packages/200-uv_gyp.patch at master - packages - Sirherobrine23

Openwrt/packages

mirror of https://github.com/openwrt/packages.git synced 2025-01-31 03:41:44 +00:00

Hirokazu MORIKAWA 643afd8977 node: January 21, 2025 Security Releases

This is a security release.

Notable Changes

    CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

2025-01-24 15:55:15 +08:00

11 lines

294 B

Diff

Raw Permalink Blame History

 --- a/deps/uv/uv.gyp
 +++ b/deps/uv/uv.gyp
@@ -156,6 +156,7 @@
        'target_name': 'libuv',
        'toolsets': ['host', 'target'],
        'type': '<(uv_library)',
 +      'include_dirs!': [ '<!@(echo "$STAGING_DIR"/usr/include)' ],
        'include_dirs': [
          'include',
          'src/',