ELSA-2026-500516

ELSA-2026-500516 - nodejs22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


[1:22.23.2-3.0.2]
- Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder
- Expose the block-switch error and add malformed-stream regression coverage
- Require the fixed Oracle Linux 10 system Brotli build


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) nodejs22-22.23.2-3.0.2.el10_2.src.rpme337e2bde81f69867e66adf074d2964948fd674b413b089f25ac3dc642f8878c-ol10_aarch64_appstream
nodejs-22.23.2-3.0.2.el10_2.aarch64.rpm522b5f3495e18d1cea4f97260c466811b1a0bd51e6c450525a9d112496ca04b0-ol10_aarch64_appstream
nodejs-devel-22.23.2-3.0.2.el10_2.aarch64.rpmd0304272f00de997e19fb0e5a1bd4f1281ea7a51b58222ab0724acd3013c44b0-ol10_aarch64_appstream
nodejs-docs-22.23.2-3.0.2.el10_2.noarch.rpm22668ea84c1043e264f06a7998a6dd0a133e61bb2c63af8b95085e84b299013a-ol10_aarch64_appstream
nodejs-full-i18n-22.23.2-3.0.2.el10_2.aarch64.rpmc7b5afbddd7572540869d637ce4d1a011f8c6d144f747ed4e9198cd413f97616-ol10_aarch64_appstream
nodejs-libs-22.23.2-3.0.2.el10_2.aarch64.rpmef7b42f983b9a90cfe2cffb31cdc74cd958c4a6bd646b6e912b0732a82944181-ol10_aarch64_appstream
nodejs-npm-10.9.8-1.22.23.2.3.0.2.el10_2.aarch64.rpm67cc7744b6c74254157b956476f3a7d3c56b764f8c854015b1d629fd3de19cc0-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) nodejs22-22.23.2-3.0.2.el10_2.src.rpme337e2bde81f69867e66adf074d2964948fd674b413b089f25ac3dc642f8878c-ol10_x86_64_appstream
nodejs-22.23.2-3.0.2.el10_2.x86_64.rpm79f43512edb82dcb2fef4dfc5688fc4cf1352ee2bd2d06ddec1ac8183299938f-ol10_x86_64_appstream
nodejs-devel-22.23.2-3.0.2.el10_2.x86_64.rpma23b3a83d11f8b4fc4c17c318d514e09eb364bf6dd91948e8d48fe456a58cf38-ol10_x86_64_appstream
nodejs-docs-22.23.2-3.0.2.el10_2.noarch.rpm22668ea84c1043e264f06a7998a6dd0a133e61bb2c63af8b95085e84b299013a-ol10_x86_64_appstream
nodejs-full-i18n-22.23.2-3.0.2.el10_2.x86_64.rpm43adb80e6746cebb56897341b94b10712d30a3a206cb5feef99b56745c0caa69-ol10_x86_64_appstream
nodejs-libs-22.23.2-3.0.2.el10_2.x86_64.rpme0cb5fd41f908ad6d33d50f391a44a931f2081d71aea34ec4fa7d85b2263a898-ol10_x86_64_appstream
nodejs-npm-10.9.8-1.22.23.2.3.0.2.el10_2.x86_64.rpm3aca77fe34fe967512461d51b73e94e667f1d657729c39e2b85bef263b9b6d56-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete