Release nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006 ALSA-2026:73838
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 15/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- nodejs
- Domain
- devops
Research direction
This is an automated AlmaLinux release notice for the nodejs:24 module, listing three undici CVEs and a Node.js 24 rebase, with package build lists but no named source file or failing test. Read the CVE references and the AlmaLinux update pipeline to see what a fix would involve. Done would mean the packages are rebuilt and shipped, which needs maintainer access rather than a first-timer's code change.
Written by the indexing model from the issue text.
Description
nodejs:24 security, bug fix, and enhancement update
Severity: Important
Description
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
- undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152)
- undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961)
- undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534)
Bug Fix(es) and Enhancement(s):
- nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-9.8.z] (JIRA:AlmaLinux-249189)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-24.21.0-1.module+el9.8.0+24924+cd677006.x86_64
nodejs-devel-24.21.0-1.module+el9.8.0+24924+cd677006.x86_64
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-full-i18n-24.21.0-1.module+el9.8.0+24924+cd677006.x86_64
nodejs-libs-24.21.0-1.module+el9.8.0+24924+cd677006.x86_64
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
v8-13.6-devel-13.6.233.17-1.24.21.0.1.module+el9.8.0+24924+cd677006.x86_64
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-24.21.0-1.module+el9.8.0+24924+cd677006.s390x
nodejs-devel-24.21.0-1.module+el9.8.0+24924+cd677006.s390x
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-full-i18n-24.21.0-1.module+el9.8.0+24924+cd677006.s390x
nodejs-libs-24.21.0-1.module+el9.8.0+24924+cd677006.s390x
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
v8-13.6-devel-13.6.233.17-1.24.21.0.1.module+el9.8.0+24924+cd677006.s390x
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-24.21.0-1.module+el9.8.0+24924+cd677006.ppc64le
nodejs-devel-24.21.0-1.module+el9.8.0+24924+cd677006.ppc64le
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-full-i18n-24.21.0-1.module+el9.8.0+24924+cd677006.ppc64le
nodejs-libs-24.21.0-1.module+el9.8.0+24924+cd677006.ppc64le
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
v8-13.6-devel-13.6.233.17-1.24.21.0.1.module+el9.8.0+24924+cd677006.ppc64le
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-24.21.0-1.module+el9.8.0+24924+cd677006.aarch64
nodejs-devel-24.21.0-1.module+el9.8.0+24924+cd677006.aarch64
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-full-i18n-24.21.0-1.module+el9.8.0+24924+cd677006.aarch64
nodejs-libs-24.21.0-1.module+el9.8.0+24924+cd677006.aarch64
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
v8-13.6-devel-13.6.233.17-1.24.21.0.1.module+el9.8.0+24924+cd677006.aarch64
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
nodejs-docs-24.21.0-1.module+el9.8.0+24924+cd677006.noarch
nodejs-nodemon-3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch
npm-11.19.0-1.24.21.0.1.module+el9.8.0+24924+cd677006.noarch
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 4/5 3-5 days Newbie friendliness 15/100
-
Difficulty 5/5 Over a week Newbie friendliness 5/100
All issues in AlmaLinux/updates
Similar issues
-
chore hacktoberfest help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
pacocartones/free-llm-api-hub#346 ·
Maintainers usually reply within 1 day
-
Upgrade to Go 1.27.1Openhelp wanted
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
meshery-extensions/meshery-mcp-server#63 · 1 comment ·
-
devops good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
bug needs-triage
Difficulty 2/5 Under an hour Newbie friendliness 78/100
microsoft/microsoft-ui-reactor#1373 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
elie222/inbox-zero#4160 ·
Maintainers usually reply within 1 day