org/CVERecord?id=CVE-2025-55132

https://www.cve.org/CVERecord?id=CVE-2025-59465

https://www.cve.org/CVERecord?id=CVE-2025-59466

https://www.cve.org/CVERecord?id=CVE-2026-21637

Severity
important

Name: RLSA-2026:2420
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2431338

https://bugzilla.redhat.com/show_bug.cgi?id=2431340

https://bugzilla.redhat.com/show_bug.cgi?id=2431343

https://bugzilla.redhat.com/show_bug.cgi?id=2431349

https://bugzilla.redhat.com/show_bug.cgi?id=2431350

https://bugzilla.redhat.com/show_bug.cgi?id=2431352


Topics%20covered

Topics Covered

security advisory denial of service important nodejs rocky linux filesystem permissions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here