[CLSA-2025:1766614923] Fix CVE(s): CVE-2023-45143
Type:
security
Severity:
Low
Release date:
2025-12-24 22:22:07 UTC
Description:
* SECURITY UPDATE: Node.js undici cross-origin redirect vulnerability - debian/patches/CVE-2023-45143.patch: clear Cookie and Host headers on cross-origin redirects to prevent sensitive data leakage - CVE-2023-45143
Updated packages:
  • alt-nodejs16-docs_16.20.2-9_amd64.deb
    sha:536bbe1b731687f574b681e86fa26c30cf7642ee
  • alt-nodejs16-nodejs_16.20.2-9_amd64.deb
    sha:a4c18db96914a2ca7663babc3d2858d36ae774b0
  • alt-nodejs16-nodejs-devel_16.20.2-9_amd64.deb
    sha:3116eb82ddedaf0f64c39e530a4154c09fad8f2e
  • alt-nodejs16-npm_8.19.4-16.20.2.9_amd64.deb
    sha:5fdd0217ff44b4708d92fedd1232b3392618d660
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.