Update to 24.13.0 security fixes

SHASUMS256.txt

@@ -1,32 +1,32 @@
-31f3d065bb84f069e522e55d0d3035bd364cba5d8a22233ff68005d281e8bb78  node-v24.12.0-aix-ppc64.tar.gz
-24b03834da0c49f8cf1f22dea7da8ccb65dc705c37a10c0622bfd839c904d6f2  node-v24.12.0-arm64.msi
-319f221adc5e44ff0ed57e8a441b2284f02b8dc6fc87b8eb92a6a93643fd8080  node-v24.12.0-darwin-arm64.tar.gz
-4db2a7842267d4d99e35284289b241c43465b08a28ece4fcb6a9460ce7e4c68c  node-v24.12.0-darwin-arm64.tar.xz
-b82ea4c62fd08e250cab59d625e75d77cc5b0a3d60c6698ebee4545c88a169c5  node-v24.12.0-darwin-x64.tar.gz
-1e4d54f706e0a3613d6415ffe2ccdfd4095d3483971dbbaa4ff909fac5fc211c  node-v24.12.0-darwin-x64.tar.xz
-af120bedced0f62cf6506503347e165032b50274383e0dcc6d216c8d32260172  node-v24.12.0-headers.tar.gz
-a432e8935507a98ec0fc4c93b48199e83b4bec5b8db7e0caedf058be0c5631bf  node-v24.12.0-headers.tar.xz
-9b2a2eeb98a8eb37361224e2a1d060300ad2dd143af58dfdb16de785df0f1228  node-v24.12.0-linux-arm64.tar.gz
-a06d42807fb500f7459e5f3fa6cb431447352826ee6f07e14adfeec58a1b3210  node-v24.12.0-linux-arm64.tar.xz
-66ec79b4d64f4109aedf822108715d0b6097118df9159c2f6321477da4ea17aa  node-v24.12.0-linux-ppc64le.tar.gz
-3a18221623530a35c35611786b33cedef8b84b5d4c683b01ba6341b15043bf97  node-v24.12.0-linux-ppc64le.tar.xz
-8dc960a2555db1aa77fd131c25be571b9f7844bc8b278e78732b9f580fe7d580  node-v24.12.0-linux-s390x.tar.gz
-b9038c2c6b51970cd09cc2bee81dd7e0fb7130823d940cec498c4686b204e4ed  node-v24.12.0-linux-s390x.tar.xz
-6159227e0af7d7c3c6bb2fa900452b04a6cb8841a702a79acc613209d70b04d0  node-v24.12.0-linux-x64.tar.gz
-bdebee276e58d0ef5448f3d5ac12c67daa963dd5e0a9bb621a53d1cefbc852fd  node-v24.12.0-linux-x64.tar.xz
-b1659be3795c70073d72f5c3fb5834f080fec445a72e2f30a7796f65d6ba686c  node-v24.12.0.pkg
-ad24a1f29e55c9539228f2c51a032da279188b681c4dc019cced7f82a0fcdd8d  node-v24.12.0.tar.gz
-6d3e891a016b90f6c6a19ea5cbc9c90c57eef9198670ba93f04fa82af02574ae  node-v24.12.0.tar.xz
-52f6d601c145f886434ed42533626571b388d3ad8d98dad16c310bc09a7ed86e  node-v24.12.0-win-arm64.7z
-b05e7e066f813d35ad3cd9c24eedaee074c012ac7e00071297608fdd2e948ae3  node-v24.12.0-win-arm64.zip
-8d41356abf5cb62404f311f131b7937f45aaeda5c15d060dc281c2ece817cdce  node-v24.12.0-win-x64.7z
-9c125f61ae947b52e779095830f9cac267846a043ef7192183c84016aaad2812  node-v24.12.0-win-x64.zip
-e3a50a907b6c71d9f3cb7571980cf3070ec0fadc6fb2a55516d5ff95083990f3  node-v24.12.0-x64.msi
-986eb1e1d19222f7df4798df657bcc114c41c0d11b8344f03a1bf55a20772efc  win-arm64/node.exe
+ac21e9af08a4d54b057d800c03bc95322946952b8daa811cada98bfb66a8ce8f  node-v24.13.0-aix-ppc64.tar.gz
+9ef67a1cc2b64de38bdd6139d7967699915312df37e9b176277631165e39798d  node-v24.13.0-arm64.msi
+d595961e563fcae057d4a0fb992f175a54d97fcc4a14dc2d474d92ddeea3b9f8  node-v24.13.0-darwin-arm64.tar.gz
+c59a517e9147f25c6167426875a571432f1478c1d7ee7ecc10baa46b0d0e8545  node-v24.13.0-darwin-arm64.tar.xz
+6f03c1b48ddbe1b129a6f8038be08e0899f05f17185b4d3e4350180ab669a7f3  node-v24.13.0-darwin-x64.tar.gz
+4ca0a48233f091a2a69ec28dd58e59f394a1b2d4f052b6c6b10f760377fe266f  node-v24.13.0-darwin-x64.tar.xz
+f5589e2b4b962af05381a31d11c3c9b004daf8bd63c95c0e1a406600daa8ae88  node-v24.13.0-headers.tar.gz
+9344eddda6621e46d77b26f1b93db25a52592f9eb199f300440fe3c30802f186  node-v24.13.0-headers.tar.xz
+0f6d40b94c6a2eb6b4c240ffc8b9fd3ada7ab044c177dd413c06e1ef9a63f081  node-v24.13.0-linux-arm64.tar.gz
