]> dgit.raspbian.org Git - nodejs.git/commit
[PATCH] dns: handle large resolveAny address replies
authorRafaelGSS <rafael.nunu@hotmail.com>
Sun, 19 Jul 2026 14:38:25 +0000 (11:38 -0300)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commit7b8094d2aa8310338ba31050453d5d2fdec5e2f7
tree1462de070deaddbe03d8cbbfba156a798c1378c2
parentcc6967f7ff785a9d69ec6d3bd0c777288f6f9164
[PATCH] dns: handle large resolveAny address replies

Refs: https://hackerone.com/reports/3795657
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/929
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
CVE-ID: CVE-2026-58042

[backport]
- remove test that fail due to lack of EDNS by default on node18

Gbp-Pq: Topic sec
Gbp-Pq: Name CVE-2026-58042.patch
src/cares_wrap.cc