[CLSA-2026:1770708401] alt-nodejs14-nodejs: Fix of CVE-2025-55131
Type:
security
Severity:
Important
Release date:
2026-02-10 07:26:44 UTC
Description:
- CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle mechanism that could expose uninitialized memory when using vm module with timeout options, preventing potential information disclosure
Updated packages:
  • alt-nodejs14-nodejs-14.21.3-18.el9.x86_64.rpm
    sha:71d883025cccea934c5b82298aeab16186620f7495a0b234c9d9eca688bb8c85
  • alt-nodejs14-nodejs-devel-14.21.3-18.el9.x86_64.rpm
    sha:34bf0e5a564948589567c4709a517d5e5da63768358a9d10c5fd49c779f9abd5
  • alt-nodejs14-nodejs-docs-14.21.3-18.el9.noarch.rpm
    sha:b854ceff615d39dce958be9d2a88e0ce97145842ee3c0efdf4039c07cbc78f5e
  • alt-nodejs14-npm-6.14.18-14.21.3.18.el9.x86_64.rpm
    sha:20b4a6ee1853a916a8d519f2cbbd1a564f9757041860fdd07e86a3a19456fb55
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.