RHSA-2026:2781

csafDEsuse_csaf

security update for nodejs

Advisory ansehen veröffentlicht 2026-02-17

security update for nodejs

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-21637UShigh7.5—
A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions t…
CVE-2025-59466UShigh7.5—
We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reachin…
CVE-2025-59465US——
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely clos…
CVE-2025-55132USmedium5.3OT erhöht—
A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utime…
CVE-2025-55131US——
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific tim…
CVE-2025-55130UScritical9.1Exploit
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (60)

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-devel-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-docs-1:24.13.0-1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-full-i18n-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-libs-1:24.13.0-1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-nodemon-0:3.0.3-3.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennodejs-packaging-bundler-0:2021.06-6.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobennpm-1:11.6.2-1.24.13.0.1.module+el9.7.0+23894+c8377628.noarch::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenv8-13.6-devel-3:13.6.233.17-1.24.13.0.1.module+el9.7.0+23894+c8377628.x86_64::nodejs:24 as component of SUSE Liberty Linux 9

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan