[CLSA-2026:1779891072] Fix CVE(s): CVE-2026-21714

Type:

security

Severity:

Moderate

Release date:

2026-05-27 14:11:24 UTC

Description:

   * SECURITY UPDATE: memory leak in HTTP/2 on flow control window overflow
     - debian/patches/CVE-2026-21714.patch: treat NGHTTP2_ERR_FLOW_CONTROL in
       OnInvalidFrame so Http2Session is destroyed after invalid connection-level
       WINDOW_UPDATE instead of leaking
     - CVE-2026-21714

Updated packages:

alt-nodejs12-docs_12.22.12-20_amd64.deb
sha:876bb263988ce510dd4447fa305082d6edc7e5c3
alt-nodejs12-nodejs_12.22.12-20_amd64.deb
sha:479522dd5a4a551eea1360e67ac696151b8be3cc
alt-nodejs12-nodejs-devel_12.22.12-20_amd64.deb
sha:07869e651840fed4f1d1b7e8b82f6c69493dfe30
alt-nodejs12-npm_6.14.16-12.22.12.20_amd64.deb
sha:488a21705e3be272965bad4e557a2e7ddb6dcced

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.