Release date:
2025-11-21 12:00:56 UTC
Description:
* SECURITY UPDATE: Node.js policy integrity check bypass vulnerability
- debian/patches/CVE-2023-38552.patch: use tamper-proof integrity check
to prevent forged checksums and tampering with Hash class internals
in the policy mechanism
- CVE-2023-38552
Updated packages:
-
alt-nodejs16-docs_16.20.2-3_amd64.deb
sha:f8963ede0efea8e397c0cf1a6728bc78961d9f6c
-
alt-nodejs16-nodejs_16.20.2-3_amd64.deb
sha:f756da8b95f0896fe5656bcd8f019694268626de
-
alt-nodejs16-nodejs-devel_16.20.2-3_amd64.deb
sha:5cdd3bc00cac812102e416467a6b7be8eac87eeb
-
alt-nodejs16-npm_8.19.4-16.20.2.3_amd64.deb
sha:70f7dbba14c4cd6cd58d3c660bc8da680b5686bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
