RLSA-2026:41947: Important: nodejs:22 security, bug fix, and enhancement update
RLSA-2026:41948: Important: javapackages-tools:201801 security update
RLSA-2026:41947: Important: nodejs:22 security, bug fix, and enhancement update
An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE listRLSA-2026:41947: Important: nodejs:22 security, bug fix, and enhancement update
RLSA-2026:41948: Important: javapackages-tools:201801 security update
An update is available for module.javacc-maven-plugin, maven2, felix-parent, xalan-j2, module.forge-parent, atinject, jdepend, objectweb-pom, osgi-core, module.maven-parent, plexus-i18n, jline, javacc, module.sisu-mojos, module.maven-reporting-impl, junit, maven-shared-incremental, module.objectweb-pom, maven-dependency-tree, module.maven-clean-plugin, module.powermock, apache-resource-bundles, module.plexus-interactivity, module.glassfish-el, javassist, maven-shared-io, module.httpcomponents-project, byaccj, module.javapackages-tools, jsr-305, maven-filtering, module.jdependency, module.plexus-pom, module.apache-commons-io, maven-reporting-impl, module.exec-maven-plugin, jdependency, module.plexus-interpolation, glassfish-legal, module.jdom2, module.jansi, plexus-component-factories-pom, module.glassfish-servlet-api, module.maven-remote-resources-plugin, module.plexus-utils, hawtjni, module.atinject, module.xz-java, weld-parent, module.plexus-component-api, maven-resolver, module.maven-wagon, plexus-languages, module.plexus-i18n, glassfish-el, plexus-utils, maven-dependency-analyzer, module.cdi-api, module.maven-archiver, module.maven-verifier, module.sonatype-plugins-parent, hamcrest, module.maven-shared, spec-version-maven-plugin, module.javacc, module.jaxen, module.maven-source-plugin, plexus-bsh-factory, apache-commons-lang, maven-surefire, xml-commons-apis, module.xml-commons-apis, apache-parent, jzlib, module.maven-invoker-plugin, module.apache-commons-lang, module.apache-commons-beanutils, maven-antrun-plugin, apache-ivy, module.javamail, module.google-guice, xerces-j2, module.plexus-components-pom, maven-artifact-resolver, module.geronimo-annotation, maven-file-management, jaxen, maven-shade-plugin, aopalliance, aqute-bnd, google-guice, javacc-maven-plugin, jdom2, plexus-compiler, maven-archiver, maven-wagon, module.plexus-io, module.maven-install-plugin, module.spec-version-maven-plugin, regexp, module.beust-jcommander, jansi, glassfish-annotation-api, module.geronimo-parent-poms, glassfish-master-pom, maven-jar-plugin, module.plexus-classworlds, maven-plugin-bundle, xml-commons-resolver, maven-compiler-plugin, module.jtidy, module.bcel, module.ant, maven-resources-plugin, module.xmvn, module.httpcomponents-client, module.maven-jar-plugin, maven-artifact-transfer, apache-commons-net, plexus-components-pom, module.maven-script-interpreter, spice-parent, httpcomponents-client, module.jdepend, maven-plugins-pom, maven-parent, module.jline, sisu-mojos, module.jsr-305, module.felix-osgi-core, objenesis, module.easymock, sonatype-oss-parent, forge-parent, module.guava20, module.maven-doxia, maven-doxia-sitetools, apache-commons-io, apache-commons-compress, module.apache-commons-parent, slf4j, ant-contrib, module.glassfish-jsp-api, maven-remote-resources-plugin, module.jboss-parent, module.maven-surefire, osgi-annotation, sonatype-plugins-parent, module.maven-doxia-sitetools, plexus-resources, module.plexus-languages, fusesource-pom, xmvn, maven-plugin-tools, module.maven-plugin-bundle, module.maven-dependency-tree, module.hamcrest, apache-commons-exec, jakarta-oro, jboss-interceptors-1.2-api, module.plexus-sec-dispatcher, module.maven-invoker, apache-commons-codec, module.javassist, module.plexus-cli, module.sisu, geronimo-jpa, maven-plugin-build-helper, plexus-interactivity, module.httpcomponents-core, maven-enforcer, module.weld-parent, module.cglib, objectweb-asm, plexus-ant-factory, mojo-parent, apache-commons-jxpath, module.jansi-native, module.apache-commons-compress, module.apache-commons-codec, module.osgi-core, java_cup, jdom, maven, maven-assembly-plugin, modello, module.maven-reporting-api, powermock, module.apache-commons-jxpath, module.xalan-j2, module.aopalliance, maven-invoker-plugin, plexus-cipher, geronimo-annotation, plexus-cli, xbean, geronimo-parent-poms, module.geronimo-jpa, maven-reporting-api, module.ant-contrib, plexus-sec-dispatcher, javamail, jsch, bsf, jakarta-commons-httpclient, bcel, module.glassfish-legal, module.apache-commons-exec, module.munge-maven-plugin, module.mojo-parent, guava20, module.apache-commons-lang3, testng, log4j12, maven-verifier, module.plexus-resources, module.jakarta-oro, module.aqute-bnd, module.antlr, module.maven-resources-plugin, module.maven2, module.regexp, module.felix-osgi-compendium, module.maven-compiler-plugin, module.modello, apache-commons-parent, module.maven-resolver, module.maven, module.maven-artifact-resolver, jsoup, plexus-io, cdi-api, velocity, module.xmlunit, module.maven-plugin-tools, module.bsf, module.spice-parent, module.plexus-archiver, module.objectweb-asm, apache-commons-cli, plexus-velocity, apache-commons-lang3, module.plexus-compiler, module.osgi-annotation, maven-common-artifact-filters, maven-doxia, module.plexus-build-api, ant, module.maven-enforcer, geronimo-jms, module.felix-parent, module.maven-filtering, assertj-core, module.maven-dependency-analyzer, glassfish-jsp-api, module.jsoup, module.jboss-interceptors-1.2-api, module.apache-commons-net, felix-utils, module.plexus-ant-factory, plexus-build-api, module.fusesource-pom, module.plexus-component-factories-pom, xmlunit, module.maven-file-management, isorelax, jtidy, module.jdom, module.plexus-containers, felix-osgi-foundation, sisu, jansi-native, module.byaccj, glassfish-servlet-api, jvnet-parent, antlr, os-maven-plugin, apache-commons-collections, module.apache-commons-logging, module.xerces-j2, exec-maven-plugin, easymock, plexus-interpolation, maven-install-plugin, module.geronimo-jms, module.apache-resource-bundles, plexus-classworlds, maven-script-interpreter, module.apache-parent, maven-invoker, plexus-component-api, module.maven-plugin-build-helper, module.apache-commons-cli, httpcomponents-core, beust-jcommander, module.maven-assembly-plugin, module.xml-commons-resolver, osgi-compendium, module.bsh, apache-commons-logging, apache-commons-beanutils, module.junit, module.cal10n, module.maven-plugins-pom, module.jflex, maven-source-plugin, module.maven-common-artifact-filters, module.maven-dependency-plugin, plexus-pom, module.jvnet-parent, module.maven-shared-utils, felix-osgi-core, cglib, module.osgi-compendium, module.slf4j, module.felix-utils, module.log4j12, jboss-parent, module.plexus-velocity, cal10n, module.apache-ivy, module.maven-shared-incremental, plexus-containers, module.qdox, mockito, module.plexus-bsh-factory, module.plexus-cipher, httpcomponents-project, module.testng, module.isorelax, module.jzlib, module.os-maven-plugin, module.objenesis, module.sonatype-oss-parent, javapackages-tools, munge-maven-plugin, module.maven-shade-plugin, maven-shared-utils, module.velocity, xz-java, qdox, jflex, maven-plugin-testing, module.jakarta-commons-httpclient, module.felix-osgi-foundation, module.maven-shared-io, bsh, module.glassfish-annotation-api, felix-osgi-compendium, module.assertj-core, module.java_cup, maven-dependency-plugin, module.jsch, module.mockito, module.xbean, plexus-archiver, maven-clean-plugin, module.maven-artifact-transfer, module.apache-commons-collections, module.maven-plugin-testing, module.maven-antrun-plugin, module.glassfish-master-pom, maven-shared, module.hawtjni.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE listRLSA-2026:41948: Important: javapackages-tools:201801 security update
