[CLSA-2026:1792747873] alt-nodejs22-nodejs: Fix of 8 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 09:31:29 UTC
Description:
- CVE-2026-106071: permission: stop a wildcard grant from matching paths shorter than its prefix, such as /tmp/tes for /tmp/test*
Updated packages:
  • alt-nodejs22-nodejs-22.23.4-2.el9.x86_64.rpm
    sha:f0e756cce45a8d8fc34cbed27a5529ee74434a9b76c685412296e997a0c47e2e
  • alt-nodejs22-nodejs-devel-22.23.4-2.el9.x86_64.rpm
    sha:45c09dcd7db4ecaeae112075aa9c69b550396c449c0d6acd1a53f5267faf7d66
  • alt-nodejs22-nodejs-docs-22.23.4-2.el9.noarch.rpm
    sha:3cf115c2af4c3f675b3d27600fa60d67741e5a4bbc9d1d29769ef26860c2e906
  • alt-nodejs22-npm-10.9.9-22.23.4.2.el9.x86_64.rpm
    sha:7cf56daa7116e7abec5201fd09b91bc9e82d335ccaea364c24448f8a2900c4a1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.