SUSE-SU-2025:02045-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 20 Jun 2025, 11:04
Last modified:23 Mar 2026, 04:49

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Jun 2025, 11:04
Published
Vulnerability first disclosed
23 Mar 2026, 04:49
Last Modified
Vulnerability information updated

Description

Security update for nodejs20 This update for nodejs20 fixes the following issues: Update to 20.19.2: - CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218). - CVE-2025-23167: improper HTTP header block termination in llhttp (bsc#1243220). - CVE-2025-23165: add missing call to uv_fs_req_cleanup (bsc#1243217). Other bugfixes: - Build with PIE (bsc#1239949)

Affected Systems

  • opensuse•nodejs20&distro=openSUSE Leap 15.6

    < 20.19.2-150600.3.12.1

  • suse•nodejs20&distro=SUSE Linux Enterprise Module for Web and Scripting 15 SP6

    < 20.19.2-150600.3.12.1

References (8)