node-aix-ppc64 20.15.0 → 20.15.1

package/CHANGELOG.md

@@ -9,6 +9,7 @@
 </tr>
 <tr>
 <td>
+<a href="#20.15.1">20.15.1</a><br/>
 <a href="#20.15.0">20.15.0</a><br/>
 <a href="#20.14.0">20.14.0</a><br/>
 <a href="#20.13.1">20.13.1</a><br/>
@@ -61,6 +62,29 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="20.15.1"></a>
+
+## 2024-07-08, Version 20.15.1 'Iron' (LTS), @RafaelGSS
+
+This is a security release.
+
+### Notable Changes
+
+* CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
+* CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
+* CVE-2024-22018 - fs.lstat bypasses permission model (Low)
+* CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
+* CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
+
+### Commits
+
+* \[[`60e184a6e4`](https://github.com/nodejs/node/commit/60e184a6e4)] - **lib,esm**: handle bypass network-import via data: (RafaelGSS) [nodejs-private/node-private#522](https://github.com/nodejs-private/node-private/pull/522)
+* \[[`025cbd6936`](https://github.com/nodejs/node/commit/025cbd6936)] - **lib,permission**: support fs.lstat (RafaelGSS) [nodejs-private/node-private#486](https://github.com/nodejs-private/node-private/pull/486)
+* \[[`d38ea17341`](https://github.com/nodejs/node/commit/d38ea17341)] - **lib,permission**: disable fchmod/fchown when pm enabled (RafaelGSS) [nodejs-private/node-private#584](https://github.com/nodejs-private/node-private/pull/584)
+* \[[`1ba624cd3b`](https://github.com/nodejs/node/commit/1ba624cd3b)] - **src**: handle permissive extension on cmd check (RafaelGSS) [nodejs-private/node-private#596](https://github.com/nodejs-private/node-private/pull/596)
+* \[[`2524d00c3d`](https://github.com/nodejs/node/commit/2524d00c3d)] - **src,permission**: fix UNC path resolution (RafaelGSS) [nodejs-private/node-private#581](https://github.com/nodejs-private/node-private/pull/581)
+* \[[`484cb0f13c`](https://github.com/nodejs/node/commit/484cb0f13c)] - **src,permission**: resolve path on fs\_permission (Rafael Gonzaga) [#52761](https://github.com/nodejs/node/pull/52761)
+
 <a id="20.15.0"></a>
 
 ## 2024-06-20, Version 20.15.0 'Iron' (LTS), @marco-ippolito

package/include/node/node.exp

@@ -5979,22 +5979,22 @@ _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeE
 _GLOBAL__F__ZN2v88internal6torque9KytheData21AddConstantDefinitionEPKNS1_5ValueE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0xf618be405cf34fa0
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x1adfa4623bcc7525
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xd990a6be4c336cdb
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0x540b917ef63dcd25
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0x9d9eed3a1d8c7ff6
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0xa085b63cccfb6596
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0x1bcb7d38d72406bd
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0xbdaffaefd3db4fdb
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0xf4893108e906fab1
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x473312408c65a804
-_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0xa8af8c619fb7d5f0
-_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0x84c714c182e02dc
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0xabbc5b639b3cd624
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0xb00cd82c56d4a3eb
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0xb3c1619980eaa8f5
-_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0xa9eb09a182ca4e1c
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0xcc97226d936997d1
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x408791eee820a73
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0x844832a9e6ca385e
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0x31da12625b21f792
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0x259b9abfae1af239
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x6a65e794cc63090e
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0x15d3de63f77aecf7
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0xf577e173f89041a3
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0xe63cbfa256763e48
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0xb45b50767ae914ce
+_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0x4940819539b1c499
+_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0x6272ee520d192adb
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0x127af1290765d7a4
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0x38ad74b1792dfdb2
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0xa8e952323324e7f
+_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0x8daf8ec954c7d91f
 _GLOBAL__I_65535_0_OPENSSL_ppccap_P
 _GLOBAL__I_65535_0__Z16_register_configv
 _GLOBAL__I_65535_0__Z17_register_symbolsv
@@ -7086,9 +7086,9 @@ _GLOBAL__I_65535_0__ZNK4node3sea11SeaResource12use_snapshotEv
 _GLOBAL__I_65535_0__ZNK4node3url11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _GLOBAL__I_65535_0__ZNK4node4quic10TLSContext4sideEv
 _GLOBAL__I_65535_0__ZNK4node4quic6Packet11destinationEv
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x1bd25e1080e8963e
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0xdefbeb74d568733
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0x306b58dcdb94f83b
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x467e524e78418702
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0xe6a673d6c3e0cd4a
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0xa3919e38b0882c68
 _GLOBAL__I_65535_0_nodedbg_const_ContextEmbedderIndex__kEnvironment__int
 _GLOBAL__I_65535_0_v8dbg_frametype_EntryFrame
 _HZData_75
@@ -68205,12 +68205,12 @@ _ZNK4node10contextify17ContextifyContext8SelfSizeEv
 _ZNK4node10mksnapshot11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _ZNK4node10mksnapshot11BindingData14MemoryInfoNameEv
 _ZNK4node10mksnapshot11BindingData8SelfSizeEv
-_ZNK4node10permission10Permission16is_scope_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
-_ZNK4node10permission12FSPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZNK4node10permission10Permission16is_scope_grantedEPNS_11EnvironmentENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZNK4node10permission12FSPermission10is_grantedEPNS_11EnvironmentENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
 _ZNK4node10permission12FSPermission9RadixTree6LookupERKSt17basic_string_viewIcSt11char_traitsIcEEb
-_ZNK4node10permission16WorkerPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
-_ZNK4node10permission19InspectorPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
-_ZNK4node10permission22ChildProcessPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZNK4node10permission16WorkerPermission10is_grantedEPNS_11EnvironmentENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZNK4node10permission19InspectorPermission10is_grantedEPNS_11EnvironmentENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZNK4node10permission22ChildProcessPermission10is_grantedEPNS_11EnvironmentENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
 _ZNK4node11ConnectWrap10MemoryInfoEPNS_13MemoryTrackerE
 _ZNK4node11ConnectWrap14MemoryInfoNameEv
 _ZNK4node11ConnectWrap8SelfSizeEv

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 20
 #define NODE_MINOR_VERSION 15
-#define NODE_PATCH_VERSION 0
+#define NODE_PATCH_VERSION 1
 
 #define NODE_VERSION_IS_LTS 1
 #define NODE_VERSION_LTS_CODENAME "Iron"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-aix-ppc64",
-  "version": "v20.15.0",
+  "version": "v20.15.1",
   "description": "node",
   "bin": {
     "node": "bin/node"