Skip to content

v4.2.1: Node.js 22.23.4 security update

Choose a tag to compare

View all tags
@raphael1688 raphael1688 released this 09 Nov 00:46
· 4 commits to main since this release
v4.2.1
9252327

⬆️ Security update: Node.js 22.23.4

  • Node.js 22.23.3 → 22.23.4 (nodejs=22.23.4-1nodesource1). This is a
    Node.js security release: 6 CVEs fixed in http, tls, dns, crypto, the
    permission model and brotli, plus bundled OpenSSL 3.5.9, newer root
    certificates and undici 6.29.1. The Nginx Proxy Manager backend runs on Node.js.
  • apache2-utils 2.4.68-1~deb13u1 → 2.4.69-1~deb13u1 (Debian security
    update). Its CVEs are in Apache HTTP Server modules; the add-on only uses the
    htpasswd tool, so this is housekeeping.

Both pins are ahead of upstream, whose automated updates missed the Node.js
security release. Everything else is unchanged and already the latest:
Nginx Proxy Manager 2.16.0, nginx 1.31.8, certbot 5.9.0, debian-base 9.5.2.

✅ Verification

Built and tested on real aarch64 hardware running Home Assistant OS: the
container runs Node.js v22.23.4, API tokens still authenticate, and port 81
and the sidebar work.

Assets 2
Loading