Описание
ELSA-2026-48033: nodejs22 security update (IMPORTANT)
[1:22.23.1-4]
- Fix CVE-2026-13149 (npm/brace-expansion)
[1:22.23.1-3]
- Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar)
[1:22.23.1-2]
- CVE-2026-42338 ip-address HTML escaping fix.
[1:22.23.1-1]
- Update to version 22.23.1
[1:22.22.2-2]
- De-bundle c-ares, libuv
- we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
nodejs
22.23.1-4.el10_2
nodejs-devel
22.23.1-4.el10_2
nodejs-docs
22.23.1-4.el10_2
nodejs-full-i18n
22.23.1-4.el10_2
nodejs-libs
22.23.1-4.el10_2
nodejs-npm
10.9.8-1.22.23.1.4.el10_2
Oracle Linux x86_64
nodejs
22.23.1-4.el10_2
nodejs-devel
22.23.1-4.el10_2
nodejs-docs
22.23.1-4.el10_2
nodejs-full-i18n
22.23.1-4.el10_2
nodejs-libs
22.23.1-4.el10_2
nodejs-npm
10.9.8-1.22.23.1.4.el10_2