Release date:
2025-11-21 13:40:20 UTC
Description:
* SECURITY UPDATE: Node.js policy integrity check bypass vulnerability
- debian/patches/CVE-2023-38552.patch: use tamper-proof integrity check
to prevent forged checksums and tampering with Hash class internals
in the policy mechanism
- CVE-2023-38552
Updated packages:
-
alt-nodejs16-docs_16.20.2-3_amd64.deb
sha:8d0ad356b498685b14c15e12d84dea2f2ecbe10d
-
alt-nodejs16-nodejs_16.20.2-3_amd64.deb
sha:fdf6e2ad6201564cf1a1ad842201dec1ee3aa50d
-
alt-nodejs16-nodejs-devel_16.20.2-3_amd64.deb
sha:213cbfc85c9abef5815e915d06288d4e2fc98d38
-
alt-nodejs16-npm_8.19.4-16.20.2.3_amd64.deb
sha:2e296cfe7234e91cb3d22b8a5c061b074330a88c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
