[CLSA-2026:1792746902] nodejs: Fix of 3 CVEs
Type:
security
Severity:
Low
Release date:
2026-10-23 09:21:40 UTC
Description:
- CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any
Updated packages:
  • nodejs-16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:ab8a8b7f99ac267a04423e2765399e45439e8fb9b904624726c4d69817fa0d6a
  • nodejs-16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:268710e8b6f372f4f395ca4bf0b949a28378cb1c53415f63db403a7c695046dc
  • nodejs-16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:7441f46f3a126f239f395930089570938b8173991c821188f0515c89654e2c71
  • nodejs-devel-16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:a1c623ec92e726f34230c37062f284f963d9fcef441e77cd1285cf3db1392ae2
  • nodejs-devel-16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:989156060735375e02e55f99e302858c6e54316dc19dc727725599ee1c2ed24c
  • nodejs-devel-16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:d1641a5e1ebb7b727de5f746fc31f7bc7ba90e6eb41f7634704d6917fb3cf976
  • nodejs-docs-16.20.2-8.el9_2.tuxcare.els24.noarch.rpm
    sha:ccda3e413fa8c3bf8d7dd27c647bddd9242465b11874cadb75353be85c7a57bc
  • nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:ca6c7a4c90d5e595dcf00aa2ececc2cc96072233f88387bc504f16b0e57d5616
  • nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:adefeb53f238f60e55aa64a3d0cfa7bff857c6cd887973b484d4baec9849c78f
  • nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:a0cb65b9d7cc5c238243cf50fa442cc66217aabcfdc141d917f60115a5c8efd5
  • nodejs-libs-16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:8ff179b5ff38b0f332a08c80e5d673bb3ff11e79dc39003d15c9c5ca4974a118
  • nodejs-libs-16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:499c4265ff3f537831bb2a57923326e79fe21dafd1a46fe63b9ba4a5f9b3245e
  • nodejs-libs-16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:b82d51b7ead600d4396b665af12b2b9a7bdc6a30821f37dca7abddfc30756010
  • npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:a6a125ed89ad67f4e80e2b5e0f9d651ff2cf19583568157404c74ce9416d519d
  • npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:ead874ece85d8e35cfdb3414fedb659104b7f159886964f613adc0aba1cc00f6
  • npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:39245d5fdc657b7892c8c2ebe84441c007efc1c7c4a3a279002871ab19fa02b6
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els24.aarch64.rpm
    sha:3b3a8ba1e7757bd427663902f1454239fb86acdccc33ac6660674229968c4c4a
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els24.i686.rpm
    sha:383e308144de2a6ec96cc1fbeb23c647cecce2e76ea9573bf194cc0be46f4a55
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els24.x86_64.rpm
    sha:120b69ad28432f0469dd337b96fa3fba45f9a814d4ebe59ccb604714243ddfc6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.