Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 42: FEDORA-2025-d0dc563a3a moderate: nodejs22 use-after-free

fedora
Calendar Grey May 11, 2025
Dist Fedora Esm H88
Fedora 42 now features an update that addresses a critical use-after-free vulnerability in nodejs22, specifically version 22.15.0, along with additional security improvements.
Update to version 22.15.0

Summary

Node.js is a platform built on Chrome's JavaScript runtime \

for easily building fast, scalable network applications. \

Node.js uses an event-driven, non-blocking I/O model that \

makes it lightweight and efficient, perfect for data-intensive \

real-time applications that run across distributed devices.}

Update Information:

Update to version 22.15.0

Topics%20covered

Topics Covered

security advisory update Fedora use-after-free JavaScript runtime nodejs22

Change Log

* Wed Apr 30 2025 tjuhasz - 1:22.15.0-2 - Fix test run by adding library path * Mon Apr 28 2025 tjuhasz - 1:22.15.0-1 - Update to version 22.15.0 (rhbz#2361835) * Wed Apr 23 2025 tjuhasz - 1:22.14.0-9 - Remove unused functions from spec file and template * Tue Apr 15 2025 Tomas Juhasz - 1:22.14.0-8 - RPMAUTOSPEC: unresolvable merge

References


[ 1 ] Bug #2358568 - CVE-2025-31498 nodejs22: c-ares has a use-after-free in read_answers() [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2358568 [ 2 ] Bug #2358571 - CVE-2025-31498 nodejs22: c-ares has a use-after-free in read_answers() [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2358571 [ 3 ] Bug #2361835 - nodejs22-22.15.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2361835

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d0dc563a3a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: nodejs22
Product: Fedora 42
Version: 22.15.0
Release: 2.fc42
URL: https://nodejs.org/en/
Summary: JavaScript runtime

Topics%20covered

Topics Covered

security advisory update Fedora use-after-free JavaScript runtime nodejs22

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here