[CLSA-2026:1794393964] alt-nodejs19-nodejs: Fix of 27 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-11 21:58:57 UTC
Description:
- ALTNJS-219: npm: drop the bundled node-gyp and install a no-op stub in its place, as alt-nodejs14/16/18/20/22 do. node-gyp's python scripts made alt-nodejs19-npm require /usr/bin/python3 on el8+, which an alt-* package must not do (ALTEAPLN-11). Remove the old node-gyp symlink in %pretrans so that the upgrade can replace it with the stub directory. - Drop the CL7 npm builtin config that pointed node-gyp at alt-python-internal; there is no node-gyp left to use it.
Updated packages:
  • alt-nodejs19-nodejs-19.9.0-12.el7.x86_64.rpm
    sha:7243c2a6939e8057147c24d5f38e9ae318aa8f2cfd432ed9bd11704a73190acb
  • alt-nodejs19-nodejs-devel-19.9.0-12.el7.x86_64.rpm
    sha:b6221a72565cd503ef1200fc036ee7ba7f02416624ec3d820688822a10180891
  • alt-nodejs19-nodejs-docs-19.9.0-12.el7.noarch.rpm
    sha:287d6c600232ec0445d29baa5dd1b3eef85fadfd37fcf6d9eff5909023e603cb
  • alt-nodejs19-npm-9.6.3-19.9.0.12.el7.x86_64.rpm
    sha:c579421f6021ba0cc3be4c2ae90bceb8031d3c1316c74632fd4faa7fb7b2622c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.