Fixed packages are out for every alt-nodejs version on every system it is built for, for both CloudLinux and TuxCare ELS for Node.js.
Released since the last update: - CloudLinux on Ubuntu 22.04: alt-nodejs20 (20.20.2-15) - cPanel servers on CloudLinux OS 8: ea-nodejs22 (22.23.5) - TuxCare ELS for Node.js: alt-nodejs20, alt-nodejs18, alt-nodejs14 and alt-nodejs12 on the remaining systems: EL9, EL10, Debian 10, 11, 12 and 13, Ubuntu 18.04, 20.04 and 22.04, and Alpine 3.23 and 3.24.
CloudLinux OS 10 takes its alt-nodejs packages from the TuxCare repositories, so it is covered by the EL10 packages.
To update:
- CloudLinux OS 7: yum clean all && yum update 'alt-nodejs*' - CloudLinux OS 8, 9 and 10, and other EL-based systems: dnf clean all && dnf upgrade 'alt-nodejs*' - CloudLinux on Ubuntu, Debian and Ubuntu: apt-get update && apt-get install --only-upgrade 'alt-nodejs*' - cPanel servers on CloudLinux OS 8: dnf upgrade ea-nodejs22
After updating, restart the Node.js applications that use the updated version, from Node.js Selector or with: cloudlinux-selector restart --json --interpreter nodejs --user USER --app-root APP_ROOT A running application keeps using the old version until it restarts.
To check a server, compare each installed package with the fixed versions in the blog post, for example rpm -q alt-nodejs20-nodejs or, on Ubuntu, dpkg-query -W alt-nodejs20-nodejs. For end-of-life versions (alt-nodejs20 and older), node --version does not change after the update; only the package release does.
CloudLinux: - alt-nodejs20 (20.20.2-17): CloudLinux OS 7, 8 and 9 - alt-nodejs18, alt-nodejs16, alt-nodejs14 and alt-nodejs12: CloudLinux OS 7, 8 and 9, and CloudLinux on Ubuntu 22.04
Fixed packages are now out for every alt-nodejs version on CloudLinux OS 7, 8 and 9. On CloudLinux on Ubuntu 22.04, every version is out except alt-nodejs20, which is still in progress.
TuxCare ELS for Node.js: - alt-nodejs26, alt-nodejs24, alt-nodejs23, alt-nodejs22, alt-nodejs19, alt-nodejs16 and alt-nodejs10: released on all supported systems
To update on CloudLinux OS and other EL-based systems: yum update 'alt-nodejs*'
On CloudLinux on Ubuntu, Debian and Ubuntu: apt-get update && apt-get install --only-upgrade 'alt-nodejs*'
After updating, restart the Node.js applications that use the updated version. A running application keeps using the old version until it restarts.
CloudLinux: alt-nodejs19 and alt-nodejs10: CloudLinux OS 8 and 9 alt-nodejs10: CloudLinux OS 7 alt-nodejs24, alt-nodejs18 and alt-nodejs14: CloudLinux on Ubuntu 22.04
TuxCare ELS for Node.js: alt-nodejs26 (26.13.1) and alt-nodejs24 (24.22.3): Ubuntu 24.04 alt-nodejs20: Debian 10, 11, Ubuntu 18.04, 20.04, 22.04 and 24.04 alt-nodejs19 and alt-nodejs10: EL9, EL10 alt-nodejs16: Debian 10, 11, Ubuntu 18.04 and 20.04
CloudLinux: alt-nodejs26 (26.13.1), alt-nodejs24 (24.22.3) and alt-nodejs22 (22.23.5): CloudLinux OS 8 and 9
TuxCare ELS for Node.js: alt-nodejs22 (22.23.5): EL8
To update on CloudLinux OS and other EL-based systems: yum update 'alt-nodejs*' After updating, restart the Node.js applications that use the updated version. A running application keeps using the old version until it restarts.
Node.js has published security releases 22.23.5, 24.22.3 and 26.13.1, fixing 16 vulnerabilities, 7 of them rated High: Node.js Security Releases
Available now
CloudLinux: alt-nodejs22 for CloudLinux on Ubuntu 22.04
TuxCare ELS for Node.js: alt-nodejs26 (26.13.1): EL8, EL9, EL10 alt-nodejs24 (24.22.3): EL10, Ubuntu 22.04 alt-nodejs22 (22.23.5): EL9, EL10, Debian 11, Ubuntu 20.04, 22.04, 24.04 and 26.04 alt-nodejs14: Ubuntu 24.04
In progress CloudLinux OS 8, 9 and 10: fixed alt-nodejs packages are still being built and tested TuxCare: alt-nodejs22 and alt-nodejs24 for EL8, alt-nodejs24 for EL9, and backported fixes for older alt-nodejs versions on all systems
Posted Nov 11, 2026 - 19:50 UTC
Update
Our target is unchanged for alt-nodejs 22, 24 and 26: the first fixed packages, for CloudLinux OS 8 and 9, within 3 hours after the upstream release.
Fixed packages for older, end-of-life alt-nodejs versions (23, 20, 18, 10, 16, 14, 12 and 19) need backported fixes. We are aiming to release them within 6 hours after Node.js publishes the fixes. The exact time depends on how many issues Node.js fixes and how complex they are.
Posted Nov 10, 2026 - 16:53 UTC
Update
ETA: the first fixed packages within 3 hours after Node.js publishes the fixes
Node.js plans to publish the fixes on Wednesday, November 11, 2026, or shortly after. All times in this update count from the moment Node.js publishes them
alt-nodejs 22, 24 and 26 are rebuilt from the new Node.js versions and need no backporting, so the first fixed packages will come from them. We expect the first of them, for CloudLinux OS 8 and 9, within 3 hours
Node.js fixes only the 22.x, 24.x and 26.x lines, so for older, end-of-life alt-nodejs versions we backport the fixes ourselves. Their builds start as each backport is ready, in this priority order: alt-nodejs 20, 18, 10, 16, 14, 12 and 19. How long this takes depends on how many issues Node.js fixes and how complex they are, which we will know only once Node.js publishes the details. We will post an ETA for these versions here once we have reviewed the fixes
To prepare, check which alt-nodejs versions your servers run: rpm -qa 'alt-nodejs*' A running Node.js application keeps using the old version until it restarts, so plan time to restart applications after updating
Next update: when Node.js publishes the fixes. After that, we will post progress here every few hours and as fixed packages are released, until all fixed alt-nodejs packages are available
Posted Nov 10, 2026 - 14:58 UTC
Investigating
Node.js has announced security releases for the 22.x, 24.x, and 26.x lines, planned for Wednesday, November 11, 2026 (or shortly after). The highest severity of the fixed issues is High. We will publish the vulnerability details and CVE IDs with the release.
What we are doing: - We will start building patched packages as soon as Node.js publishes the fixes, and plan to release alt-nodejs 22, 24, and 26 later the same day. - Older alt-nodejs versions (such as 18 and 20) will also receive backported fixes. The timing will be announced separately. - We will share an ETA early on Tuesday, November 10, and post progress updates here every few hours until the packages are available.