[Git][security-tracker-team/security-tracker][master] Nodejs triagging

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a7495ad by Bastien Roucariès at 2026-10-25T23:54:02+01:00
Nodejs triagging

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4035,17 +4035,20 @@ CVE-2026-102483 (Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remo
 CVE-2026-105482 (A flaw in Node.js DNS resolution allows hostnames containing a NUL byt ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#dnsresolve-truncates-names-containing-nul-char-cve-2026-105482---high
+	NOTE: Fixed by: https://github.com/nodejs/node/commit/19c505600222626bb1457a723418b2b8f9d6c400 (v22.23.4)
 CVE-2026-105483 (A flaw in Node.js TLS hostname verification allows a certificate witho ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#tls-certificate-hostname-bypass-when-the-ip-is-written-fullwidth-digits-cve-2026-105483---high
 CVE-2026-106069 (A flaw in Node.js TLS hostname verification can cause a server certifi ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#tls-certificate-hostname-bypass-when-the-host-loosely-resolves-to-an-ip-address-cve-2026-106069---high
+	NOTE: Fixed by: https://github.com/nodejs/node/commit/d7663560ac9e7bb4ddd659e3120c99a55490f18d (v22.23.4)
 CVE-2026-111497 (A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ...)
 	{DSA-6582-1 DLA-4855-1}
 	- brotli 1.2.0-4.1 (bug #1151690)
 	- nodejs <unfixed> (unimportant)
 	NOTE: nodejs uses system provided brotli library
+	NOTE: nodejs may need error constant define https://github.com/nodejs/node/commit/a18ec92752cd05ad5335bfaa5420a258b81f9afc
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
 	NOTE: Fixed by: https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 (v1.2.1)
 	NOTE: Fixed by: https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 (v1.1.1)
@@ -4056,6 +4059,7 @@ CVE-2026-105481 (A flaw in Node.js HTTP Agent connection reuse can cause a clien
 CVE-2026-106072 (A flaw in Node.js TLS hostname verification allows a certificate with  ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#improper-certificate-validation-for-non-canonical-ipv4-hostnames-allows-dns-sans-to-authenticate-ip-endpoints-cve-2026-106072---medium
+	NOTE: Fixed by: https://github.com/nodejs/node/commit/beb4cd4cd31c8a6726102baabf441cad93eae3b1 (v22.23.4)
 CVE-2026-106074 (A flaw in Node.js `crypto` causes the internal entropy caches used by  ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#cryptorandomuuid-and-randomint-entropy-caches-are-saved-into-user-land-startup-snapshots-and-seas-so-every-process-repeats-the-same-values-cve-2026-106074---medium
@@ -4068,6 +4072,7 @@ CVE-2026-106071 (A flaw in Node.js Permission Model filesystem enforcement can g
 CVE-2026-106073 (A flaw in Node.js Permission Model filesystem enforcement leaves `fs.r ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#permission-model-bypass-with-fsrealpathsync-cve-2026-106073---low
+	NOTE: Fixed by: https://github.com/nodejs/node/commit/50ab804edc82648b2b7681bda2f9af9316dfdfbb (v22.23.4)
 CVE-2026-112921 (Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report cli ...)
 	NOT-FOR-US: Robots::Validate Perl module
 CVE-2026-94423 (Net::LibSSH versions before 0.004 for Perl authenticate to an unverifi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a7495ad9bfb821a9ac24c0d25d96f55433e1def

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a7495ad9bfb821a9ac24c0d25d96f55433e1def
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/b3c7540e/attachment-0001.htm>