-
Wed Aug 05 2026 Craig Guiller <craig.guiller@oracle.com> - 1:22.23.1-4.0.1
- Add c-ares as dependency [orabug 39781219]
-
Tue Aug 04 2026 tjuhasz <tjuhasz@redhat.com> - 1:22.23.1-6
- Fix for CVE-2026-69152
-
Tue Aug 04 2026 tjuhasz <tjuhasz@redhat.com> - 1:22.23.1-5
- Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address
-
Mon Jul 20 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:22.23.1-4
- Fix CVE-2026-13149 (npm/brace-expansion)
-
Mon Jul 20 2026 tjuhasz <tjuhasz@redhat.com> - 1:22.23.1-3
- Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar)
-
Wed Jun 24 2026 tjuhasz <tjuhasz@redhat.com> - 1:22.23.1-2
- CVE-2026-42338 ip-address HTML escaping fix.
-
Wed Jun 24 2026 tjuhasz <tjuhasz@redhat.com> - 1:22.23.1-1
- Update to version 22.23.1
-
Tue May 05 2026 Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-2
- De-bundle c-ares, libuv
- we waited for c-ares for about 4 months, so added conditional flag in
case it falls behind in future again, same for libuv
-
Mon Mar 30 2026 Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547
-
Wed Mar 25 2026 Andrei Radchenko <aradchen@redhat.com> - 1:22.22.0-4
- sources: changed ICU version syntax