Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

SUSE Nodejs20 Important Security Update 2026-0457-1 CVE-2025-55130

suse
Calendar Grey February 12, 2026
Dist Suse Esm H88
Critical security update for nodejs20 addresses seven important issues. Install patch for SUSE promptly to maintain security.
An update that solves seven vulnerabilities can now be installed.

Summary

## This update for nodejs20 fixes the following issues: * Update to 20.20.0: * CVE-2026-22036: Updated undici to 6.23.0 (bsc#1256848) * CVE-2025-59465: Add TLSSocket default error handler (bsc#1256573) * CVE-2025-55132: Disable futimes when permission model is enabled (bsc#1256571) * CVE-2025-55130: Require full read and write to symlink APIs (bsc#1256569) * CVE-2025-59466: Rethrow stack overflow exceptions in async_hooks (bsc#1256574) * CVE-2025-55131: Refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570) * CVE-2026-21637: Route callback exceptions through error handlers (bsc#1256576) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

* bsc#1256569

* bsc#1256570

* bsc#1256571

* bsc#1256573

* bsc#1256574

* bsc#1256576

* bsc#1256848

Cross-

* CVE-2025-55130

* CVE-2025-55131

* CVE-2025-55132

* CVE-2025-59465

* CVE-2025-59466

* CVE-2026-21637

* CVE-2026-22036

CVSS scores:

* CVE-2025-55130 ( SUSE ): 9.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55130 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-55130 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

* CVE-2025-55130 ( NVD ): 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

* CVE-2025-55131 ( SUSE ): 9.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55131 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:0457-1
Release Date: 2026-02-11T22:21:24Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here