From ca3209a3b35cd80de39f9f4f2a263211191807cb Mon Sep 17 00:00:00 2001 From: Hirokazu MORIKAWA Date: Sun, 7 Apr 2024 11:34:45 +0900 Subject: node: April 3, 2024 Security Releases This is a security release Notable Changes * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High) * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium) * llhttp version 9.2.1 * undici version 5.28.4 Changed to use gz according to main-snapshot Signed-off-by: Hirokazu MORIKAWA --- lang/node/patches/999-localhost-no-addrconfig.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lang/node/patches/999-localhost-no-addrconfig.patch') diff --git a/lang/node/patches/999-localhost-no-addrconfig.patch b/lang/node/patches/999-localhost-no-addrconfig.patch index 092dc0de3..3b24ce12f 100644 --- a/lang/node/patches/999-localhost-no-addrconfig.patch +++ b/lang/node/patches/999-localhost-no-addrconfig.patch @@ -13,7 +13,7 @@ Forwarded: https://github.com/nodejs/node/issues/33816 // // Permission is hereby granted, free of charge, to any person obtaining a // copy of this software and associated documentation files (the -@@ -1330,13 +1331,6 @@ function lookupAndConnect(self, options) +@@ -1337,13 +1338,6 @@ function lookupAndConnect(self, options) hints: options.hints || 0, }; -- cgit v1.2.3