ELSA-2026-55541

Описание

[1:22.23.1-4.0.1]

• Add c-ares as dependency [orabug 39781219]

[1:22.23.1-6]

• Fix for CVE-2026-69152

[1:22.23.1-5]

• Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address

[1:22.23.1-4]

• Fix CVE-2026-13149 (npm/brace-expansion)

[1:22.23.1-3]

• Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar)

[1:22.23.1-2]

• CVE-2026-42338 ip-address HTML escaping fix.

[1:22.23.1-1]

• Update to version 22.23.1

[1:22.22.2-2]

• De-bundle c-ares, libuv
• we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv

[1:22.22.2-1]

• Update to version 22.22.2
• introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
• disabled failing tests in nghttp2 due to newer version
• patch for npm/braces CVE-2026-25547

[1:22.22.0-4]

• sources: changed ICU version syntax