[CLSA-2025:1765546848] Fix CVE(s): CVE-2024-22019
Type:
security
Severity:
Important
Release date:
2025-12-12 13:40:52 UTC
Description:
* SECURITY UPDATE: Node.js SignTraits::DeriveBits() remote crash vulnerability - debian/patches/CVE-2024-22019.patch: fix improper exception handling in SignTraits::DeriveBits() that could lead to remote denial of service (process crash) when malformed input is processed - CVE-2024-22019
Updated packages:
  • alt-nodejs12-docs_12.22.12-10_amd64.deb
    sha:7250c8b3da848a1a9655447956e856010cb35529
  • alt-nodejs12-nodejs_12.22.12-10_amd64.deb
    sha:3d1184e7d918c325e363156c37cf3553528784eb
  • alt-nodejs12-nodejs-devel_12.22.12-10_amd64.deb
    sha:c4c783e0b7d8a38cdb5173d2d7fbc8d6655b7e66
  • alt-nodejs12-npm_6.14.16-12.22.12.10_amd64.deb
    sha:bdf9bb0cd5c793cfc37d589b2665c1fc17903e79
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.