[CLSA-2026:1788261057] alt-nodejs18-nodejs: Fix of CVE-2026-58040
Type:
security
Severity:
Moderate
Release date:
2026-09-01 11:11:09 UTC
Description:
- ALTNJS-278: stop depending on the SCL-scoped alt-nodejs18-zlib collection. On CL7 node is now built against its bundled deps/zlib, because the base OS zlib 1.2.7 makes npm fail with Z_DATA_ERROR while inflating registry responses. Other platforms keep linking the system zlib as before. - ALTNJS-278: BuildRequire the SCL runtime explicitly on el7; it used to arrive transitively through alt-nodejs18-zlib-devel.
CVEs fixed:
Updated packages:
  • alt-nodejs18-nodejs-18.20.8-20.el10.x86_64.rpm
    sha:fffb2fa7cc61eac6be33a1fc2c34fbf7eef8ca101d9457f1b9db0bae6e12fe15
  • alt-nodejs18-nodejs-devel-18.20.8-20.el10.x86_64.rpm
    sha:57d7db23343a7307d38a7470a0c0b9c38faf13114a10e14b38eb026fdeb1a11c
  • alt-nodejs18-nodejs-docs-18.20.8-20.el10.noarch.rpm
    sha:b8acc1e3a57bdb486926249a026f46a6ba75189b736ae7d66bc3a09994850015
  • alt-nodejs18-npm-10.8.2-18.20.8.20.el10.x86_64.rpm
    sha:c8f196590910df4168b787fad31a89a590e99fa72e38105fe9de624362519171
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.