da967b7536
October 12th 2021 Security Releases: HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959) HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960) Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
29 lines
947 B
Diff
29 lines
947 B
Diff
Description: do not use dns.ADDRCONFIG for localhost
|
|
it fails on IPv6-only systems. Setting it with libc fails on linux.
|
|
https://github.com/nodejs/node/issues/33279
|
|
Author: Jérémy Lal <kapouer@melix.org>
|
|
Last-Update: 2020-06-11
|
|
Bug-Debian: https://bugs.debian.org/962318
|
|
Forwarded: https://github.com/nodejs/node/issues/33816
|
|
--- a/lib/net.js
|
|
+++ b/lib/net.js
|
|
@@ -1,4 +1,5 @@
|
|
// Copyright Joyent, Inc. and other Node contributors.
|
|
+
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a
|
|
// copy of this software and associated documentation files (the
|
|
@@ -1039,13 +1040,6 @@ function lookupAndConnect(self, options)
|
|
hints: options.hints || 0
|
|
};
|
|
|
|
- if (!isWindows &&
|
|
- dnsopts.family !== 4 &&
|
|
- dnsopts.family !== 6 &&
|
|
- dnsopts.hints === 0) {
|
|
- dnsopts.hints = dns.ADDRCONFIG;
|
|
- }
|
|
-
|
|
debug('connect: find host', host);
|
|
debug('connect: dns options', dnsopts);
|
|
self._host = host;
|