[CLSA-2026:1792512723] Fix CVE(s): CVE-2026-58044
Type:
security
Severity:
Moderate
Release date:
2026-10-20 16:12:15 UTC
Description:
* SECURITY UPDATE: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - debian/patches/CVE-2026-58044.patch: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - CVE-2026-58044
CVEs fixed:
Updated packages:
  • alt-nodejs14-docs_14.21.3-34_amd64.deb
    sha:ffc3175ed0008f0be19b3b48d7af4a34bc26ecae
  • alt-nodejs14-nodejs_14.21.3-34_amd64.deb
    sha:3171e6d56b742632072182780ce41aa36eea81af
  • alt-nodejs14-nodejs-devel_14.21.3-34_amd64.deb
    sha:55a83913c0f6b38ea895f1dead395d008b92fd5f
  • alt-nodejs14-npm_6.14.18-14.21.3-34_amd64.deb
    sha:34de26311ff2379815bf8c25bd360ef750dcab29
  • alt-nodejs14-docs_14.21.3-34_arm64.deb
    sha:9ee74b760043ac8ae4fc36b3fe16e7d9d11d57eb
  • alt-nodejs14-nodejs_14.21.3-34_arm64.deb
    sha:00874f7db86a1432c7c287dd6690240bd151d01f
  • alt-nodejs14-nodejs-devel_14.21.3-34_arm64.deb
    sha:b115f92c9126908ef3a9c8e35d2e9ff5dc95b15a
  • alt-nodejs14-npm_6.14.18-14.21.3-34_arm64.deb
    sha:a4e1d0c7666da2a99b27f098d99b99ba0e27067e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.