[CLSA-2025:1765547568] Fix CVE(s): CVE-2024-22019
Type:
security
Severity:
Important
Release date:
2025-12-12 13:52:52 UTC
Description:
* SECURITY UPDATE: Node.js SignTraits::DeriveBits() remote crash vulnerability - debian/patches/CVE-2024-22019.patch: fix improper exception handling in SignTraits::DeriveBits() that could lead to remote denial of service (process crash) when malformed input is processed - CVE-2024-22019
Updated packages:
  • alt-nodejs12-docs_12.22.12-10_amd64.deb
    sha:51159f7d7482a8cb10bf9214f4a7bd24f94ae3ae
  • alt-nodejs12-nodejs_12.22.12-10_amd64.deb
    sha:a8edf851753660fe974fdaf77825ccb8f7906ecb
  • alt-nodejs12-nodejs-devel_12.22.12-10_amd64.deb
    sha:d316507314dd36e083c766f8971f74bab24d4994
  • alt-nodejs12-npm_6.14.16-12.22.12.10_amd64.deb
    sha:45fc96a257b4f0c7ce317966e2c4d7c70d5f6ed6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.