[CLSA-2026:1792509413] Fix CVE(s): CVE-2026-58044
Type:
security
Severity:
Moderate
Release date:
2026-10-20 15:17:04 UTC
Description:
* SECURITY UPDATE: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - debian/patches/CVE-2026-58044.patch: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated - CVE-2026-58044
CVEs fixed:
Updated packages:
  • alt-nodejs14-docs_14.21.3-34_amd64.deb
    sha:ffc3175ed0008f0be19b3b48d7af4a34bc26ecae
  • alt-nodejs14-nodejs_14.21.3-34_amd64.deb
    sha:372694fc42d3be57f47e7a4374086551e4cf67e6
  • alt-nodejs14-nodejs-devel_14.21.3-34_amd64.deb
    sha:ee3c1515b4da154e9cb15518b2190f281dffbd9f
  • alt-nodejs14-npm_6.14.18-14.21.3-34_amd64.deb
    sha:d7d614a6078c6fe30ce990882512548f9e1d441a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.