Skip to content

Commit 145c7da

Browse files
inoway46richardlau
inoway46
authored and
richardlau
committed
doc: list CVE-2026-106072 in v24 changelog
The non-canonical IP address fix also addresses CVE-2026-106072. Record both CVE IDs in the v24.22.1 notable changes. Refs: #66981 Assisted-by: a closed-source coding agent Signed-off-by: inoway46 <[email protected]> PR-URL: #66984 Fixes: #66981 Reviewed-By: Luigi Pinca <[email protected]>
1 parent a531093 commit 145c7da

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎doc/changelogs/CHANGELOG_V24.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -97,7 +97,7 @@ This is a security release.
9797
* (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
9898
* (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
9999
* (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
100-
* (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
100+
* (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina)
101101
* (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
102102
* (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
103103
* (CVE-2026-111497) src: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel)

0 commit comments

Comments
 (0)