Release Info

Advisory: CLSA-2026:1771234939

OS: Debian 13

Public date: 2026-02-16 09:42:21.773975

Project: nodejs

Version: 12.22.12-17

Errata link: https://errata.tuxcare.com/els_alt_nodejs/debian13/CLSA-2026-1771234939.html

Changelog

* SECURITY UPDATE: Stack overflow exception handling in async_hooks - debian/patches/CVE-2025-59466.patch: rethrow stack overflow exceptions in async_hooks instead of calling FatalException - CVE-2025-59466 * SECURITY UPDATE: TLS callback exception handling vulnerability - debian/patches/CVE-2026-21637.patch: route pskCallback exceptions through error handlers to prevent remote attackers from crashing TLS servers - CVE-2026-21637

Update

Update command: apt-get update apt-get --only-upgrade install alt-nodejs*

Packages list

alt-nodejs12-docs_12.22.12-17_amd64.deb alt-nodejs12-nodejs_12.22.12-17_amd64.deb alt-nodejs12-nodejs-devel_12.22.12-17_amd64.deb alt-nodejs12-npm_6.14.16-12.22.12.17_amd64.deb

CVEs

CVE-2026-21637
CVE-2025-59466