Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory announces an update for Red Hat Hardened Images RPM packages related to nodejs24 and its components. The update includes new versions of nodejs24, nodejs24-bin, nodejs24-devel, nodejs24-docs, nodejs24-full-i18n, nodejs24-libs, nodejs24-npm, nodejs24-npm-bin, and v8-13.6-devel packages across multiple architectures. The update addresses eight security vulnerabilities identified by CVEs: CVE-2026-87018, CVE-2026-87029, CVE-2026-109383, CVE-2026-109829, CVE-2026-109841, CVE-2026-109869, CVE-2026-109924, and CVE-2026-109932. The advisory does not specify detailed technical descriptions of each vulnerability but references common weakness enumerations (CWEs) such as CWE-617, CWE-248, CWE-295, CWE-346, CWE-354, and CWE-770. The advisory provides updated package versions to remediate these vulnerabilities.

The vulnerabilities addressed in this advisory are considered high severity and affect the Red Hat Hardened Images RPM packages related to nodejs24. Exploitation of these vulnerabilities could potentially impact the security of systems running these packages. The exact impact details are not specified in the advisory, but the presence of multiple CWEs suggests issues related to authentication, authorization, and other security controls. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated RPM packages for nodejs24 and related components that address the identified vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly by upgrading to the specified package versions (e.g., nodejs24-24.21.0-1.5.hum1 and related packages). Detailed instructions and updated packages are available through Red Hat's official channels at https://images.redhat.com/. No additional mitigation steps are indicated beyond applying the official updates.