mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
a00374d53c
See the release notes: - https://github.com/nodejs/node/releases/tag/v22.23.2 - https://github.com/nodejs/node/releases/tag/v22.23.1 - https://github.com/nodejs/node/releases/tag/v22.22.1 - https://github.com/nodejs/node/releases/tag/v22.22.2 - https://github.com/nodejs/node/releases/tag/v22.22.3 It fixes the following vulnerabilities: - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low - (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low The LICENSE was changed in 22.22.1, see [1]. [1]9cafec084eSigned-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr> (cherry picked from commit6f5d678c37) Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>