mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-17 12:53:45 -09:00
eb73d4662e
Fixes the following security vulnerabilities: Worker permission bypass via InternalWorker leak in diagnostics (CVE-2025-23083) - (high) With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23. GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) - (medium) A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x. For more details, see the announcement: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases Update the LICENSE hash for a an addition of the (MIT licensed) nlohmann JSON library:27bcd103e7Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr> (cherry picked from commit15891236db) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
9 lines
686 B
Plaintext
9 lines
686 B
Plaintext
# From https://nodejs.org/dist/v22.13.1/SHASUMS256.txt.asc
|
|
sha256 0a237c413ccbab920640438bf6e1a32edb19845bdc21f0e1cd5b91545ce1c126 node-v22.13.1-linux-arm64.tar.xz
|
|
sha256 f2be8dca2a7a518f6d187aa4b18abbeeafd71096a6d95f73f4d8bc0f8d2394ea node-v22.13.1-linux-armv7l.tar.xz
|
|
sha256 377a7a1ea66f39251e1657f419e9404d526fcca9910620d0ecf0a870c6308f6b node-v22.13.1-linux-ppc64le.tar.xz
|
|
sha256 0d2a5af33c7deab5555c8309cd3f373446fe1526c1b95833935ab3f019733b3b node-v22.13.1-linux-x64.tar.xz
|
|
sha256 cfce282119390f7e0c2220410924428e90dadcb2df1744c0c4a0e7baae387cc2 node-v22.13.1.tar.xz
|
|
# Locally calculated
|
|
sha256 9d72cce9b104ecb67feb8af38618511685190ae5a119cc0488ecae66b221000d LICENSE
|