Skip to content
Important CVE Rebuild for Fedora 42 with golang-github-evanw

Important CVE Rebuild for Fedora 42 with golang-github-evanw

Linuxsecurity •LinuxSecurity Advisories • December 30, 2025

This is a JavaScript bundler and minifier. It packages up JavaScript and TypeScript code for distribution on the web. Update Information : Rebuild for CVEs

This is a JavaScript bundler and minifier. It packages up JavaScript and

TypeScript code for distribution on the web.

* Sun Dec 21 2025 W. Michael Petullo - 0.24.2-4 - Rebuild for CVEs

* Sun Dec 21 2025 W. Michael Petullo - 0.24.2-4 - Rebuild for CVEs

[ 1 ] Bug #2398272 - CVE-2025-56648 golang-github-evanw-esbuild: Parcel Origin Validation Error [fedora-42] [ 2 ] Bug #2398722 - CVE-2025-47910 golang-github-evanw-esbuild: CrossOriginProtection bypass in net/http [fedora-42] [ 3 ] Bug #2407928 - CVE-2025-58189 golang-github-evanw-esbuild: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] [ 4 ] Bug #2409398 - CVE-2025-61723 golang-github-evanw-esbuild: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] [ 5 ] Bug #2410348 - CVE-2025-58185 golang-github-evanw-esbuild: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] [ 6 ]... Read the Full Advisory

[ 1 ] Bug #2398272 - CVE-2025-56648 golang-github-evanw-esbuild: Parcel Origin Validation Error [fedora-42] [ 2 ] Bug #2398722 - CVE-2025-47910 golang-github-evanw-esbuild: CrossOriginProtection bypass in net/http [fedora-42] [ 3 ] Bug #2407928 - CVE-2025-58189 golang-github-evanw-esbuild: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] [ 4 ] Bug #2409398 - CVE-2025-61723 golang-github-evanw-esbuild: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] [ 5 ] Bug #2410348 - CVE-2025-58185 golang-github-evanw-esbuild: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] [ 6 ]...

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-be54db24e3' at the command line. For more information, refer to the dnf documentation available at