Release Info

Advisory: CLSA-2025:1759509277

OS: EL 9

Public date: 2025-10-03 16:34:39.124379

Project: nodejs

Version: 16.20.2-1.el9.tuxcare.els2

Errata link: https://errata.tuxcare.com/els_alt_nodejs/el9/CLSA-2025-1759509277.html

Changelog

- CVE-2025-23085: fix HTTP/2 memory leak on premature socket close or invalid header (ERR_PROTO)

Update

Update command: yum update alt-nodejs*

Packages list

alt-nodejs16-nodejs-16.20.2-1.el9.tuxcare.els2.x86_64.rpm alt-nodejs16-nodejs-devel-16.20.2-1.el9.tuxcare.els2.x86_64.rpm alt-nodejs16-nodejs-docs-16.20.2-1.el9.tuxcare.els2.noarch.rpm alt-nodejs16-npm-8.19.4-16.20.2.1.el9.x86_64.rpm

CVEs

CVE-2025-23085
CVE-2024-27983