[CLSA-2025:1765547213] Fix CVE(s): CVE-2024-22019
Type:
security
Severity:
Important
Release date:
2025-12-12 13:46:57 UTC
Description:
* SECURITY UPDATE: Node.js SignTraits::DeriveBits() remote crash vulnerability - debian/patches/CVE-2024-22019.patch: fix improper exception handling in SignTraits::DeriveBits() that could lead to remote denial of service (process crash) when malformed input is processed - CVE-2024-22019
Updated packages:
  • alt-nodejs12-docs_12.22.12-10_amd64.deb
    sha:ac1e7590ef1303d30987930e66e46228f73ebe6a
  • alt-nodejs12-nodejs_12.22.12-10_amd64.deb
    sha:107156aaa4bd45738ffa9fcff0d280b57512add8
  • alt-nodejs12-nodejs-devel_12.22.12-10_amd64.deb
    sha:108b8e3a014df28c465e9fcff5caeee307099a98
  • alt-nodejs12-npm_6.14.16-12.22.12.10_amd64.deb
    sha:241747662055230975a2826647b471fe66924ab5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.