Red Hat Product Errata RHSA-2026:62219 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:62219 - Security Advisory Overview Updated Packages Synopsis Important: nodejs:22 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2509171 - CVE-2026-58043 nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw BZ - 2510856 - CVE-2026-56846 nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks CVEs CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM nodejs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: c60be943c38d955f9753436b8b7d7809c27d98dbce7d50a9ebc8f2347abad6e9 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: 9270aca606d7ffaa070f7251e723bd9a026f1f08a3313016d6d2880b8fdba53b nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: eedaa889e2ce258917d4d2d085004b9c9bac63bbac5d0378768dcae81daf48f1 x86_64 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 nodejs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 9912d94a908218e4b82c67fd499361493ef71e96e5a915016ff75b83a9e5ee63 nodejs-debuginfo-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 3b5c57d5190089d5c560191f44164e3d9162d546ad128a3233fd52acd96d2fe7 nodejs-debugsource-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 7f9fad6cba1bb1e6b5cb93f8666722b62bfb40c8041d0372b9473408bf1f026b nodejs-devel-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: c34310e2d4735ef4c336a532fbff06a4444e5f0b673b3dc256cd949e1f54e333 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-full-i18n-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 819c6281e9c1a718401d95dc6b1b5ae673513229ffa6a65c4e7c871fb2ac42c8 nodejs-libs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 8d33f601f01ab0f158555233e4c8edce9461985401ccef56a3a95160a1f9db04 nodejs-libs-debuginfo-22.23.2-1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 1e12e12c6ba230ac0b61cc6d67cb3d06d21c15c10d307729d9e90fdd5b773fe6 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 npm-10.9.8-1.22.23.2.1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 22694221d7f0c8a525faec5e7ad3dadcf7c1df82cb925567fca2960fddbc5fa9 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el8.10.0+24710+c2e9b41f.x86_64.rpm SHA-256: 9e3d04e97f3dd1ebca6e12e21fb5d4fde56454b2f779311b8a8eb5b2d98854cb Red Hat Enterprise Linux for IBM z Systems 8 SRPM nodejs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: c60be943c38d955f9753436b8b7d7809c27d98dbce7d50a9ebc8f2347abad6e9 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: 9270aca606d7ffaa070f7251e723bd9a026f1f08a3313016d6d2880b8fdba53b nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.src.rpm SHA-256: eedaa889e2ce258917d4d2d085004b9c9bac63bbac5d0378768dcae81daf48f1 s390x nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 nodejs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: 66db7117ad507724fdfaf0a46782dab36a57299c048ea4b1d8c9b3a249de5133 nodejs-debuginfo-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: c7ec522f7cad8a70f54549e7081aece69176d79eaf8c70dc3fb0a46c1f541983 nodejs-debugsource-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: 4a102099be58b48cdd5ebeb624dca83866e6e8b7b649b9b18428365c8935be44 nodejs-devel-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: e898fcec31797a37b9662a07beb88dae24e824d3d6dfdc6893bf51cf69ee0939 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-full-i18n-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: 4aca65a2c9507057c09ad58b0d45d986eac81be8255e80630f70cabdc06cdc53 nodejs-libs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: ffcdc9ddbe8389c6552aae7d24e3de798077a7a335dba34a198aa390a69d3fc3 nodejs-libs-debuginfo-22.23.2-1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: 38a2567fb9cecb40650ae8d51ccdbfc5073485d421109c0b10860cb6808b785d nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 npm-10.9.8-1.22.23.2.1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: 246f400e859683e2881440d6e8814928084888a77cc871ccb088220c51718606 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module+el8.10.0+24710+c2e9b41f.s390x.rpm SHA-256: fb704ede0ebcfd3dded6027124670c8c1c2dcc7ad5d71add4c5a3215a52a62d5 nodejs-docs-22.23.2-1.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 877efbe6f7f5d02043f6f12ae815b5243251a904ecf3965450c80bc9b2c0b767 nodejs-nodemon-3.1.14-2.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: ca420ce2fb9fd8e77de452a33a47ba1355e8f073cec5e07964b01e991950c9e3 nodejs-packaging-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: f87642e2a2e67bee93ef2f266bedd401ee09b5053ad5bfe416ca700e543eaff7 nodejs-packaging-bundler-2021.06-6.module+el8.10.0+24710+c2e9b41f.noarch.rpm SHA-256: 259ac75b1977e9f1bf900feff9daff2964aafeb2a3181f1c8b63b519dda7e5b9 n