Описание
ELSA-2025-8468: nodejs:20 security update (IMPORTANT)
nodejs [1:20.19.2-1]
- Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597
nodejs-nodemon nodejs-packaging
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
Module nodejs:20 is enabled
nodejs
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-devel
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-docs
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-full-i18n
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-nodemon
3.0.1-1.module+el9.6.0+90603+e4b3d4d2
nodejs-packaging
2021.06-4.module+el9.6.0+90603+e4b3d4d2
nodejs-packaging-bundler
2021.06-4.module+el9.6.0+90603+e4b3d4d2
npm
10.8.2-1.20.19.2.1.module+el9.6.0+90603+e4b3d4d2
Oracle Linux x86_64
Module nodejs:20 is enabled
nodejs
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-devel
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-docs
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-full-i18n
20.19.2-1.module+el9.6.0+90603+e4b3d4d2
nodejs-nodemon
3.0.1-1.module+el9.6.0+90603+e4b3d4d2
nodejs-packaging
2021.06-4.module+el9.6.0+90603+e4b3d4d2
nodejs-packaging-bundler
2021.06-4.module+el9.6.0+90603+e4b3d4d2
npm
10.8.2-1.20.19.2.1.module+el9.6.0+90603+e4b3d4d2
Связанные CVE
Связанные уязвимости
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowExce ...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.