+aa881151bd0f9f154a0424dd60a72e9ce10672619121658c278a24327ef46831  node-v24.13.0-linux-arm64.tar.xz
+18011930b182a1c5b49d2326191fdba58270bdf7b45b8c7df855ef31931b148a  node-v24.13.0-linux-ppc64le.tar.gz
+babe8c72871c751ed288fc1a1aeb2a95d830f732e43d9e4ab0cf137e3273eb8e  node-v24.13.0-linux-ppc64le.tar.xz
+5744610b624f2e82ae1ca279d8ece7b8ca466437239533d2d033565303bc1d39  node-v24.13.0-linux-s390x.tar.gz
+75f6f780442b7b98a357fd9cf6e383c3d22a8efe9ed4ee1d54ea68ff16889904  node-v24.13.0-linux-s390x.tar.xz
+6223aad1a81f9d1e7b682c59d12e2de233f7b4c37475cd40d1c89c42b737ffa8  node-v24.13.0-linux-x64.tar.gz
+e798599612f4bb71333a3397ab0d095fd62214e115aea45aa858a145fc72d67e  node-v24.13.0-linux-x64.tar.xz
+b62d61eb92a1fdcc3fc4951fc087f206eb6f46d088bd9a6630892f4eb5203d13  node-v24.13.0.pkg
+54cb58921b4ce2831c6690ee823a3d39cfbf2b75f4e556c4c2bde90f3d8fd1ca  node-v24.13.0.tar.gz
+320fe909cbb347dcf516201e4964ef177b8138df9a7f810d0d54950481b3158b  node-v24.13.0.tar.xz
+724fcf1a20ea345cc38fb970044a6f1617a1dc47e477ee5a92fe8b243b95700a  node-v24.13.0-win-arm64.7z
+92b9f9b0c0c123e11e4afc535f0ec19cd987465eea506427553a49971364158a  node-v24.13.0-win-arm64.zip
+04d3619e21c07a84043accbacc73256431c6adbea65d4c026c6eb22ff6fd453a  node-v24.13.0-win-x64.7z
+ca2742695be8de44027d71b3f53a4bdb36009b95575fe1ae6f7f0b5ce091cb88  node-v24.13.0-win-x64.zip
+1a5f0cd914386f3be2fbaf03ad9fff808a588ce50d2e155f338fad5530575f18  node-v24.13.0-x64.msi
+91e25b2ef61ee30a9e6afce0f336b4d55d688c3717244e496fa11d69fc3a1717  win-arm64/node.exe
 afef88b389be8ac30974d2cf69de26001f95f1e9efe1811f2e8467c4cdfe05d0  win-arm64/node.lib
-74b1851395227ee43a7eb08cc98928234a835c23e9652508637e9cba9ada2b1e  win-arm64/node_pdb.7z
-3de5ee60cc482a316aae5ee19ecc9cb78b382b3b1b6b5ab794e0b8b7f905aa67  win-arm64/node_pdb.zip
-2ffe3acc0458fdde999f50d11809bbe7c9b7ef204dcf17094e325d26ace101d8  win-x64/node.exe
+4e3e5e11d6c60e66f65e1292bf524afeb6293f3d96ffdfbbe6756287be307e78  win-arm64/node_pdb.7z
+087c7cf72188ce884288ddcd818f799f76e20ee1a1536d624e3f5baea1313c05  win-arm64/node_pdb.zip
+d14ba95cdce1ef7dc9ad3ac74949ca5db38b27378ee30f30a23cf26f9e875a11  win-x64/node.exe
 be205f2934c17fbd56ce6cdfcfbeb2f6a85061d5141e7a58eba240a8477a12fd  win-x64/node.lib
-f39ab85c97d4df4822e5b38000120daffbf3ffcb35f291d1472a96eac1f3e70b  win-x64/node_pdb.7z
-44e003eba00abbcc93554169979aa466dc78e70bdb6c1bde8552a2b5ca463853  win-x64/node_pdb.zip
+1120267174deb5e7661e5b9b0a291e55c1937155e1dedd85018cb83eb48f466c  win-x64/node_pdb.7z
+e96ce3ea96ff4067f7cbeece8fe11a06f925676e956859a86e7421d325080eb1  win-x64/node_pdb.zip

nodejs24.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Thu Jan 15 14:18:29 UTC 2026 - Adam Majer <adam.majer@suse.de>
+
+- Update to 24.13.0:
+  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
+  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
+  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
+  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
+  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
+  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)
+
 -------------------------------------------------------------------
 Mon Dec 15 14:24:24 UTC 2025 - Adam Majer <adam.majer@suse.de>
 

nodejs24.spec

@@ -34,7 +34,7 @@
 %endif
 
 Name:           nodejs24
-Version:        24.12.0
+Version:        24.13.0
 Release:        0
 
 # Double DWZ memory limits