Описание
ELSA-2025-8467: nodejs:22 security update (IMPORTANT)
nodejs [1:22.16.0-1]
- Update to 22.16.0 Resolves: RHEL-89600 RHEL-92872 RHEL-92420
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
Module nodejs:22 is enabled
nodejs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-devel
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-docs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-full-i18n
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-libs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-nodemon
3.0.1-1.module+el9.6.0+90588+1a9ecb62
nodejs-packaging
2021.06-4.module+el9.6.0+90588+1a9ecb62
nodejs-packaging-bundler
2021.06-4.module+el9.6.0+90588+1a9ecb62
npm
10.9.2-1.22.16.0.1.module+el9.6.0+90604+9071ea19
v8-12.4-devel
12.4.254.21-1.22.16.0.1.module+el9.6.0+90604+9071ea19
Oracle Linux x86_64
Module nodejs:22 is enabled
nodejs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-devel
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-docs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-full-i18n
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-libs
22.16.0-1.module+el9.6.0+90604+9071ea19
nodejs-nodemon
3.0.1-1.module+el9.6.0+90588+1a9ecb62
nodejs-packaging
2021.06-4.module+el9.6.0+90588+1a9ecb62
nodejs-packaging-bundler
2021.06-4.module+el9.6.0+90588+1a9ecb62
npm
10.9.2-1.22.16.0.1.module+el9.6.0+90604+9071ea19
v8-12.4-devel
12.4.254.21-1.22.16.0.1.module+el9.6.0+90604+9071ea19
Связанные CVE
Связанные уязвимости
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.