Linux · Security advisory · August 31, 2026

ALSA-2026:61377: Security update for 6 packages

ALSA-2026:61377, released August 31, 2026, fixes 11 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0052
44th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 3 Routine 8

Fixed package versions

ProductReleaseFixed in
nodejs24almalinux 101:24.19.0-1.el10_2
nodejs24-develalmalinux 101:24.19.0-1.el10_2
nodejs24-docsalmalinux 101:24.19.0-1.el10_2
nodejs24-full-i18nalmalinux 101:24.19.0-1.el10_2
nodejs24-libsalmalinux 101:24.19.0-1.el10_2
nodejs24-npmalmalinux 101:11.17.0-1.24.19.0.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-56848 Node.js and 2 others: Use After Free 7.5 0.0052 None reported
High CVE-2026-56846 Node.js and 2 others: Uncontrolled Resource Consumption 7.5 0.0050 None reported
High CVE-2026-58043 Node.js 22 and 2 others: Improper Access Control - Generic 8.4 0.0014 None reported
Routine CVE-2026-58042 Node.js and 2 others: Uncontrolled Resource Consumption 5.9 0.0037 None reported
Routine CVE-2026-58041 Node.js and 2 others: Time-of-check Time-of-use (TOCTOU) Race Condition 5.3 0.0029 None reported
Routine CVE-2026-58040 Node.js and 2 others: Improper Validation of Certificate with Host Mismatch 6.3 0.0028 None reported
Routine CVE-2026-58044 Node.js and 2 others: HTTP Request Smuggling 4.8 0.0027 None reported
Routine CVE-2026-58045 Node.js and 2 others: Uncontrolled Resource Consumption 6.2 0.0017 None reported
Routine CVE-2026-56847 Node.js 22 and 2 others: Excessive Use of Unconditional Branching 6.1 0.0016 None reported
Routine CVE-2026-58039 Node.js and 2 others: Improper Access Control - Generic 4.4 0.0016 None reported
Routine CVE-2026-56850 Node.js 22 and 2 others: Improper Authentication - Generic 4.4 0.0008 None reported
Showing 1 to 11 of 11 1