rpms/git-lfs
9
0
Fork 0
Code Issues Pull requests Releases Activity
0 releases 78 tags
  • imports/c10s/git-lfs-3.7.1-6.el10 f4128a54b0

    Fix CVE-2026-39821 in vendored golang.org/x/net/idna package

    Ghost released this 2026-07-22 08:11:59 +00:00 | -79 commits to c8 since this release

    Backport upstream commit 8c4c965e028475082408749b50ed7a686df0d265
    from github.com/golang/net to fix CVE-2026-39821 in the vendored
    golang.org/x/net/idna package.

    The fix causes the idna package to correctly reject xn-- labels
    which decode to all-ASCII labels, addressing a specification bug
    corrected in UTS 46 revision 33. The patch modifies 13 files in
    the vendored idna package, removing obsolete version-specific
    files and updating core functionality.

    CVE: CVE-2026-33811, CVE-2026-39821
    Upstream patches:

    This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

    Assisted-by: Ymir

    Downloads