[CLSA-2026:1792747529] nodejs: Fix of 3 CVEs
Type:
security
Severity:
Low
Release date:
2026-10-23 09:25:41 UTC
Description:
- CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any
Updated packages:
  • nodejs-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:4b296b06e1616fdfbc5a7b0375cabba1cefdab2a6ca9a827003c229a1a666278
  • nodejs-16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:b5feaebe7508059d0a15ea79356aa92a8ffa9b776f139fed009d44fb1ea5a30e
  • nodejs-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:a5f7969ffed9360d37cd52a23dd0c27795898050870f56e919ad38c4d3cfade0
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:2f50a3a3a942559950297002248fa47e4387315ff8c95015400802f08531c122
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:5f605f4226f142483cff650cae4bf949c69972f5f6043651fb244c4b69d7f626
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:c2dde4ab2c3c2c870bb4fa6038a1b6ea7dd29f419e7a3e898d1a8a948dc73d95
  • nodejs-docs-16.20.2-8.el9_8.tuxcare.els24.noarch.rpm
    sha:f268496d6ef96538a8c9dd5ab757666d4d0b433276b329fab245ddcfe24057cf
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:a7a811ec44ee07f149e578b9fff7d23fd835e5bd984a3dcd571c49f40015b75f
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:7ac412f8030c390dc8ab35ff0e8ebf7126080dc267ea97279585f15e446077f0
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:0f9953cbf7aa6a6d62ab211a7d2e2c12e0646ac84e66ce5900d919446d791a01
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:944fd81b28f9fe97d803bb02b5eba701edb9a74a85ccc75afc6b9e1bfc16a082
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:cf6e3e1c136e60df1285eca4ed05dcbe37eaff5e93c1d217f4445e9741a301d8
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:07b698f5db5f839470c8f63e41e67fd6519287ddad87f7ec9d2de3e074a7ea96
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:9395a999ebe44d6a70542cd3ed04becfd8c3d3155fb6c630c29222ff5be91931
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:cac570a6114558ecb022167e7974bce9471c910cba25a1e97c479543d5d1c893
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:0b8c211d3b18ee8c13f2dcd811ac9442a500e54825c48747976cd1d8635ca427
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm
    sha:683945d9332008b13214b1266632c29492a2af29f86abb32182e450f809887ae
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.i686.rpm
    sha:2bc8372368d5815fb885b28918e269d062f9349934122373142d2afbb59f79ef
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm
    sha:530098b435145196c6ee9e561540a9e49c25cf3913c80aefe18bfff6da6ceb6b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.