From 112ef12d43bb58bf1bf406b22005dbb80895df65 Mon Sep 17 00:00:00 2001
From: AlmaLinux RelEng Bot <eabdullin@almalinux.org>
Date: Mon, 31 Aug 2026 11:04:37 -0400
Subject: [PATCH] import UBI nodejs-22.23.2-1.module+el9.8.0+24709+804d6b5b

---
 .gitignore        |  2 +-
 .nodejs.metadata  |  2 +-
 SPECS/nodejs.spec | 13 +++++++++----
 3 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index da72bdc..f273197 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/icu4c-78.2-data-bin-b.zip
 SOURCES/icu4c-78.2-data-bin-l.zip
-SOURCES/node-v22.23.1-stripped.tar.gz
+SOURCES/node-v22.23.2-stripped.tar.gz
diff --git a/.nodejs.metadata b/.nodejs.metadata
index b5af359..0e689dd 100644
--- a/.nodejs.metadata
+++ b/.nodejs.metadata
@@ -1,3 +1,3 @@
 7a91e81c4f2c8368d80285a5bbdfe278d68e4a84 SOURCES/icu4c-78.2-data-bin-b.zip
 b9f5918e2118ef8531b0ffc04b3d50e951e3a166 SOURCES/icu4c-78.2-data-bin-l.zip
-8751335622db226d57c19ed444575147f0b62396 SOURCES/node-v22.23.1-stripped.tar.gz
+8f8c3ce6bc3e879d084cbd629ea95085ecaba2fb SOURCES/node-v22.23.2-stripped.tar.gz
diff --git a/SPECS/nodejs.spec b/SPECS/nodejs.spec
index f707cda..cca9304 100644
--- a/SPECS/nodejs.spec
+++ b/SPECS/nodejs.spec
@@ -46,7 +46,7 @@
 # This is used by both the nodejs package and the npm subpackage that
 # has a separate version - the name is special so that rpmdev-bumpspec
 # will bump this rather than adding .1 to the end.
-%global baserelease 3
+%global baserelease 1
 
 %{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
@@ -58,7 +58,7 @@
 %global nodejs_epoch 1
 %global nodejs_major 22
 %global nodejs_minor 23
-%global nodejs_patch 1
+%global nodejs_patch 2
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 127
 %global nodejs_abi %{nodejs_soversion}
@@ -88,7 +88,7 @@
 %global c_ares_version 1.34.6
 
 # llhttp - from deps/llhttp/include/llhttp.h
-%global llhttp_version 9.4.2
+%global llhttp_version 9.4.3
 
 # libuv - from deps/uv/include/uv/version.h
 %global libuv_version 1.51.0
@@ -339,7 +339,7 @@ Requires: nodejs-cjs-module-lexer
 %endif
 
 %if %{with bundled_undici}
-Provides: bundled(nodejs-undici) = 6.27.0
+Provides: bundled(nodejs-undici) = 6.28.0
 %else
 BuildRequires: nodejs-undici
 Requires: nodejs-undici
@@ -902,6 +902,11 @@ end
 
 
 %changelog
+* Mon Aug 10 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.23.2-1
+- Update to version 22.23.2
+  Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043
+  Resolves: RHEL-234381 RHEL-234831 RHEL-234896
+
 * Wed Aug 5 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.23.1-3
 - deps: update npm/ip-address to 10.4.0 
 - deps: update npm/brace-expansion to 2.1.4