Release date:
2026-10-20 15:09:23 UTC
Description:
- CVE-2026-58044: http: reject requests exceeding max header count, by
counting header pairs in the C++ parser and aborting the message with a
header-overflow error once parser.maxHeaderPairs (server.maxHeadersCount /
request.maxHeadersCount) is exceeded, instead of only trimming the header
list in JavaScript while the parser kept buffering every pair
Updated packages:
-
alt-nodejs12-nodejs-12.22.12-34.el6.x86_64.rpm
sha:344a54ad3d2514ce4f3f1359d85146d6fe512d47409653682d9bd7290b02a294
-
alt-nodejs12-nodejs-devel-12.22.12-34.el6.x86_64.rpm
sha:7ac3ef4800b1fccd4091d370db48145283d6f1cd5d0f36b13211a483f27e0fd8
-
alt-nodejs12-nodejs-docs-12.22.12-34.el6.noarch.rpm
sha:3e32aab5778abc0a0f33288a403aa310b4d601a82f47e6ae788ff4bb69a4be56
-
alt-nodejs12-npm-6.14.16-12.22.12.34.el6.x86_64.rpm
sha:acc1b48ad35f2268d9f57035b26a48f3d4102f1ba678a9323796d098c37c208c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
