Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Mageia 9: MGASA-2025-0041 moderate: nodejs memory leak and bypass issues

mageia
Calendar Grey February 7, 2025
Scroller Mageia
Mageia has released updates for nodejs packages, addressing several security vulnerabilities such as memory leaks and unauthorized worker access. Read further for details.
Worker permission bypass via InternalWorker leak in diagnostics

Summary

Worker permission bypass via InternalWorker leak in diagnostics. (CVE-2025-23083) GOAWAY HTTP/2 frames cause memory leak outside heap. (CVE-2025-23085)

References

- https://bugs.mageia.org/show_bug.cgi?id=33947

- https://nodejs.org/en/blog/vulnerability/january-2025-security-releases

- https://www.openwall.com/lists/oss-security/2025/01/21/5

- https://www.cve.org/CVERecord?id=CVE-2025-23083

- https://www.cve.org/CVERecord?id=CVE-2025-23085

Topics%20covered

Topics Covered

security advisory memory leak nodejs Mageia diagnostics worker bypass

Resolution

SRPMS

- 9/core/nodejs-22.13.1-2.mga9

Publication date: 07 Feb 2025
URL: https://advisories.mageia.org/MGASA-2025-0041.html
Type: security
CVE: CVE-2025-23083, CVE-2025-23085

Topics%20covered

Topics Covered

security advisory memory leak nodejs Mageia diagnostics worker bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.