Threats Tagged 'cve-2025-23165'

A security update for Node.js 20 on Red Hat Enterprise Linux 8 addresses multiple vulnerabilities including a remote crash issue via SignTraits::DeriveBits() (CVE-2025-23166). The update is rated as important by Red Hat Product Security. The advisory covers Red Hat Enterprise Linux 8 on multiple architectures and provides fixes for three CVEs. No CVSS score is provided in the advisory. The update is available and recommended to remediate the identified issues.

A security update for Node.js 22 on Red Hat Enterprise Linux 8 addresses a vulnerability identified as CVE-2025-23166, which allows a remote crash via the SignTraits::DeriveBits() function. This vulnerability is rated as having an important security impact by Red Hat Product Security. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS score is provided, but the severity is considered high. The update rebases Node.js 22 to the latest release to mitigate this issue. No known exploits are reported in the wild at this time.

A security update for Node.js 22 on Red Hat Enterprise Linux 10 addresses a vulnerability that could cause a remote crash via the SignTraits::DeriveBits() function. The issue is tracked as CVE-2025-23166 and is rated with a high severity by Red Hat Product Security. The update is available for multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisory references CVE-2025-23165 and CVE-2025-23166, with remediation provided through updated packages. No CVSS score is provided in the advisory.

A security update for Node.js 20 on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including a remote crash issue via SignTraits::DeriveBits() (CVE-2025-23166). The update is rated as important by Red Hat Product Security and affects various architectures and extended update support versions of Red Hat Enterprise Linux 9. A patch is available to remediate these issues.