Release date:
2026-10-20 15:01:54 UTC
Description:
- CVE-2026-58044: http: reject requests exceeding max header count, by
counting header pairs in the C++ parser and aborting the message with a
header-overflow error once parser.maxHeaderPairs (server.maxHeadersCount /
request.maxHeadersCount) is exceeded, instead of only trimming the header
list in JavaScript while the parser kept buffering every pair
Updated packages:
-
alt-nodejs12-nodejs-12.22.12-34.el7.x86_64.rpm
sha:8f69d6e1f75db3ca6d5b75823cda25ba06c2946da4d0cdc87b7521a8b888a2e6
-
alt-nodejs12-nodejs-devel-12.22.12-34.el7.x86_64.rpm
sha:6e0dcc4eaaf715243e67b8e2c078a9247d6d2a47160b26163b102072a23bb5f1
-
alt-nodejs12-nodejs-docs-12.22.12-34.el7.noarch.rpm
sha:029c9c7bf384af3556b5d7e4591de7f5ebf76fc1db868343e42357da72a6823d
-
alt-nodejs12-npm-6.14.16-12.22.12.34.el7.x86_64.rpm
sha:1ab6615dd75aa9fffe797e916a0aa39cffb27b8bf69fb4695d9345c3029dae52
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
