[ALSA-2025:8514] Important: nodejs:20 security update
Type:
security
Severity:
important
Release date:
2025-06-05
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-full-i18n-20.19.2-1.module_el8.10.0+4007+01f7d99b.aarch64.rpm 594247cdeb7ecadc2aa2755676e4ead455ce7149f7233a7d23167d77bb20a271
aarch64 npm-10.8.2-1.20.19.2.1.module_el8.10.0+4007+01f7d99b.aarch64.rpm ca8bab7d68206a2f0ccb587043a2c67d75642bcc53ce59a70e84004d22eaa4ab
aarch64 nodejs-devel-20.19.2-1.module_el8.10.0+4007+01f7d99b.aarch64.rpm fc952a97f6544c27a1a3dfb90daae1e6f505bcc9987e8f190b0f212a2a877b0d
aarch64 nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.aarch64.rpm ff7fb3370aa7e101df77e5dd81700b1096f7a3b5c75069a8be000fa4e4643bf3
noarch nodejs-docs-20.19.2-1.module_el8.10.0+4007+01f7d99b.noarch.rpm 155eb7974e04d3be9fa275b42f2964547769f10a9f54ea8e5064b3f73759af7e
noarch nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.noarch.rpm 2a3ac075981f56758aac0aa08cc55d71f2ca6610e6bc965f306dd6b9a8db442a
noarch nodejs-packaging-2021.06-4.module_el8.10.0+3987+dbda4426.noarch.rpm 6a479cd49298404b833454d884d50275fdbaebeba78691f37251b420f9b76d71
noarch nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3958+472a6467.noarch.rpm af48fab85994e826d5a0ca5a05df770fb8e54b94556401a5c6a6844f4c6dce64
ppc64le nodejs-devel-20.19.2-1.module_el8.10.0+4007+01f7d99b.ppc64le.rpm 5da56146ac393d8f0d3b9c32ae4dd913a9480b1869c9273dc9340db389603429
ppc64le npm-10.8.2-1.20.19.2.1.module_el8.10.0+4007+01f7d99b.ppc64le.rpm 98022c0a6570f9fc6c96623af0b2cdc09b6da1927092f6a0d02c7df1ba919eec
ppc64le nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.ppc64le.rpm a25ffb4ffa6f6b26ad498d327a8b6dadf90e74d0f7a5ba162684a25018045f12
ppc64le nodejs-full-i18n-20.19.2-1.module_el8.10.0+4007+01f7d99b.ppc64le.rpm b044a635257b0fcb44671609d22e7e50d76bf77bff51db7e96cab805dcf4de47
s390x nodejs-devel-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm 2935477db4be3e28b23787f98755f0626b138673a4c2849029ad70efa89e4a6d
s390x nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm 351ba24e12a98b90996a74fd696608ee9e1d8936ca24a7afb5cfa2ceab9b1c32
s390x npm-10.8.2-1.20.19.2.1.module_el8.10.0+4007+01f7d99b.s390x.rpm e2e74c0eaaa2d851f6dd8965610d0c0be878ac4d65c0aa195f16cf29c860fb21
s390x nodejs-full-i18n-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm ff2ac8d640e6b83c741e8fea356523e91e2c90e76a87adeda8e6417e401c5e77
x86_64 npm-10.8.2-1.20.19.2.1.module_el8.10.0+4007+01f7d99b.x86_64.rpm 043960c2f20e22b35d8eb63438258de3e26ad6a4c519dea20b658b7ec7b909d2
x86_64 nodejs-full-i18n-20.19.2-1.module_el8.10.0+4007+01f7d99b.x86_64.rpm 4da30baa75c5767e60861cb193d76f7e8cfccbc75cc9c019fe5c1776da30bcd5
x86_64 nodejs-devel-20.19.2-1.module_el8.10.0+4007+01f7d99b.x86_64.rpm 866549545b343eeeae091e1fac4615c9c24271f74f385c9fdeb1c6f983e77bbc
x86_64 nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.x86_64.rpm e6e2e27b74e659ca086c002d97dd2d69e14b33345c28c1547de3924222d7efbc
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.