[CLSA-2026:1792513803] Fix CVE(s): CVE-2026-58044
Type:
security
Severity:
Moderate
Release date:
2026-10-20 16:30:13 UTC
Description:
* SECURITY UPDATE: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - debian/patches/CVE-2026-58044.patch: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - CVE-2026-58044
CVEs fixed:
Updated packages:
  • alt-nodejs14-docs_14.21.3-34_amd64.deb
    sha:ffc3175ed0008f0be19b3b48d7af4a34bc26ecae
  • alt-nodejs14-nodejs_14.21.3-34_amd64.deb
    sha:b28137b11b6a26f767ee50af04d1969a46a337f2
  • alt-nodejs14-nodejs-devel_14.21.3-34_amd64.deb
    sha:6bfa3dd9901a66c885b91f4b72f9ecfd5fa3e6ef
  • alt-nodejs14-npm_6.14.18-14.21.3-34_amd64.deb
    sha:d7d614a6078c6fe30ce990882512548f9e1d441a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.