[CLSA-2026:1794393963] alt-nodejs19-nodejs: Fix of 27 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 21:58:56 UTC
Description:
- ALTNJS-219: npm: drop the bundled node-gyp and install a no-op stub in its place, as alt-nodejs14/16/18/20/22 do. node-gyp's python scripts made alt-nodejs19-npm require /usr/bin/python3 on el8+, which an alt-* package must not do (ALTEAPLN-11). Remove the old node-gyp symlink in %pretrans so that the upgrade can replace it with the stub directory. - Drop the CL7 npm builtin config that pointed node-gyp at alt-python-internal; there is no node-gyp left to use it.
Updated packages:
  • alt-nodejs19-nodejs-19.9.0-12.el8.x86_64.rpm
    sha:204712ecf6a8c6310d2c636bf111516813049503d6f52981dc9bcbf359421550
  • alt-nodejs19-nodejs-devel-19.9.0-12.el8.x86_64.rpm
    sha:d6793034c4aaa177f620616952208a87ad85c34bb4e15bd9fa53c93c7173f224
  • alt-nodejs19-nodejs-docs-19.9.0-12.el8.noarch.rpm
    sha:0fa371ee9a493ff27758775bdb1fc721e9544ba5e7d031611011ac747f292146
  • alt-nodejs19-npm-9.6.3-19.9.0.12.el8.x86_64.rpm
    sha:c32fd1d5edef909307b961fc41a36c7e595f8b57aa8cb468262a74a4bd5f11ff
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.