[CLSA-2026:1792723107] Fix of 8 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-23 02:38:43 UTC

Description:

   * SECURITY UPDATE: permission wildcard grant matched shorter paths
     - debian/patches/CVE-2026-106071.patch: match only up to the wildcard
       prefix length in src/permission/fs_permission.h
     - CVE-2026-106071

CVEs fixed:

CVE-2026-105481
CVE-2026-105482
CVE-2026-106069
CVE-2026-106071
CVE-2026-106072
CVE-2026-106073
CVE-2026-106074
CVE-2026-111497

Updated packages:

alt-nodejs22-docs_22.23.4-2_amd64.deb
sha:05ad1219f28176a12039e80c19f3c8b6923499cd
alt-nodejs22-nodejs_22.23.4-2_amd64.deb
sha:20dea74b26d13ba3d0762d41404f5b114b1c9563
alt-nodejs22-nodejs-devel_22.23.4-2_amd64.deb
sha:979423ee545fc88c73fefede15169124d3ce3dd6

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.