Release date:
2025-12-10 12:04:48 UTC
Description:
* SECURITY UPDATE: Node.js policy integrity check bypass vulnerability
- debian/patches/CVE-2023-38552.patch: use tamper-proof integrity check
function to prevent tampering with Hash class internals in policy
mechanism
- CVE-2023-38552
Updated packages:
-
alt-nodejs12-docs_12.22.12-9_amd64.deb
sha:e7b0300d28d64cf6b16a52d22dfc87d785fc2136
-
alt-nodejs12-nodejs_12.22.12-9_amd64.deb
sha:e259c8beca1b98e3c902cf22b5dd0bbfecbe5c5c
-
alt-nodejs12-nodejs-devel_12.22.12-9_amd64.deb
sha:f4b778eb96b369b4560512ddc618ea2994dcc302
-
alt-nodejs12-npm_6.14.16-12.22.12.9_amd64.deb
sha:c8eed5d5d71888e72b6e8fb084cbf1fef1b969c8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.