Threats Tagged 'cve-2026-9678'

This update includes the following RPMs: rust: * cargo-1.97.0-1.1.hum1 (aarch64, x86_64) * clippy-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-analyzer-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-debugger-common-1.97.0-1.1.hum1 (noarch) * rust-doc-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-gdb-1.97.0-1.1.hum1 (noarch) * rust-lldb-1.97.0-1.1.hum1 (noarch) * rust-src-1.97.0-1.1.hum1 (noarch) * rust-std-static-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-std-static-aarch64-unknown-none-softfloat-1.97.0-1.1.hum1 (noarch) * rust-std-static-aarch64-unknown-uefi-1.97.0-1.1.hum1 (noarch) * rust-std-static-i686-pc-windows-gnu-1.97.0-1.1.hum1 (noarch) * rust-std-static-wasm32-unknown-unknown-1.97.0-1.1.hum1 (noarch) * rust-std-static-wasm32-wasip1-1.97.0-1.1.hum1 (noarch) * rust-std-static-x86_64-pc-windows-gnu-1.97.0-1.1.hum1 (noarch) * rust-std-static-x86_64-unknown-none-1.97.0-1.1.hum1 (noarch) * rust-std-static-x86_64-unknown-uefi-1.97.0-1.1.hum1 (noarch) * rustfmt-1.97.0-1.1.hum1 (aarch64, x86_64) * rust-1.97.0-1.1.hum1.src (src)

This update includes the following RPMs: nodejs24: * nodejs24-24.18.0-0.3.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.0-0.3.hum1 (noarch) * nodejs24-devel-24.18.0-0.3.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.0-0.3.hum1 (noarch) * nodejs24-full-i18n-24.18.0-0.3.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.0-0.3.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.0.0.3.hum1 (noarch) * nodejs24-npm-bin-24.18.0-0.3.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.0.0.3.hum1 (aarch64, x86_64) * nodejs24-24.18.0-0.3.hum1.src (src) Security Fix(es): nodejs24: * CVE-2026-59869

Multiple security vulnerabilities have been identified and fixed in Node.js 24 as packaged by Red Hat for Red Hat Enterprise Linux 8 and 10. These include issues in the ip-address and undici libraries as well as core Node.js components, affecting areas such as cross-site scripting, denial of service, information disclosure, authentication bypass, and man-in-the-middle attacks. The update rebases Node.js 24 to the latest upstream release, addressing these vulnerabilities. Red Hat has rated the security impact as Important and released updated packages for affected RHEL versions.

A security advisory from Red Hat addresses multiple vulnerabilities in Node.js 22 as packaged for Red Hat Enterprise Linux 10. The update fixes several security issues including cross-site scripting, denial of service, information disclosure, authentication bypass, and trust-policy bypass among others. These vulnerabilities affect components such as the undici HTTP client, ip-address library, Node.js core, and WebCrypto module. The advisory includes a rebase to the latest Node.js 22 release to incorporate these fixes.

This Red Hat Security Advisory addresses multiple vulnerabilities in the Node.js 24 module for Red Hat Enterprise Linux 9. The update includes fixes for cross-site scripting, denial of service, information disclosure, authentication bypass, and other security issues affecting Node.js and its dependencies such as undici and ip-address. The advisory also includes bug fixes and enhancements by rebasing to the latest Node.js 24 release. The vulnerabilities have a high security impact and affect various components related to TLS handling, HTTP/2, WebCrypto, proxy handling, and cookie parsing.

A security advisory from Red Hat addresses multiple vulnerabilities in Node.js 22 and related components included in Red Hat Hardened Images and Red Hat Enterprise Linux 9. The update fixes several security issues including denial of service, information disclosure, authentication bypass, cross-site scripting, and response queue poisoning in the undici HTTP client and Node.js runtime. The advisory includes a rebase to the latest Node.js 22 release and updates multiple RPM packages. The vulnerabilities are rated as having high importance by Red Hat Product Security. No known exploits in the wild have been reported. The update is available for multiple architectures including x86_64 and aarch64. Users are advised to apply the update as per Red Hat guidance.