[CLSA-2026:1792760716] nodejs: Fix of 3 CVEs
Type:
security
Severity:
Low
Release date:
2026-10-23 13:05:29 UTC
Description:
- CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any
Updated packages:
  • nodejs-16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:26661eb5e74e385fe27120c6713bc4c5e50a7141df8d39e38d603712cc76dcc7
  • nodejs-16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:e1bccaa7c0018c7982678dfab8edf33c1afc53d3de7eb336e973cd491f025374
  • nodejs-16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:a65113e3df7343077bb958576dac2d8454731142f28581d4e3b49582f751c3bc
  • nodejs-devel-16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:44396878844f0c88c64d8300584f34107c0e579cc3a86ba411e81131c7fab054
  • nodejs-devel-16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:c51baf4ea524794a5d12b54f1b519d3aef3f3ebeb8ba859666ce70af60581231
  • nodejs-devel-16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:32dc9048f05caabe69bf7ba284bb248d27fd27260957524e37a6477db297f29b
  • nodejs-docs-16.20.2-8.el9_6.tuxcare.els24.noarch.rpm
    sha:f98bd9a4d4e87fb1e18c40f5f6915b8dabd6454793e1852a56fd97646e724da7
  • nodejs-full-i18n-16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:19f90c2ecdfce9b70f5c1d02270583d85cf5a552318dbbe4a336f74efb2c1f4a
  • nodejs-full-i18n-16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:7b079ce78ec8b54b8f291b7379e2d2e4614155f7b1d6bd34bd9f23ccf93c5002
  • nodejs-full-i18n-16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:9dc2a66f2b4ca9e3ebcf47a8a56abcc5f4800becb0bacf76b72b8d71ba691372
  • nodejs-libs-16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:f6ee31858404bbd9dd8f3f76f22fd9ef06b6e679932f97c9407cec6be968815e
  • nodejs-libs-16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:366fb95972d35cf9ccfcad0fca92b658bd1885bc7ddce2f407302982e1efd714
  • nodejs-libs-16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:7bc45a1ddfee505a6fe25ca1147574671a63f12ec5df69c070cd330719f217ff
  • npm-8.19.4_1.16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:90113fea22c83791e75ebc314696a963d081c43fcd32fa8741af04df303c793f
  • npm-8.19.4_1.16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:bf679841cae0dfb1741ee3dba8dfc3d644ecc2cd9817d34ea43eb61c244185e8
  • npm-8.19.4_1.16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:3cad277a4c53a15edce53cedb1937f2524fd65a200f213f4c9804aee3d682dbe
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els24.aarch64.rpm
    sha:59c3f41ca94c114645eba6fe3fd5fe4994e606c34bcfc01a3db0b9dd347613a9
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els24.i686.rpm
    sha:610d944decb6615675e63db1d2afa76709cfd4686b6291889e9c20f615e7d394
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els24.x86_64.rpm
    sha:f5dd62357b60bb8d72d1c56f627851466408e8d4440acd5a4d51991ff903578b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.