Release date:
2026-10-20 15:05:46 UTC
Description:
- CVE-2026-58044: http: reject requests exceeding max header count, by
counting header pairs in the C++ parser and aborting the message with a
header-overflow error once parser.maxHeaderPairs (server.maxHeadersCount /
request.maxHeadersCount) is exceeded, instead of only trimming the header
list in JavaScript while the parser kept buffering every pair
Updated packages:
-
alt-nodejs12-nodejs-12.22.12-34.el10.x86_64.rpm
sha:ac60d7a00cd97b43ef53f34678c1f064de8b7f58876b6860af4220e87d21f08f
-
alt-nodejs12-nodejs-devel-12.22.12-34.el10.x86_64.rpm
sha:6bb19d243fc8d4d7e5fa0fae53e766369fc66cc3d987cef3f782e63402dde196
-
alt-nodejs12-nodejs-docs-12.22.12-34.el10.noarch.rpm
sha:570e0c00a1615b16d0637ed20c9d0c3af8bf910dbea0ee766714f1b79a52a099
-
alt-nodejs12-npm-6.14.16-12.22.12.34.el10.x86_64.rpm
sha:85b1400080c116aa58539a5def75a83faefd2e7a26daba09f62cf02f3b7daaab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
