[CLSA-2026:1794393980] alt-nodejs19-nodejs: Fix of 32 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 22:53:24 UTC
Description:
- ALTNJS-219: npm: drop the bundled node-gyp and install a no-op stub in its place, as alt-nodejs14/16/18/20/22 do. node-gyp's python scripts made alt-nodejs19-npm require /usr/bin/python3 on el8+, which an alt-* package must not do (ALTEAPLN-11). Remove the old node-gyp symlink in %pretrans so that the upgrade can replace it with the stub directory. - Drop the CL7 npm builtin config that pointed node-gyp at alt-python-internal; there is no node-gyp left to use it.
Updated packages:
  • alt-nodejs19-nodejs-19.9.0-12.el10.x86_64.rpm
    sha:eccc03ef4898d90ff6d1b9f0b68867575d4588a8fbb51bc9438393ac770951c1
  • alt-nodejs19-nodejs-devel-19.9.0-12.el10.x86_64.rpm
    sha:943905303815302909af472b9d7de5bb09e34800187c7750ba40902299760ab7
  • alt-nodejs19-nodejs-docs-19.9.0-12.el10.noarch.rpm
    sha:298ea4c3e46cc10d7f099473a0ca378df4ab3d72148d271eb642d351d445c38c
  • alt-nodejs19-npm-9.6.3-19.9.0.12.el10.x86_64.rpm
    sha:f33f8472880f795fb28653b99a994febb54731f6ff16ab22e5eb210bc13b41e6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.