[CLSA-2026:1794393961] alt-nodejs19-nodejs: Fix of 27 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 22:54:35 UTC
Description:
- ALTNJS-219: npm: drop the bundled node-gyp and install a no-op stub in its place, as alt-nodejs14/16/18/20/22 do. node-gyp's python scripts made alt-nodejs19-npm require /usr/bin/python3 on el8+, which an alt-* package must not do (ALTEAPLN-11). Remove the old node-gyp symlink in %pretrans so that the upgrade can replace it with the stub directory. - Drop the CL7 npm builtin config that pointed node-gyp at alt-python-internal; there is no node-gyp left to use it.
Updated packages:
  • alt-nodejs19-nodejs-19.9.0-12.el9.x86_64.rpm
    sha:3a51bbb5077e64d096988332181930dac38c467e2ff88ecac0ef4aa22e1dd10e
  • alt-nodejs19-nodejs-devel-19.9.0-12.el9.x86_64.rpm
    sha:fe650c3772a89e544d1b58632cc11785856eb80757f28b9cf92bb2c192135639
  • alt-nodejs19-nodejs-docs-19.9.0-12.el9.noarch.rpm
    sha:927084c36515a3d8c6c56cf2801f91e2371d9971ef42277b384354754cc56fdc
  • alt-nodejs19-npm-9.6.3-19.9.0.12.el9.x86_64.rpm
    sha:ccbbe6da7c1bf43086a5aa5438a156b03abd9f963be3bea96b8cc6d92b0d5904
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.