[CLSA-2026:1779888337] Fix CVE(s): CVE-2026-21714

Type:

security

Severity:

Moderate

Release date:

2026-05-27 13:25:43 UTC

Description:

   * SECURITY UPDATE: memory leak in HTTP/2 on flow control window overflow
     - debian/patches/CVE-2026-21714.patch: treat NGHTTP2_ERR_FLOW_CONTROL in
       OnInvalidFrame so Http2Session is destroyed after invalid connection-level
       WINDOW_UPDATE instead of leaking
     - CVE-2026-21714

Updated packages:

alt-nodejs12-docs_12.22.12-20_amd64.deb
sha:cac2213c60596a2d5625d3ba3cd3897a5f4d2b7e
alt-nodejs12-nodejs_12.22.12-20_amd64.deb
sha:3974f3559a59b146ad4a149cf03c000ef3828bd7
alt-nodejs12-nodejs-devel_12.22.12-20_amd64.deb
sha:d5ca66f44b5f9c3e73ed848bb4ffd2616d33a651
alt-nodejs12-npm_6.14.16-12.22.12.20_amd64.deb
sha:09225a90cfdf9df2109305263beb9b96afd56dc1

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.