Oracle alert ELSA-2026-48033 (nodejs22)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-48033 Important: Oracle Linux 10 nodejs22 security update | |
| Date: | Tue, 04 Aug 2026 09:56:50 -0700 | |
| Message-ID: | <mailman.382.1785862625.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-48033 http://linux.oracle.com/errata/ELSA-2026-48033.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: nodejs-22.23.1-4.el10_2.x86_64.rpm nodejs-devel-22.23.1-4.el10_2.x86_64.rpm nodejs-docs-22.23.1-4.el10_2.noarch.rpm nodejs-full-i18n-22.23.1-4.el10_2.x86_64.rpm nodejs-libs-22.23.1-4.el10_2.x86_64.rpm nodejs-npm-10.9.8-1.22.23.1.4.el10_2.x86_64.rpm aarch64: nodejs-22.23.1-4.el10_2.aarch64.rpm nodejs-devel-22.23.1-4.el10_2.aarch64.rpm nodejs-docs-22.23.1-4.el10_2.noarch.rpm nodejs-full-i18n-22.23.1-4.el10_2.aarch64.rpm nodejs-libs-22.23.1-4.el10_2.aarch64.rpm nodejs-npm-10.9.8-1.22.23.1.4.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/nodejs22-22.23.1... Related CVEs: CVE-2026-13149 CVE-2026-59873 CVE-2026-59874 Description of changes: [1:22.23.1-4] - Fix CVE-2026-13149 (npm/brace-expansion) [1:22.23.1-3] - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) [1:22.23.1-2] - CVE-2026-42338 ip-address HTML escaping fix. [1:22.23.1-1] - Update to version 22.23.1 [1:22.22.2-2] - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata