elsa-2026-500516

oracle_linux
Description

[1:22.23.2-3.0.2] - Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder - Expose the block-switch error and add malformed-stream regression coverage - Require the fixed Oracle Linux 10 system Brotli build

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-111497"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:22.23.2-3.0.2]\n- Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder\n- Expose the block-switch error and add malformed-stream regression coverage\n- Require the fixed Oracle Linux 10 system Brotli build",
  "id": "ELSA-2026-500516",
  "ovalId": "oval:com.oracle.elsa:def:2026500516",
  "source": "oracle_linux",
  "title": "ELSA-2026-500516: nodejs22 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-500516.html"
}
View JSON API Download JSON