Release Info

Advisory: CLSA-2025:1756932817

OS: AlmaLinux 9.2 ESU

Public date: 2025-09-03 20:53:39.453922

Project: nodejs

Version: 16.20.2-3.el9_2.tuxcare.els5

Errata link: https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1756932817.html

Changelog

- CVE-2024-22020: forbid data URLs in network imports to mitigate security flaw allowing bypass of network import restrictions

Update

Update command: dnf update nodejs*

Packages list

nodejs-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm nodejs-devel-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm nodejs-docs-16.20.2-3.el9_2.tuxcare.els5.noarch.rpm nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm nodejs-libs-16.20.2-3.el9_2.tuxcare.els5.i686.rpm nodejs-libs-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm

CVEs

CVE-2023-46809
CVE-2024-22020