[CLSA-2026:1770889462] Fix CVE(s): CVE-2025-55131
Type:
security
Severity:
Important
Release date:
2026-02-12 09:44:26 UTC
Description:
* SECURITY UPDATE: Node.js buffer allocation race condition vulnerability - debian/patches/CVE-2025-55131.patch: refactor unsafe buffer creation to remove zero-fill toggle mechanism that could expose uninitialized memory when using vm module with timeout options - CVE-2025-55131
Updated packages:
  • alt-nodejs12-docs_12.22.12-16_amd64.deb
    sha:c5c5b11c2c03bf337f6eb6a8aa48ae6722c92d7e
  • alt-nodejs12-nodejs_12.22.12-16_amd64.deb
    sha:3b70dd03642304dd88596107c73841e68119b786
  • alt-nodejs12-nodejs-devel_12.22.12-16_amd64.deb
    sha:7c2ab39961feb602247d34b935683b89ae8e0942
  • alt-nodejs12-npm_6.14.16-12.22.12.16_amd64.deb
    sha:0c8f40472c9195da5703e7c411b3eb60d3c6f91c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.