RHSA-2026:37534 | Mondoo Vulnerability Intelligence

RHSA-2026:37534

HIGH7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 10, 2026

Modified 2 days ago

Fix available

Details

Details:

This update includes the following RPMs:

nodejs25:

nodejs25-25.9.0-1.3.hum1 (aarch64, x86_64)
nodejs25-bin-25.9.0-1.3.hum1 (noarch)
nodejs25-devel-25.9.0-1.3.hum1 (aarch64, x86_64)
nodejs25-docs-25.9.0-1.3.hum1 (noarch)
nodejs25-full-i18n-25.9.0-1.3.hum1 (aarch64, x86_64)
nodejs25-libs-25.9.0-1.3.hum1 (aarch64, x86_64)
nodejs25-npm-11.12.1-1.25.9.0.1.3.hum1 (noarch)
nodejs25-npm-bin-25.9.0-1.3.hum1 (noarch)
v8-14.1-devel-14.1.146.11-1.25.9.0.1.3.hum1 (aarch64, x86_64)
nodejs25-25.9.0-1.3.hum1.src (src)

Security Fix(es):

nodejs25:

CVE-2026-59869

Affected Packages

nodejs25

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-bin

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-devel

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-docs

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-full-i18n

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-libs

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

nodejs25-npm

Red Hat hummingbird 1

Fixed in:

0:11.12.1-1.25.9.0.1.3.hum1

nodejs25-npm-bin

Red Hat hummingbird 1

Fixed in:

0:25.9.0-1.3.hum1

v8-14.1-devel

Red Hat hummingbird 1

Fixed in:

0:14.1.146.11-1.25.9.0.1.3.hum1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:37534

WEB

https://access.redhat.com/security/cve/CVE-2026-53550

WEB

https://access.redhat.com/security/cve/CVE-2026-59869

WEB

https://access.redhat.com/security/updates/classification/

WEB

https://images.redhat.com/

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37534.json

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2026-53550 CVE-2026-59869

Ecosystems

Red Hat hummingbird 1

Timeline

PublishedJul 10, 2026

ModifiedOct 5, 2026