]> dgit.raspbian.org Git - nodejs.git/commit
Fix CVE-2024-24806
authorDebian Javascript Maintainers <pkg-javascript-devel@alioth-lists.debian.net>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
committerBastien Roucariès <rouca@debian.org>
Sun, 16 Aug 2026 17:34:06 +0000 (19:34 +0200)
commit4942c0aac147ac9de4ac2b31b330eeb0dee97a3e
tree2bdb1477209ee5879f99b6bbb2370504809c1442
parent690127c09ac77b1fceb6b17b1c12da57861ad6c3
Fix CVE-2024-24806

Bug: https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6
Bug-Debian: https://bugs.debian.org/1063484
Origin: https://github.com/libuv/libuv
 git diff v1.48.0~5..v1.48.0~2

From upstream change log:
   Merge pull request from GHSA-f74f-cvh7-c6q6
    * fix: always zero-terminate idna output
    * fix: reject zero-length idna inputs
    * test: empty strings are not valid IDNA

See also https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6
===================================================================

Gbp-Pq: Topic libuv
Gbp-Pq: Name fix-cve-2024-24806
deps/uv/src/idna.c