[El-errata] ELSA-2026-500515 Important: Oracle Linux 10 nodejs24 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-500515

http://linux.oracle.com/errata/ELSA-2026-500515.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs24-24.21.0-1.0.2.el10_2.x86_64.rpm
nodejs24-devel-24.21.0-1.0.2.el10_2.x86_64.rpm
nodejs24-docs-24.21.0-1.0.2.el10_2.noarch.rpm
nodejs24-full-i18n-24.21.0-1.0.2.el10_2.x86_64.rpm
nodejs24-libs-24.21.0-1.0.2.el10_2.x86_64.rpm
nodejs24-npm-11.19.0-1.24.21.0.1.0.2.el10_2.noarch.rpm

aarch64:
nodejs24-24.21.0-1.0.2.el10_2.aarch64.rpm
nodejs24-devel-24.21.0-1.0.2.el10_2.aarch64.rpm
nodejs24-docs-24.21.0-1.0.2.el10_2.noarch.rpm
nodejs24-full-i18n-24.21.0-1.0.2.el10_2.aarch64.rpm
nodejs24-libs-24.21.0-1.0.2.el10_2.aarch64.rpm
nodejs24-npm-11.19.0-1.24.21.0.1.0.2.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.21.0-1.0.2.el10_2.src.rpm

Related CVEs:

CVE-2026-111497




Description of changes:

[24.21.0-1.0.2]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Require fixed OL10 system Brotli for builds without bundled Brotli