RHSA-2025:4461: Moderate: nodejs:20 security update
Published May 5, 2025
·Updated
Moderate: nodejs:20 security update
Other sources
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): c-ares: c-ares has a use-after-free in readanswers() (CVE-2025-31498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
34 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
redhat/nodejs<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-nodemon<3.0.1-1.module+el8.10.0+22904+d0fedeff
3.0.1-1.module+el8.10.0+22904+d0fedeff
redhat/nodejs-packaging<2021.06-4.module+el8.10.0+22904+d0fedeff
2021.06-4.module+el8.10.0+22904+d0fedeff
redhat/nodejs-docs<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-nodemon<3.0.1-1.module+el8.10.0+22904+d0fedeff
3.0.1-1.module+el8.10.0+22904+d0fedeff
redhat/nodejs-packaging<2021.06-4.module+el8.10.0+22904+d0fedeff
2021.06-4.module+el8.10.0+22904+d0fedeff
redhat/nodejs-packaging-bundler<2021.06-4.module+el8.10.0+22904+d0fedeff
2021.06-4.module+el8.10.0+22904+d0fedeff
redhat/nodejs<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-debuginfo<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-debugsource<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-devel<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-full-i18n<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/npm<10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
redhat/nodejs-debuginfo<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-debugsource<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-devel<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-full-i18n<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/npm<10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
redhat/nodejs<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-debuginfo<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-debugsource<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-devel<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/nodejs-full-i18n<20.19.1-1.module+el8.10.0+23054+5431297f
20.19.1-1.module+el8.10.0+23054+5431297f
redhat/npm<10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f
redhat/nodejs<20.19.1-1.module+el8.10.0+23054+5431297f.aa
20.19.1-1.module+el8.10.0+23054+5431297f.aa
redhat/nodejs-debuginfo<20.19.1-1.module+el8.10.0+23054+5431297f.aa
20.19.1-1.module+el8.10.0+23054+5431297f.aa
redhat/nodejs-debugsource<20.19.1-1.module+el8.10.0+23054+5431297f.aa
20.19.1-1.module+el8.10.0+23054+5431297f.aa
redhat/nodejs-devel<20.19.1-1.module+el8.10.0+23054+5431297f.aa
20.19.1-1.module+el8.10.0+23054+5431297f.aa
redhat/nodejs-full-i18n<20.19.1-1.module+el8.10.0+23054+5431297f.aa
20.19.1-1.module+el8.10.0+23054+5431297f.aa
redhat/npm<10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f.aa
10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f.aa
Remediation
Event History
May 5, 2025
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2025:4461?
The severity of RHSA-2025:4461 is classified as moderate.
2
How do I fix RHSA-2025:4461?
To fix RHSA-2025:4461, update the affected packages to their remedial versions specified in the advisory.
3
Which packages are affected by RHSA-2025:4461?
Affected packages in RHSA-2025:4461 include nodejs, nodejs-nodemon, and nodejs-packaging among others.
4
What vulnerability is addressed in RHSA-2025:4461?
RHSA-2025:4461 addresses a use-after-free vulnerability in c-ares as identified by CVE-2025-31498.
5
What are the recommended package versions for RHSA-2025:4461?
The recommended package version for nodejs is 20.19.1-1.module+el8.10.0+23054+5431297f.