[CLSA-2025:1765905087] Fix CVE(s): CVE-2024-22025
Type:
security
Severity:
Moderate
Release date:
2025-12-16 17:11:31 UTC
Description:
* SECURITY UPDATE: Node.js zlib denial of service vulnerability - debian/patches/CVE-2024-22025.patch: pause stream if outgoing buffer is full to prevent resource exhaustion during decompression - CVE-2024-22025
Updated packages:
  • alt-nodejs16-docs_16.20.2-8_amd64.deb
    sha:107deb7523744b03cfb424acf4d7ceb69bec4a7c
  • alt-nodejs16-nodejs_16.20.2-8_amd64.deb
    sha:c294a82ff429ec9259118d913e4baafc8d486260
  • alt-nodejs16-nodejs-devel_16.20.2-8_amd64.deb
    sha:05e4dcbfb03f31f79c4cafa36f6a6a2f01989bb5
  • alt-nodejs16-npm_8.19.4-16.20.2.8_amd64.deb
    sha:221c42c11b34a97064afacfb7a38c276df13de43
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.