Stay Secure with the Latest Linux Advisories

security advisorymemory leaknodejs

Mageia 9: MGASA-2025-0041 moderate: nodejs memory leak and bypass issues

Worker permission bypass via InternalWorker leak in diagnostics. (CVE-2025-23083) GOAWAY HTTP/2 frames cause memory leak outside heap. (CVE-2025-23085) References: . MGASA-2025-0041 - Updated nodejs packages fix security vulnerabilities Publication date: 07 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0041.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-23083, CVE-2025-23085 Worker permission bypass via InternalWorker leak in diagnostics. (CVE-2025-23083) GOAWAY HTTP/2 frames cause memory leak outside heap. (CVE-2025-23085) References: - https://bugs.mageia.org/show_bug.cgi?id=33947 - https://nodejs.org/en/blog/vulnerability/january-2025-security-releases - https://www.openwall.com/lists/oss-security/2025/01/21/5 - https://www.cve.org/CVERecord?id=CVE-2025-23083 - https://www.cve.org/CVERecord?id=CVE-2025-23085 SRPMS: - 9/core/nodejs-22.13.1-2.mga9 . Mageia has released updates for nodejs packages, addressing several security vulnerabilities such as memory leaks and unauthorized worker access. Read further for details.. nodejs security, mageia updates, worker bypass, memory leak fixes. . LinuxSecurity.com Team

Feb 07, 2025 Mageia