ELSA-2026-500519

ELSA-2026-500519 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


nodejs
[1:22.23.2-2.0.1]
- Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder
- Expose the block-switch error and add malformed-stream regression coverage
- Require the fixed Oracle Linux 8 system Brotli build

nodejs-nodemon
nodejs-packaging


Related CVEs


CVE-2026-111497

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nodejs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.src.rpmc5cf7b68ea60068a5b21b013ed4bf8d4befc3eb22c09caa392debf2113cc63c2-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91061+02523cc0.src.rpm03fab4f40718ce08c995f22df79919d9a3b8cff1d62bab711f9f8b23a8cbbb62-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91061+02523cc0.src.rpm8a931dad434d3c08bb84d258cd3201eec92329c5d333280bea49b71f844f2fb6-ol8_aarch64_appstream
nodejs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpm15c1fa03fbc7b09f6837792ad72a08ec756ca1cf55712f1c8b32cadad16d8548-ol8_aarch64_appstream
nodejs-devel-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpm90f720fd3b53ace72721a79fbe881e775437804783e3311a0866fdb692c74931-ol8_aarch64_appstream
nodejs-docs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.noarch.rpme62cb11495aecec35b6854bc0e557d0e2495f8747785eaee4e40b9518a406b1c-ol8_aarch64_appstream
nodejs-full-i18n-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpm54a0c6a6f29a0ea5f23c5cd152c9494321213848880da70001b9a47bed858fb5-ol8_aarch64_appstream
nodejs-libs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpma3a4c011d65878d1b733c5816e16d1f9555f8afd0085235bfae7ebc2db559e4d-ol8_aarch64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91061+02523cc0.noarch.rpmf8a28095750577d53e7cea366caca17e1f7b7a8408dcdf047e8cf089b21a525d-ol8_aarch64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91061+02523cc0.noarch.rpm134ba3bcb46fbff7deedf77a063ece0318087159d5a33496ba07a2fa6fdc353d-ol8_aarch64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+91061+02523cc0.noarch.rpm1f8c5c811464a11d52c5bdafbb506ae5428a83339a55384a34318a7cdc6d59ca-ol8_aarch64_appstream
npm-10.9.8-1.22.23.2.2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpm8f557683738de8e4f0bddabc166b17b5e1a29aea6cc47112f069a1b026dfd49d-ol8_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.2.0.1.module+el8.10.0+91085+97cfd505.aarch64.rpm587882121a687b528c47e9e1672feaf292dfcee23e575b23b2f327463579355e-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) nodejs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.src.rpmc5cf7b68ea60068a5b21b013ed4bf8d4befc3eb22c09caa392debf2113cc63c2-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91061+02523cc0.src.rpm03fab4f40718ce08c995f22df79919d9a3b8cff1d62bab711f9f8b23a8cbbb62-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91061+02523cc0.src.rpm8a931dad434d3c08bb84d258cd3201eec92329c5d333280bea49b71f844f2fb6-ol8_x86_64_appstream
nodejs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpm39a9a7521df5deafa16e4a3c11e048c283c23b341d413456ae0dccd546726829-ol8_x86_64_appstream
nodejs-devel-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpm68bce029c40d9aef59c7bca6776accfcb24cba94db56097b569c31d55235abc2-ol8_x86_64_appstream
nodejs-docs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.noarch.rpme62cb11495aecec35b6854bc0e557d0e2495f8747785eaee4e40b9518a406b1c-ol8_x86_64_appstream
nodejs-full-i18n-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpma278d1a26b5d845ff880d860d706c786950bf040abe61bf46b94f6e122cfd544-ol8_x86_64_appstream
nodejs-libs-22.23.2-2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpmc403349fac8c94f91060dab92b120ae5d0786219482a823d067adafa3f79a5bc-ol8_x86_64_appstream
nodejs-nodemon-3.1.14-2.module+el8.10.0+91061+02523cc0.noarch.rpmf8a28095750577d53e7cea366caca17e1f7b7a8408dcdf047e8cf089b21a525d-ol8_x86_64_appstream
nodejs-packaging-2021.06-4.module+el8.10.0+91061+02523cc0.noarch.rpm134ba3bcb46fbff7deedf77a063ece0318087159d5a33496ba07a2fa6fdc353d-ol8_x86_64_appstream
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+91061+02523cc0.noarch.rpm1f8c5c811464a11d52c5bdafbb506ae5428a83339a55384a34318a7cdc6d59ca-ol8_x86_64_appstream
npm-10.9.8-1.22.23.2.2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpmfada2c3c799c5426785f1a4f6235141b894206af033485118b6da250e2f5d183-ol8_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.23.2.2.0.1.module+el8.10.0+91085+97cfd505.x86_64.rpm22634edba221931d0a4b1dd5be8664cf88039cec84c987235d0105c8e885b42e-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete