ELSA-2026-500517

ELSA-2026-500517 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


nodejs
[1:22.23.2-2.0.1]
- Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497]
- Expose the decoder block-switch error and add regression coverage
- Require the patched system Brotli for shared builds

nodejs-nodemon
nodejs-packaging


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nodejs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.src.rpmd5eacd1bbebda91aa2dd722aae24263271a97ac0fd66bf966c84ee729e06e4a2-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.src.rpm77d3c807612130bfe940e4a16766416ad1b3ea321cd92efbebfe2cc3053f862d-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.src.rpm6d341ed26e1268fbf465ce25d3b1f1d4eb4d12830958f909af2ce649030d76f6-ol9_aarch64_appstream
nodejs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpm1919974bd07827cf7abdb426b99318e0ac33ca09429dc9bc4b9d7b9989e7e128-ol9_aarch64_appstream
nodejs-devel-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpma58b193e9fbb5fda84a5b45f155667b5f81ed9f665a3fdd06cec0dcf5e9f8319-ol9_aarch64_appstream
nodejs-docs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.noarch.rpm56d0c5cbf354ad00390f856725ac9010dd480370f86af664b58efd8783b180e7-ol9_aarch64_appstream
nodejs-full-i18n-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpmdef79a8f1b0ffd39e79861e960cf714d10520990d66981b5e850c9d313dbde50-ol9_aarch64_appstream
nodejs-libs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpmc96cc6c3db1c6105b58303bd8720a9294ee53ca2a6e3ff1734fa921eb1c60a7c-ol9_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.noarch.rpmf3814a67931fdd04596242a0162d3ba08b15cc55e42a3080b8f999fd19b553c1-ol9_aarch64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpm99f5d90350bc1ba909c679601562085a52fb0ff3f05fef90c2d210efbb7829e0-ol9_aarch64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpmd50e4f118178582c30d8143a94c1feee61b963e55783188e51ef038a60d8e0f0-ol9_aarch64_appstream
npm-10.9.8-1.22.23.2.2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpme965b563bffc81b83fcb7be597dce0d4701d66385b29943a000225c240277655-ol9_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.2.0.1.module+el9.8.0+91084+6a4a26be.aarch64.rpm40fe524a5f5fe3ed15489a6d264e95562aac2f3acfdb3d93fdc13fd9494e4dd8-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) nodejs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.src.rpmd5eacd1bbebda91aa2dd722aae24263271a97ac0fd66bf966c84ee729e06e4a2-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.src.rpm77d3c807612130bfe940e4a16766416ad1b3ea321cd92efbebfe2cc3053f862d-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.src.rpm6d341ed26e1268fbf465ce25d3b1f1d4eb4d12830958f909af2ce649030d76f6-ol9_x86_64_appstream
nodejs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpmf39c51d9a9803b0729b4a4a701c78af15d5359e99ab26011bea4641fd704ee2e-ol9_x86_64_appstream
nodejs-devel-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpmcd05c53b0dcac8ba5354168c3f8ac28ab9bf1abc74ff23b22297357666909edf-ol9_x86_64_appstream
nodejs-docs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.noarch.rpm56d0c5cbf354ad00390f856725ac9010dd480370f86af664b58efd8783b180e7-ol9_x86_64_appstream
nodejs-full-i18n-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpmfdb82a691c9f36e311db22089e6fb78eaf793a98364905e35974ffce3e5b0ed7-ol9_x86_64_appstream
nodejs-libs-22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpm7c8693cc8bb255abfffba352473faa061aba13428e6c96fa7de01a60bd9b92b4-ol9_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el9.8.0+91010+e0f4f255.noarch.rpmf3814a67931fdd04596242a0162d3ba08b15cc55e42a3080b8f999fd19b553c1-ol9_x86_64_appstream
nodejs-packaging-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpm99f5d90350bc1ba909c679601562085a52fb0ff3f05fef90c2d210efbb7829e0-ol9_x86_64_appstream
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+91010+e0f4f255.noarch.rpmd50e4f118178582c30d8143a94c1feee61b963e55783188e51ef038a60d8e0f0-ol9_x86_64_appstream
npm-10.9.8-1.22.23.2.2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpm38fe6e1003cce8ed6d54c3f5c4493e085019c04850f159f7d18072790ff4dfc2-ol9_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.2.0.1.module+el9.8.0+91084+6a4a26be.x86_64.rpmffb0b7d0a94a05f248b55462152b28497b5fba000696bb51e455b9535553ea7b-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete