]> dgit.raspbian.org Git - nodejs.git/commit
https: bind identity checks to session reuse
authorMatteo Collina <hello@matteocollina.com>
Tue, 23 Jun 2026 10:47:47 +0000 (12:47 +0200)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commit62590443d6a45d15b6a14870c5f92e9b492e34fb
tree04c8dd39729e88abb2b44d06178e7dcdb7688854
parent7b8094d2aa8310338ba31050453d5d2fdec5e2f7
https: bind identity checks to session reuse

PR-URL: https://github.com/nodejs-private/node-private/pull/934
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
CVE-ID: CVE-2026-58040
origin: backport, https://github.com/nodejs/node/commit/51123159fe863073d7dcaf5c88b23bad8aae1a62

Gbp-Pq: Topic sec
Gbp-Pq: Name CVE-2026-58040.patch
lib/https.js
test/parallel/test-https-agent-checkserveridentity-reuse.js [new file with mode: 0644]