[CLSA-2025:1764713429] alt-nodejs12-nodejs: Fix of CVE-2022-32212
Type:
security
Severity:
Important
Release date:
2025-12-02 22:10:34 UTC
Description:
- CVE-2022-32212: fix IPv4 validation in inspector_socket to properly validate IP addresses and reject non-routable IPs (0.0.0.0/8), replace vulnerable dot-counting parser with proper octet validation, add tests
Updated packages:
  • alt-nodejs12-nodejs-12.22.12-7.el9.x86_64.rpm
    sha:f6e8df0dccfd0315b2caca94e76bb733b6bca8c0a3fe54b5a6d269239c72c01d
  • alt-nodejs12-nodejs-devel-12.22.12-7.el9.x86_64.rpm
    sha:7f85a2848adb1797049420eff6071ab623502cc5730807d4784848f646b69880
  • alt-nodejs12-nodejs-docs-12.22.12-7.el9.noarch.rpm
    sha:27e3ca6137892de04c0e4d6f9565491d93c28f4a40aeb55cf0014ea062ee447e
  • alt-nodejs12-npm-12.22.12-7.el9.x86_64.rpm
    sha:b45ea8c023e2ea42b357b37392e288f87853704fd2ac519a68fee19c545eb8c2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.