rpms/nodejs22
7
0
Fork 0
Code Issues Pull Requests Releases Activity
32 Commits 3 Branches 21 Tags 629 KiB
Shell 65.4%
JavaScript 34.6%
c2ec07a455
Go to file
tjuhasz c2ec07a455 Update to version 22.23.1 
Resolves: RHEL-176172
Resolves: RHEL-189392
Resolves: RHEL-189368
Resolves: RHEL-189350
Resolves: RHEL-186004

Fixes CVE-2026-12151 by updating deps/undici to version 6.27.0.
Advisory: https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q

Also fixes following CVEs:
CVE-2026-48618 tls: normalize hostname for server identity checks.
CVE-2026-48933 crypto: guard WebCrypto cipher output length.
CVE-2026-48937 deps: fix integration issues with the latest nghttp2.
CVE-2026-48930 dns,net: reject hostnames with embedded NUL bytes.
CVE-2026-48619 http2: cap originSet size to prevent unbounded memory growth.
CVE-2026-48615 lib,test: redact proxy credentials in tunnel errors.
CVE-2026-48934 tls: bind reusable sessions to authenticated host.
CVE-2026-48928 tls: fix case-sensitive SNI context matching.
CVE-2026-48617 permission: handle process.chdir on writereport.
CVE-2026-48931 http: fix response queue poisoning in http.Agent.
CVE-2026-48935 permission: disable FileHandle utimes with permission model.
Update blog: https://nodejs.org/en/blog/release/v22.23.0

Drop downstream nghttp2 patch
2026-07-07 13:18:07 +02:00
.fmf enable gating 2024-08-07 16:23:16 +02:00
plans Filter for nodejs22.fmf in gating plan 2026-01-16 14:45:41 +01:00
.gitignore Update to version 22.16.0 2025-05-27 11:53:01 +02:00
0001-CVE-2026-25547-braces-expansion.patch Update to version 22.22.2 2026-03-30 11:21:06 +02:00
0001-fips-disable-options.patch Add patch to prevent fips usage segfault 2025-09-03 08:13:25 +00:00
0001-Remove-unused-OpenSSL-config.patch Import SRPM from Fedora 2024-08-06 14:03:45 +02:00
btest402.js Import SRPM from Fedora 2024-08-06 14:03:45 +02:00
gating.yaml enable gating 2024-08-07 16:23:16 +02:00
nodejs22_abi.attr Use stream-specific ABI dependency generator 2025-02-25 11:52:21 +01:00
nodejs22_abi.req Use stream-specific ABI dependency generator 2025-02-25 11:52:21 +01:00
nodejs22.spec Update to version 22.23.1 2026-07-07 13:18:07 +02:00
nodejs-tarball.sh sources: changed ICU version syntax 2026-03-25 12:53:23 +01:00
nodejs.pc.in Import SRPM from Fedora 2024-08-06 14:03:45 +02:00
npmrc Update to version 22.11.0 (LTS) 2024-11-19 16:47:40 +01:00
npmrc.builtin.in Import SRPM from Fedora 2024-08-06 14:03:45 +02:00
rpminspect.yaml Add rpminspect config to repo 2025-06-20 10:44:51 +02:00
sources Update to version 22.23.1 2026-07-07 13:18:07 +02:00
test-runner.sh Add unit-test during build for nodejs22 2025-05-20 11:36:38 +02:00
test-should-pass.txt Update to version 22.22.2 2026-03-30 11:21:06 +02:00
v8.pc.in Import SRPM from Fedora 2024-08-06 14:03:45 +02:00