diff options
| author | Hirokazu MORIKAWA <morikw2@gmail.com> | 2021-07-06 13:49:15 +0900 |
|---|---|---|
| committer | Hirokazu MORIKAWA <morikw2@gmail.com> | 2021-07-06 13:49:15 +0900 |
| commit | aaa46eb44e8e341c0c38bc535a45d8f91fabe304 (patch) | |
| tree | c065c6f815efdd3042e8a8f14dbe622b5b85e743 /lang/python/python-defusedxml | |
| parent | 194e7f0286b880b34f62a5d6b556753fa1aa470e (diff) | |
libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder
libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.
https://github.com/libuv/libuv/commit/b7466e31e4bee160d82a68fca11b1f61d46debae
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Diffstat (limited to 'lang/python/python-defusedxml')
0 files changed, 0 insertions, 0 deletions