Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-7302

Опубликовано: 10 апр. 2026
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2026-7302: nodejs:22 security update (IMPORTANT)

nodejs [1:22.22.2-1]

  • Update to version 22.22.2
  • introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  • disabled failing tests in nghttp2 due to newer version
  • patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547

nodejs-nodemon [3.0.1-1]

  • Rebase to 3.0.1
  • Resolves: CVE-2022-25883

[2.0.20-2]

  • Patch bundled glob-parent
  • Resolves: CVE-2021-35065

[2.0.20-1]

  • Rebase to 2.0.20 Resolves: CVE-2022-3517

[2.0.15-1]

  • Resolves: RHBZ#2005419
  • Resolves CVE-2020-28469
  • Rebase to newest version
  • Change source to npmjs.com

nodejs-packaging [2021.06-6]

  • Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121582

[2021.06-5]

  • nodejs.req to properly detect bundled deps

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

Module nodejs:22 is enabled

nodejs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-devel

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-docs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-full-i18n

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-libs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-nodemon

3.0.1-1.module+el9.7.0+90867+2ede48fe

nodejs-packaging

2021.06-6.module+el9.7.0+90867+2ede48fe

nodejs-packaging-bundler

2021.06-6.module+el9.7.0+90867+2ede48fe

npm

10.9.7-1.22.22.2.1.module+el9.7.0+90867+2ede48fe

v8-12.4-devel

12.4.254.21-1.22.22.2.1.module+el9.7.0+90867+2ede48fe

Oracle Linux x86_64

Module nodejs:22 is enabled

nodejs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-devel

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-docs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-full-i18n

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-libs

22.22.2-1.module+el9.7.0+90867+2ede48fe

nodejs-nodemon

3.0.1-1.module+el9.7.0+90867+2ede48fe

nodejs-packaging

2021.06-6.module+el9.7.0+90867+2ede48fe

nodejs-packaging-bundler

2021.06-6.module+el9.7.0+90867+2ede48fe

npm

10.9.7-1.22.22.2.1.module+el9.7.0+90867+2ede48fe

v8-12.4-devel

12.4.254.21-1.22.22.2.1.module+el9.7.0+90867+2ede48fe

Связанные уязвимости

rocky
4 месяца назад

Important: nodejs:22 security update

rocky
4 месяца назад

Important: nodejs:22 security update

rocky
4 месяца назад

Important: nodejs22 security update

oracle-oval
4 месяца назад

ELSA-2026-7123: nodejs:22 security update (IMPORTANT)

oracle-oval
4 месяца назад

ELSA-2026-7080: nodejs22 security update (IMPORTANT)