[CLSA-2026:1793106104] nodejs: Fix of CVE-2026-1525
Type:
security
Severity:
Critical
Release date:
2026-10-27 13:02:01 UTC
Description:
- CVE-2026-1525: reject duplicate Content-Length and Host headers in the bundled undici client regardless of header-name casing, so a case-variant duplicate can no longer put two Content-Length values on the wire
CVEs fixed:
Updated packages:
  • nodejs-16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:4dc287c975c1f97e997d10ef840059a2c09f1ccff725bd99c4a072da984144b3
  • nodejs-16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:920937016f88f0b4f34eb17f34211bde46f32974d34fa680a53b6f6e492b040b
  • nodejs-16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:27cbf76680c5269bfd5161fba33812ded6bfa75db24c7f72e9911a5d71fede17
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:06fa7a7a45b664cd3c836f92b7220f177e485a241e4eb740a83bee83ee0a9f5e
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:8b4487a6e4e570d2ac552eabf1fd849245df1cdd25bee1a53de3e7fb038211c7
  • nodejs-devel-16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:cc6bb394de3f0e9fd41e88698109120890d6c82f19be8e06fce4c872089a66e5
  • nodejs-docs-16.20.2-8.el9_8.tuxcare.els25.noarch.rpm
    sha:2ea547c7b6337c9ad09b40f3c32395a78efc156d6e0635f2b10f6366a0a9c089
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:688788b6025c1ec9d6539a21dfcebe5c9f1df42d1790bf1fefa49fe32e93d8d9
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:c369c30e87f66a0541c74eabcd4b75e4788b29a58f2b89ad757f90db0737644f
  • nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:c1f804f9c87f2b2a55725f926f1500d304056eb03c3ddf9f85374af123d81e5e
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:c8b0df3ab4b179d58707ef14b28209b3e98cd9d3fddcf1147eff61025deac779
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:54a246be03692a54f04697611e5ea9217435ea61fa93bfab1bb333a7edb118f4
  • nodejs-libs-16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:f570e1e9ed57e990e65646615b981f5fade9469c0b0338b4c780437edc1a9e5f
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:064d869394ac0936ea78796dc9f532151774a57da93be183ffbc7b5d73546bf4
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:c36fa7201744855b362111a245e06db13216bb9f0410d721b51f085514f31348
  • npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:59aa08f00844c1c4b4cf2d35b966fcd0e4838b16fcf874836a728cec26b2eb4b
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els25.aarch64.rpm
    sha:e27fb5732cc29a1916a152ed5ce17f99b3476e3249e7f96e43c7cf671e7c1d14
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els25.i686.rpm
    sha:2de376a8d27fc707e48bbb0ecf91d28a7f6647ed3d64c2701d36e9585c18d223
  • v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els25.x86_64.rpm
    sha:3e659556783f1a96bcb8c8930cd2edbe8d91007a6df2250e4f9ec2d0ef5ceb97
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.