[CLSA-2026:1789053411] alt-nodejs20-nodejs: Fix of CVE-2026-58043
Type:
security
Severity:
Important
Release date:
2026-09-10 15:17:02 UTC
Description:
- CVE-2026-58043: permission: avoid granting radix split nodes so an internal radix-tree branch point created while inserting sibling --allow-fs-read / --allow-fs-write entries (e.g. secret1, secret2, secret3) is no longer mistakenly marked as an explicitly granted path itself (e.g. secret)
CVEs fixed:
Updated packages:
  • alt-nodejs20-nodejs-20.20.2-12.el10.x86_64.rpm
    sha:5a1086485dfe86529bc27396c489426b42b86629204709b32c819eb157e35061
  • alt-nodejs20-nodejs-devel-20.20.2-12.el10.x86_64.rpm
    sha:c0181de9eb0094dbe476d89ec24eda3f35736f288ed86f1aabe01c1d8e259c33
  • alt-nodejs20-nodejs-docs-20.20.2-12.el10.noarch.rpm
    sha:1205ca17abcfc43e7c1035a218177694507a394f81ba13f44d13e4b92f9f6efc
  • alt-nodejs20-npm-10.8.2-20.20.2.12.el10.x86_64.rpm
    sha:aa0a28e56974a6ec242abbee79da5ca7411fa275876321571e29f7b126f9abed
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.