RHSA-2026:33866 - Security Advisory

Topic

An update for Red Hat Hardened Images RPMs is now available.

Description

This update includes the following RPMs:

nodejs26:

• nodejs26-26.4.0-1.3.hum1 (aarch64, x86_64)
• nodejs26-bin-26.4.0-1.3.hum1 (noarch)
• nodejs26-devel-26.4.0-1.3.hum1 (aarch64, x86_64)
• nodejs26-docs-26.4.0-1.3.hum1 (noarch)
• nodejs26-full-i18n-26.4.0-1.3.hum1 (aarch64, x86_64)
• nodejs26-libs-26.4.0-1.3.hum1 (aarch64, x86_64)
• nodejs26-npm-11.17.0-1.26.4.0.1.3.hum1 (noarch)
• nodejs26-npm-bin-26.4.0-1.3.hum1 (noarch)
• v8-14.6-devel-14.6.202.34-1.26.4.0.1.3.hum1 (aarch64, x86_64)
• nodejs26-26.4.0-1.3.hum1.src (src)

Security Fix(es):

nodejs26:

• CVE-2026-13149

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://images.redhat.com/

Affected Products

• Red Hat Hardened Images

Fixes

CVEs

• CVE-2026-13149
• CVE-2026-53550
• CVE-2026-48936
• CVE-2026-48934
• CVE-2026-48928
• CVE-2026-48930
• CVE-2026-48619
• CVE-2026-48935
• CVE-2026-59870
• CVE-2026-59868

References

• https://access.redhat.com/security/updates/classification/
• https://images.redhat.com/