Release date:
2026-10-20 16:00:15 UTC
Description:
- CVE-2026-58044: http: reject requests exceeding max header count, by
counting header pairs in the C++ parser and aborting the message with a
header-overflow error once parser.maxHeaderPairs (server.maxHeadersCount /
request.maxHeadersCount) is exceeded, instead of only trimming the header
list in JavaScript while the parser kept buffering every pair
Updated packages:
-
alt-nodejs12-nodejs-12.22.12-34.el8.x86_64.rpm
sha:1f0dbbe5540d733793340c62ba37febc06c7438648f0da9f6d51f58452905c04
-
alt-nodejs12-nodejs-devel-12.22.12-34.el8.x86_64.rpm
sha:e6583d53b881f9f47f36ca3660e703a8a27511fe25eb61b0cd7a9d93266a4651
-
alt-nodejs12-nodejs-docs-12.22.12-34.el8.noarch.rpm
sha:41a891075336d7c19957acbe56931f27f53ea3ab625cc7ddefc1975952db1270
-
alt-nodejs12-npm-6.14.16-12.22.12.34.el8.x86_64.rpm
sha:4fc84b661e5d6d9be54ec7a2b50f92d53924a085ba07442d4598fc72cc733f4d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
