[CLSA-2025:1765367983] Fix CVE(s): CVE-2023-38552
Type:
security
Severity:
Important
Release date:
2025-12-10 11:59:47 UTC
Description:
* SECURITY UPDATE: Node.js policy integrity check bypass vulnerability - debian/patches/CVE-2023-38552.patch: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism - CVE-2023-38552
Updated packages:
  • alt-nodejs12-docs_12.22.12-9_amd64.deb
    sha:07dc5b7c0cb0a778360efedbefb7df60c6dd03e6
  • alt-nodejs12-nodejs_12.22.12-9_amd64.deb
    sha:a4074a515f7cd220452e83bcb18f07dacc6a0c1d
  • alt-nodejs12-nodejs-devel_12.22.12-9_amd64.deb
    sha:8552d83901dc646ffd4408c93ae68ad7a339728e
  • alt-nodejs12-npm_6.14.16-12.22.12.9_amd64.deb
    sha:f4c0c9e9fe15717e1098dc09fd5f4a4417fb8b6c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.