Red Hat Product Errata RHSA-2026:61377 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61377 - Security Advisory Overview Updated Packages Synopsis Important: nodejs24 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. Security Fix(es): nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) Bug Fix(es) and Enhancement(s): nodejs24: Rebase to the latest Node.js 24 release [rhel-10.2.z] (JIRA:RHEL-220543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2509171 - CVE-2026-58043 nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw BZ - 2510856 - CVE-2026-56846 nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks RHEL-220543 - nodejs24: Rebase to the latest Node.js 24 release [rhel-10.2.z] CVEs CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe x86_64 nodejs24-24.19.0-1.el10_2.x86_64.rpm SHA-256: 49816bc33e9a0e6ca1a6aee035062d80ff1a4a8c04417eeeb08ad86dba3ae202 nodejs24-debuginfo-24.19.0-1.el10_2.x86_64.rpm SHA-256: 5001fe65ed382c6f0fccad44859dc389a32eaa8db22b83aa511bae94fdbac22a nodejs24-debugsource-24.19.0-1.el10_2.x86_64.rpm SHA-256: 44cdfc5577e5fd86500c327ab3c1826e014625bc848874f1093d48e6943a0467 nodejs24-devel-24.19.0-1.el10_2.x86_64.rpm SHA-256: 2d2b9d272f2c1611e6c0f44fd05bb4a2e422e26d0beea03d2a8016249f8f3b42 nodejs24-docs-24.19.0-1.el10_2.noarch.rpm SHA-256: cd5d59041135549ce7b7f755b4b850251bf13e164613fe213deae789e4ba7f17 nodejs24-full-i18n-24.19.0-1.el10_2.x86_64.rpm SHA-256: a20c26054c4f95c63ea9ce08060ad0bb4b646c4620c3f62d746f5f05b7d280da nodejs24-libs-24.19.0-1.el10_2.x86_64.rpm SHA-256: d8601dfa48d34c020a35b0df6624fac194b37e8f920496709b9e878e3c8cc05f nodejs24-libs-debuginfo-24.19.0-1.el10_2.x86_64.rpm SHA-256: 65cd12e119f30239d9fe2b0d93a1f55ff97cb69bb0f0b049148fa1a47de0af84 nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm SHA-256: dc1b77cb8b69b5c96ac274fbdce2b091957cc15f18561ce1408d97f662ee4dcf Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe x86_64 nodejs24-24.19.0-1.el10_2.x86_64.rpm SHA-256: 49816bc33e9a0e6ca1a6aee035062d80ff1a4a8c04417eeeb08ad86dba3ae202 nodejs24-debuginfo-24.19.0-1.el10_2.x86_64.rpm SHA-256: 5001fe65ed382c6f0fccad44859dc389a32eaa8db22b83aa511bae94fdbac22a nodejs24-debugsource-24.19.0-1.el10_2.x86_64.rpm SHA-256: 44cdfc5577e5fd86500c327ab3c1826e014625bc848874f1093d48e6943a0467 nodejs24-devel-24.19.0-1.el10_2.x86_64.rpm SHA-256: 2d2b9d272f2c1611e6c0f44fd05bb4a2e422e26d0beea03d2a8016249f8f3b42 nodejs24-docs-24.19.0-1.el10_2.noarch.rpm SHA-256: cd5d59041135549ce7b7f755b4b850251bf13e164613fe213deae789e4ba7f17 nodejs24-full-i18n-24.19.0-1.el10_2.x86_64.rpm SHA-256: a20c26054c4f95c63ea9ce08060ad0bb4b646c4620c3f62d746f5f05b7d280da nodejs24-libs-24.19.0-1.el10_2.x86_64.rpm SHA-256: d8601dfa48d34c020a35b0df6624fac194b37e8f920496709b9e878e3c8cc05f nodejs24-libs-debuginfo-24.19.0-1.el10_2.x86_64.rpm SHA-256: 65cd12e119f30239d9fe2b0d93a1f55ff97cb69bb0f0b049148fa1a47de0af84 nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm SHA-256: dc1b77cb8b69b5c96ac274fbdce2b091957cc15f18561ce1408d97f662ee4dcf Red Hat Enterprise Linux for IBM z Systems 10 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe s390x nodejs24-24.19.0-1.el10_2.s390x.rpm SHA-256: 5716ae65d01fa2491edd84f1b09f45a038229610d73c4c3d75532a282f9aacef nodejs24-debuginfo-24.19.0-1.el10_2.s390x.rpm SHA-256: df2585e7bc97947888a25a81813d9f50d8eb037cc3b7e668ddbcb4d0f525caf8 