ELSA-2026-7080

ELSA-2026-7080 - nodejs22 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-08

Description

[1:22.22.2-1]
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

[1:22.22.0-4]
- sources: changed ICU version syntax

Related CVEs

CVE-2026-1525

CVE-2026-1526

CVE-2026-1528

CVE-2026-21710

CVE-2026-2229

CVE-2026-25547

CVE-2026-26996

CVE-2026-27135

CVE-2026-27904

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	nodejs22-22.22.2-1.el10_1.src.rpm	c34a5f474b7e4015ca907ba835f1f91337e9b2e2cc4d150dc295810761f57345	-	ol10_aarch64_appstream
	nodejs-22.22.2-1.el10_1.aarch64.rpm	098ef44dd240f59eae49ea870989b456e67fe796e598a975d0e6eadc2a63471b	-	ol10_aarch64_appstream
	nodejs-devel-22.22.2-1.el10_1.aarch64.rpm	a7a9ea6b941c89750701eced78d9935c87bc5ab190d80b4ee596954787397dff	-	ol10_aarch64_appstream
	nodejs-docs-22.22.2-1.el10_1.noarch.rpm	4329d673cae58f46e3ab1ee0a134f80ba5065b29b5214448944c31963399cbee	-	ol10_aarch64_appstream
	nodejs-full-i18n-22.22.2-1.el10_1.aarch64.rpm	94fc5cfd3db9f319bcffc10f5d658c626b883427f4e4907ae42a14beb1b7346c	-	ol10_aarch64_appstream
	nodejs-libs-22.22.2-1.el10_1.aarch64.rpm	2f67919c03a0af7c1e9e433d2f73259db85295638131e506c7fdf87eea865f26	-	ol10_aarch64_appstream
	nodejs-npm-10.9.7-1.22.22.2.1.el10_1.aarch64.rpm	0fa52329f51102f78cdbb1a7af5823a67423db33019cec9f1f60707197360079	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	nodejs22-22.22.2-1.el10_1.src.rpm	c34a5f474b7e4015ca907ba835f1f91337e9b2e2cc4d150dc295810761f57345	-	ol10_x86_64_appstream
	nodejs-22.22.2-1.el10_1.x86_64.rpm	3aafe41d29edf2d7af009fb21c7830c739f89020ae6ac337cce9d29b6c2c6947	-	ol10_x86_64_appstream
	nodejs-devel-22.22.2-1.el10_1.x86_64.rpm	83d6eda74ec8c3ff00d544c853f13c75880474c71413a4ab793f42be1a2ac8c5	-	ol10_x86_64_appstream
	nodejs-docs-22.22.2-1.el10_1.noarch.rpm	4329d673cae58f46e3ab1ee0a134f80ba5065b29b5214448944c31963399cbee	-	ol10_x86_64_appstream
	nodejs-full-i18n-22.22.2-1.el10_1.x86_64.rpm	32d4704f968e2bee6419bd052682549b5d13ec9efbcc8e82689ae4fe2356a6fb	-	ol10_x86_64_appstream
	nodejs-libs-22.22.2-1.el10_1.x86_64.rpm	6df69ce47b4bb845522182a8ec42e6e49e38bc9a87c4d98cb32eaf21c729de28	-	ol10_x86_64_appstream
	nodejs-npm-10.9.7-1.22.22.2.1.el10_1.x86_64.rpm	fed02e04c906e40cd87db44e0edba2fae0301ed777f6eb74d2214b7d7504d905	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team