SUSE-SU-2025:02039-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 20 Jun 2025, 09:40
Last modified:23 Mar 2026, 04:46

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Jun 2025, 09:40
Published
Vulnerability first disclosed
23 Mar 2026, 04:46
Last Modified
Vulnerability information updated

Description

Security update for nodejs20 This update for nodejs20 fixes the following issues: Update to 20.19.2: - CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218). - CVE-2025-23167: improper HTTP header block termination in llhttp (bsc#1243220). - CVE-2025-23165: add missing call to uv_fs_req_cleanup (bsc#1243217). Other bugfixes: - Build with PIE (bsc#1239949)

Affected Systems

  • suse•nodejs20&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

    < 20.19.2-150500.11.21.1

  • suse•nodejs20&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

    < 20.19.2-150500.11.21.1

  • suse•nodejs20&distro=SUSE Linux Enterprise Server 15 SP5-LTSS

    < 20.19.2-150500.11.21.1

  • suse•nodejs20&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5

    < 20.19.2-150500.11.21.1

References (8)