node-aix-ppc64 20.12.0 → 20.12.2

package/CHANGELOG.md

@@ -9,6 +9,8 @@
 </tr>
 <tr>
 <td>
+<a href="#20.12.2">20.12.2</a><br/>
+<a href="#20.12.1">20.12.1</a><br/>
 <a href="#20.12.0">20.12.0</a><br/>
 <a href="#20.11.1">20.11.1</a><br/>
 <a href="#20.11.0">20.11.0</a><br/>
@@ -55,6 +57,39 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="20.12.2"></a>
+
+## 2024-04-10, Version 20.12.2 'Iron' (LTS), @RafaelGSS
+
+This is a security release.
+
+### Notable Changes
+
+* CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows
+
+### Commits
+
+* \[[`69ffc6d50d`](https://github.com/nodejs/node/commit/69ffc6d50d)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#563](https://github.com/nodejs-private/node-private/pull/563)
+
+<a id="20.12.1"></a>
+
+## 2024-04-03, Version 20.12.1 'Iron' (LTS), @RafaelGSS
+
+This is a security release
+
+### Notable Changes
+
+* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
+* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
+* llhttp version 9.2.1
+* undici version 5.28.4
+
+### Commits
+
+* \[[`bd8f10a257`](https://github.com/nodejs/node/commit/bd8f10a257)] - **deps**: update undici to v5.28.4 (Matteo Collina) [nodejs-private/node-private#576](https://github.com/nodejs-private/node-private/pull/576)
+* \[[`5e34540a96`](https://github.com/nodejs/node/commit/5e34540a96)] - **http**: do not allow OBS fold in headers by default (Paolo Insogna) [nodejs-private/node-private#557](https://github.com/nodejs-private/node-private/pull/557)
+* \[[`ba1ae6d188`](https://github.com/nodejs/node/commit/ba1ae6d188)] - **src**: ensure to close stream when destroying session (Anna Henningsen) [nodejs-private/node-private#561](https://github.com/nodejs-private/node-private/pull/561)
+
 <a id="20.12.0"></a>
 
 ## 2024-03-26, Version 20.12.0 'Iron' (LTS), @richardlau

package/include/node/node.exp

@@ -5979,22 +5979,22 @@ _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeE
 _GLOBAL__F__ZN2v88internal6torque9KytheData21AddConstantDefinitionEPKNS1_5ValueE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0xeb91e1b7f70b1fa2
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x3e6e88835bdfbb55
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xaedb61fb502af975
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0x6e68e63fc8fc380b
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0xd3fc60661be8d74e
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x4f5468b07f01879a
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0xdddfca83b4f2c8cd
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x3b8d2cd1c45988ea
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x4ebd83d29dbbccc9
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x8b7facfba32465de
-_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0x1573be5f871753e1
-_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0x43444ac407787989
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0xec4eddfd09d24fb5
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0x5f35696026bc1369
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0xc155b77a570f8ab6
-_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0xc3131ad437c08222
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0xa94332e700e3409f
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x53bc003f07df5865
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0x6906083918a32278
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0x21a1de5dee7dddd0
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0xa319e6fbcc672850
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x6bf277f05349d769
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0xf78df6f565e6935f
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x9fc67c0d26d21e72
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0xd0315dbbe13d06b1
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x2420e40a1c14b442
+_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0x4d8e5191ae5a3b41
+_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0xf0f16642b7718754
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0x3cb3cb43740fa53b
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0x37baf84025b4f1da
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0x2f88e086275d0889
+_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0x2ec60ec31775262d
 _GLOBAL__I_65535_0_OPENSSL_ppccap_P
 _GLOBAL__I_65535_0__Z16_register_configv
 _GLOBAL__I_65535_0__Z17_register_symbolsv
@@ -7087,9 +7087,9 @@ _GLOBAL__I_65535_0__ZNK4node3url11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _GLOBAL__I_65535_0__ZNK4node4quic10TLSContext4sideEv
 _GLOBAL__I_65535_0__ZNK4node4quic6Packet11destinationEv
 _GLOBAL__I_65535_0__ZNK7simdutf14implementation27supported_by_runtime_systemEv
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0xc6b8769384558ffb
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0x60bc37a8b4f34901
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0xf2804cd2f64608f5
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0xc322cd40fe750f30
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0xaa332b653296bcba
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0xc1d0f3dd61224282
 _GLOBAL__I_65535_0_nodedbg_const_ContextEmbedderIndex__kEnvironment__int
 _GLOBAL__I_65535_0_v8dbg_frametype_EntryFrame
 _HZData_74
@@ -81676,9 +81676,9 @@ llhttp__internal__c_test_flags_2
 llhttp__internal__c_test_flags_3
 llhttp__internal__c_test_lenient_flags
 llhttp__internal__c_test_lenient_flags_1
-llhttp__internal__c_test_lenient_flags_10
+llhttp__internal__c_test_lenient_flags_11
 llhttp__internal__c_test_lenient_flags_2
-llhttp__internal__c_test_lenient_flags_8
+llhttp__internal__c_test_lenient_flags_9
 llhttp__internal__c_update_content_length
 llhttp__internal__c_update_finish
 llhttp__internal__c_update_finish_1

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 20
 #define NODE_MINOR_VERSION 12
-#define NODE_PATCH_VERSION 0
+#define NODE_PATCH_VERSION 2
 
 #define NODE_VERSION_IS_LTS 1
 #define NODE_VERSION_LTS_CODENAME "Iron"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-aix-ppc64",
-  "version": "v20.12.0",
+  "version": "v20.12.2",
   "description": "node",
   "bin": {
     "node": "bin/node"