Release date:
2026-10-20 15:13:04 UTC
Description:
- CVE-2026-58044: http: reject requests exceeding max header count, by
counting header pairs in the C++ parser and aborting the message with a
header-overflow error once parser.maxHeaderPairs (server.maxHeadersCount /
request.maxHeadersCount) is exceeded, instead of only trimming the header
list in JavaScript while the parser kept buffering every pair
Updated packages:
-
alt-nodejs12-nodejs-12.22.12-34.el9.x86_64.rpm
sha:bb97f1d166f814fa0e015fcda429b0a8ffc4607c74a3bf3154353fbafd8b9273
-
alt-nodejs12-nodejs-devel-12.22.12-34.el9.x86_64.rpm
sha:1c446ae6038d4db16360c0a1bbf41ebab47659fa37abbc9a3adfb193eb40278b
-
alt-nodejs12-nodejs-docs-12.22.12-34.el9.noarch.rpm
sha:7caa174698dca00e70f06a4a81d73213a7ddf096c3fa63d327e90993beca1082
-
alt-nodejs12-npm-6.14.16-12.22.12.34.el9.x86_64.rpm
sha:b3a4bb5fc9c4904c97956167c775cfbecb0e308ceddd345280503f1ea5271f7d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
