stable

nodejs24-24.13.0-4.fc43

FEDORA-2026-5cd409edfa created by tjuhasz 6 months ago for Fedora 43

Update to version 24.13.0

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-5cd409edfa

This update has been submitted for testing by tjuhasz.

6 months ago

This update's test gating status has been changed to 'waiting'.

6 months ago

tjuhasz edited this update.

6 months ago

This update's test gating status has been changed to 'failed'.

6 months ago

This update has been pushed to testing.

6 months ago

tjuhasz edited this update.

6 months ago

tjuhasz edited this update.

6 months ago

This update's test gating status has been changed to 'waiting'.

6 months ago

This update's test gating status has been changed to 'passed'.

6 months ago
karma
BZ#2421027 nodejs24-24.13.0 is available
BZ#2430300 CVE-2026-22036 nodejs24: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion [fedora-43]
BZ#2431456 CVE-2025-55132 nodejs24: Nodejs filesystem permissions bypass [fedora-43]
BZ#2431463 CVE-2026-21637 nodejs24: Nodejs denial of service [fedora-43]
BZ#2431470 CVE-2025-59466 nodejs24: Nodejs denial of service [fedora-43]
BZ#2431477 CVE-2025-59464 nodejs24: Nodejs memory leak [fedora-43]
BZ#2431496 CVE-2025-59465 nodejs24: Nodejs denial of service [fedora-43]
BZ#2431497 CVE-2025-55130 nodejs24: Nodejs file permissions bypass [fedora-43]
BZ#2431498 CVE-2025-55131 nodejs24: Nodejs uninitialized memory exposure [fedora-43]

This update can be pushed to stable now if the maintainer wishes

6 months ago
User Icon nathan95 commented & provided feedback 6 months ago
karma

works for me

This update has been submitted for stable by bodhi.

6 months ago

This update has been pushed to stable.

6 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
high
Karma
2
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
6 months ago
in testing
6 months ago
in stable
6 months ago
modified
6 months ago
approved
6 months ago
BZ#2421027 nodejs24-24.13.0 is available
0
1
BZ#2430300 CVE-2026-22036 nodejs24: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion [fedora-43]
0
1
BZ#2431456 CVE-2025-55132 nodejs24: Nodejs filesystem permissions bypass [fedora-43]
0
1
BZ#2431463 CVE-2026-21637 nodejs24: Nodejs denial of service [fedora-43]
0
1
BZ#2431470 CVE-2025-59466 nodejs24: Nodejs denial of service [fedora-43]
0
1
BZ#2431477 CVE-2025-59464 nodejs24: Nodejs memory leak [fedora-43]
0
1
BZ#2431496 CVE-2025-59465 nodejs24: Nodejs denial of service [fedora-43]
0
1
BZ#2431497 CVE-2025-55130 nodejs24: Nodejs file permissions bypass [fedora-43]
0
1
BZ#2431498 CVE-2025-55131 nodejs24: Nodejs uninitialized memory exposure [fedora-43]
0
1

Automated Test Results