[CLSA-2026:1788262419] alt-nodejs18-nodejs: Fix of CVE-2026-58040
Type:
security
Severity:
Moderate
Release date:
2026-09-01 11:33:49 UTC
Description:
- ALTNJS-278: stop depending on the SCL-scoped alt-nodejs18-zlib collection. On CL7 node is now built against its bundled deps/zlib, because the base OS zlib 1.2.7 makes npm fail with Z_DATA_ERROR while inflating registry responses. Other platforms keep linking the system zlib as before. - ALTNJS-278: BuildRequire the SCL runtime explicitly on el7; it used to arrive transitively through alt-nodejs18-zlib-devel.
CVEs fixed:
Updated packages:
  • alt-nodejs18-nodejs-18.20.8-20.el7.x86_64.rpm
    sha:6fe588764d3648c6c963d67724c1ffeab19a8567b0301bfa1e8229177bc62c7b
  • alt-nodejs18-nodejs-devel-18.20.8-20.el7.x86_64.rpm
    sha:a3bbd58fba46daa24ae398afbd6194fddd55a790a441a04dbabe1a4528011fab
  • alt-nodejs18-nodejs-docs-18.20.8-20.el7.noarch.rpm
    sha:f558a14cfd28187881939d17fd1a8e4b7ea366e85bafaef3e088479337e68912
  • alt-nodejs18-npm-10.8.2-18.20.8.20.el7.x86_64.rpm
    sha:a1854a7d875954990a993912297fc6eb7da7283eca55d2aaf0e49e167e1620d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.