Release Info

Advisory: CLSA-2025:1759506557

OS: Ubuntu 18.04

Public date: 2025-10-03 15:49:19.761436

Project: nodejs

Version: 18.20.8-1+tuxcare.els1

Errata link: https://errata.tuxcare.com/els_alt_nodejs/ubuntu18.04/CLSA-2025-1759506557.html

Changelog

* SECURITY UPDATE: Node.js SignTraits::DeriveBits() remote crash vulnerability - debian/patches/CVE-2025-23166.patch: fix incorrect ThrowException() call in background thread to prevent process crash - CVE-2025-23166

Update

Update command: apt-get update apt-get --only-upgrade install alt-nodejs*

Packages list

alt-nodejs18-docs_18.20.8-1+tuxcare.els1_amd64.deb alt-nodejs18-nodejs_18.20.8-1+tuxcare.els1_amd64.deb alt-nodejs18-nodejs-devel_18.20.8-1+tuxcare.els1_amd64.deb alt-nodejs18-npm_10.8.2-18.20.8.1_amd64.deb

CVEs

CVE-2025-23166