[CLSA-2026:1770889853] alt-nodejs12-nodejs: Fix of CVE-2025-55131
Type:
security
Severity:
Important
Release date:
2026-02-12 09:50:57 UTC
Description:
- CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle mechanism that could expose uninitialized memory when using vm module with timeout options, preventing potential information disclosure
Updated packages:
  • alt-nodejs12-nodejs-12.22.12-16.el9.x86_64.rpm
    sha:9ac88664b327bb9189e2fb553c660616f7da6e065b0d14d7ab9dbcedf133546f
  • alt-nodejs12-nodejs-devel-12.22.12-16.el9.x86_64.rpm
    sha:143ba3deba189c15dc663631c27ae597420fcaf281a17aa8e69cbfa282a81695
  • alt-nodejs12-nodejs-docs-12.22.12-16.el9.noarch.rpm
    sha:c3e337fb4cb044192ce545b24108e6600e2ef414d491b09a2c01d8e587b72312
  • alt-nodejs12-npm-6.14.16-12.22.12.16.el9.x86_64.rpm
    sha:c1ccde1362265bce8dfe4c2ee855b45f255070c02628b87b14503c723357824a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.