]> dgit.raspbian.org Git - nodejs.git/commit
tls: normalize hostname for server identity checks
authorMatteo Collina <hello@matteocollina.com>
Mon, 11 May 2026 11:02:28 +0000 (13:02 +0200)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commit80d0539c37c352467670852992c5a870293e78ab
tree2a25bd84e59b3c0af40c93ecd6f365f4bb892967
parentce88da3f78e26ef1dd7c5ff50099cb6a8a40d0ff
tls: normalize hostname for server identity checks

Signed-off-by: Matteo Collina <hello@matteocollina.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/869
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/893
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
CVE-ID: CVE-2026-48618
Refs: https://hackerone.com/reports/3688064
origin: backport, https://github.com/nodejs/node/commit/2197a47144f3356ab451c5dcd858a49eb5957a70

Gbp-Pq: Topic sec
Gbp-Pq: Name CVE-2026-48618.patch
lib/tls.js
test/parallel/test-tls-check-server-identity.js