[CLSA-2026:1792747520] alt-nodejs22-nodejs: Fix of 8 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 09:25:36 UTC
Description:
- CVE-2026-106071: permission: stop a wildcard grant from matching paths shorter than its prefix, such as /tmp/tes for /tmp/test*
Updated packages:
  • alt-nodejs22-nodejs-22.23.4-2.el10.x86_64.rpm
    sha:e03f492efbcb91605aace665f90e963284e5e608bc7ac795f13580bdedf423dd
  • alt-nodejs22-nodejs-devel-22.23.4-2.el10.x86_64.rpm
    sha:e3e5092fa6b926153ce3b7566a9e26f2ca957374caae2ddbb35b78f4cc29681c
  • alt-nodejs22-nodejs-docs-22.23.4-2.el10.noarch.rpm
    sha:7c33708b3092898cf77a356d74932aeb9f669afbc3365b107462374c75fe34b4
  • alt-nodejs22-npm-10.9.9-22.23.4.2.el10.x86_64.rpm
    sha:44bb30d1472be9e898b4bf940913e0390522715fa5decf09b76c2b78d5d081b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.