[CLSA-2025:1765547032] Fix CVE(s): CVE-2024-22019
Type:
security
Severity:
Important
Release date:
2025-12-12 13:43:55 UTC
Description:
* SECURITY UPDATE: Node.js SignTraits::DeriveBits() remote crash vulnerability - debian/patches/CVE-2024-22019.patch: fix improper exception handling in SignTraits::DeriveBits() that could lead to remote denial of service (process crash) when malformed input is processed - CVE-2024-22019
Updated packages:
  • alt-nodejs12-docs_12.22.12-10_amd64.deb
    sha:77d6141bf60ead895e72ddbc93409404b0a1340c
  • alt-nodejs12-nodejs_12.22.12-10_amd64.deb
    sha:d390a011daf590dbd7b05ef51fa8c915c61c7f84
  • alt-nodejs12-nodejs-devel_12.22.12-10_amd64.deb
    sha:f92726f89e588a016c58f4036f8df5df4b72e14e
  • alt-nodejs12-npm_6.14.16-12.22.12.10_amd64.deb
    sha:666fd73984ac54031c3aa5d8dbdebff11701f259
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.