nodejs24-debugsource-24.19.0-1.el10_2.s390x.rpm SHA-256: 94636908d9cacff65059d79089196f7ded2bf5ff90dcfe15c76941b7c18700db nodejs24-devel-24.19.0-1.el10_2.s390x.rpm SHA-256: 0b41bf1a489d5744a0dc0193f2fe13d112523c8f207245261e38b7b35134e107 nodejs24-docs-24.19.0-1.el10_2.noarch.rpm SHA-256: cd5d59041135549ce7b7f755b4b850251bf13e164613fe213deae789e4ba7f17 nodejs24-full-i18n-24.19.0-1.el10_2.s390x.rpm SHA-256: ae4598a97ae1546c95b636515e2561c2da6eb3ff93c3542107a46e11495d66a6 nodejs24-libs-24.19.0-1.el10_2.s390x.rpm SHA-256: 7104f889b286f3f95e81144613d33cc918fd64f88a34836d3c1c32df87e4459a nodejs24-libs-debuginfo-24.19.0-1.el10_2.s390x.rpm SHA-256: 7d49e8b64dbb6416b35f7eb09dd9f2e37057a37d3ba9282703980827d449513d nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm SHA-256: dc1b77cb8b69b5c96ac274fbdce2b091957cc15f18561ce1408d97f662ee4dcf Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe s390x nodejs24-24.19.0-1.el10_2.s390x.rpm SHA-256: 5716ae65d01fa2491edd84f1b09f45a038229610d73c4c3d75532a282f9aacef nodejs24-debuginfo-24.19.0-1.el10_2.s390x.rpm SHA-256: df2585e7bc97947888a25a81813d9f50d8eb037cc3b7e668ddbcb4d0f525caf8 nodejs24-debugsource-24.19.0-1.el10_2.s390x.rpm SHA-256: 94636908d9cacff65059d79089196f7ded2bf5ff90dcfe15c76941b7c18700db nodejs24-devel-24.19.0-1.el10_2.s390x.rpm SHA-256: 0b41bf1a489d5744a0dc0193f2fe13d112523c8f207245261e38b7b35134e107 nodejs24-docs-24.19.0-1.el10_2.noarch.rpm SHA-256: cd5d59041135549ce7b7f755b4b850251bf13e164613fe213deae789e4ba7f17 nodejs24-full-i18n-24.19.0-1.el10_2.s390x.rpm SHA-256: ae4598a97ae1546c95b636515e2561c2da6eb3ff93c3542107a46e11495d66a6 nodejs24-libs-24.19.0-1.el10_2.s390x.rpm SHA-256: 7104f889b286f3f95e81144613d33cc918fd64f88a34836d3c1c32df87e4459a nodejs24-libs-debuginfo-24.19.0-1.el10_2.s390x.rpm SHA-256: 7d49e8b64dbb6416b35f7eb09dd9f2e37057a37d3ba9282703980827d449513d nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm SHA-256: dc1b77cb8b69b5c96ac274fbdce2b091957cc15f18561ce1408d97f662ee4dcf Red Hat Enterprise Linux for Power, little endian 10 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe ppc64le nodejs24-24.19.0-1.el10_2.ppc64le.rpm SHA-256: f932f2c9cf596f7e691e94aa7cf81a3b276a458b0bd29748e06d1b8671c273a6 nodejs24-debuginfo-24.19.0-1.el10_2.ppc64le.rpm SHA-256: eeed46e980b74877bdbedd8fcca81748a3b8994abf42be37c64e93cf943284b1 nodejs24-debugsource-24.19.0-1.el10_2.ppc64le.rpm SHA-256: d1842537898e3d04c563ebdcce376ed4cdf02c4119f7ac3d5fa7b9c347be3550 nodejs24-devel-24.19.0-1.el10_2.ppc64le.rpm SHA-256: ecd0e345131b29a745c7562c229fb5cba1a2b7cb9d3a602efb32cec39739b688 nodejs24-docs-24.19.0-1.el10_2.noarch.rpm SHA-256: cd5d59041135549ce7b7f755b4b850251bf13e164613fe213deae789e4ba7f17 nodejs24-full-i18n-24.19.0-1.el10_2.ppc64le.rpm SHA-256: 5b032a37e5f57e3c29a596676340135d583f0e967dbd942235a7c0be152840b1 nodejs24-libs-24.19.0-1.el10_2.ppc64le.rpm SHA-256: 36fd507c8f793d5f7885aca2913f069aa8d40dac30ae5f25a2b7c8d4169123bf nodejs24-libs-debuginfo-24.19.0-1.el10_2.ppc64le.rpm SHA-256: 98bed1f4335706f51850149f73fe3e02c9096800d7427b545bb5587eecd8601c nodejs24-npm-11.17.0-1.24.19.0.1.el10_2.noarch.rpm SHA-256: dc1b77cb8b69b5c96ac274fbdce2b091957cc15f18561ce1408d97f662ee4dcf Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM nodejs24-24.19.0-1.el10_2.src.rpm SHA-256: 0cac4953ec06864096a13208f6da0ad47fa301ebf392c4f05fef22f404b6bdbe ppc64le nodejs24-24.19.0-1.el10_2.ppc64le.rpm