Advisory: CLSA-2025:1764865570
OS: Ubuntu 18.04
Public date: 2025-12-04 16:26:12.870724
Project: nodejs
Version: 14.21.3-11
Errata link: https://errata.tuxcare.com/els_alt_nodejs/ubuntu18.04/CLSA-2025-1764865570.html
* SECURITY UPDATE: Marvin Attack vulnerability in Node.js – debian/patches/CVE-2023-46809.patch: fixes a timing‑side‑channel flaw in the RSA PKCS#1 v1.5 decryption logic, preventing a Marvin‑style padding‑oracle attack that could allow recovery of sensitive data. – CVE-2023-46809
Update command: apt-get update apt-get --only-upgrade install alt-nodejs*
alt-nodejs14-docs_14.21.3-11_amd64.deb alt-nodejs14-nodejs_14.21.3-11_amd64.deb alt-nodejs14-nodejs-devel_14.21.3-11_amd64.deb alt-nodejs14-npm_6.14.18-14.21.3.11_amd64.deb