node-aix-ppc64 22.4.0 → 22.4.1

package/CHANGELOG.md

@@ -8,6 +8,7 @@
 </tr>
 <tr>
 <td>
+<a href="#22.4.1">22.4.1</a><br/>
 <a href="#22.4.0">22.4.0</a><br/>
 <a href="#22.3.0">22.3.0</a><br/>
 <a href="#22.2.0">22.2.0</a><br/>
@@ -41,6 +42,28 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="22.4.1"></a>
+
+## 2024-07-08, Version 22.4.1 (Current), @RafaelGSS
+
+This is a security release.
+
+### Notable Changes
+
+* CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
+* CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
+* CVE-2024-22018 - fs.lstat bypasses permission model (Low)
+* CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
+* CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
+
+### Commits
+
+* \[[`110902ff5e`](https://github.com/nodejs/node/commit/110902ff5e)] - **lib,esm**: handle bypass network-import via data: (RafaelGSS) [nodejs-private/node-private#522](https://github.com/nodejs-private/node-private/pull/522)
+* \[[`0a0de3d491`](https://github.com/nodejs/node/commit/0a0de3d491)] - **lib,permission**: support fs.lstat (RafaelGSS)
+* \[[`93574335ff`](https://github.com/nodejs/node/commit/93574335ff)] - **lib,permission**: disable fchmod/fchown when pm enabled (RafaelGSS) [nodejs-private/node-private#584](https://github.com/nodejs-private/node-private/pull/584)
+* \[[`09899e6302`](https://github.com/nodejs/node/commit/09899e6302)] - **src**: handle permissive extension on cmd check (RafaelGSS) [nodejs-private/node-private#596](https://github.com/nodejs-private/node-private/pull/596)
+* \[[`5d9c811634`](https://github.com/nodejs/node/commit/5d9c811634)] - **src,permission**: fix UNC path resolution (RafaelGSS) [nodejs-private/node-private#581](https://github.com/nodejs-private/node-private/pull/581)
+
 <a id="22.4.0"></a>
 
 ## 2024-07-02, Version 22.4.0 (Current), @targos

package/include/node/node.exp

@@ -5989,27 +5989,27 @@ _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeE
 _GLOBAL__F__ZN2v88internal6torque9KytheData21AddConstantDefinitionEPKNS1_5ValueE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_common_ptr_compr.cc_BFF00FE3_0x960c61910d2bcdfe
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0xbee986d71cf06ffa
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_sidetable.cc_6EE78FAE_0x7444ae98e88624f
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0xdc30a3a6ad6911cc
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xc952ad80a230d1d3
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_DFF67DD7_0xf73e8c0136bfd312
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0xc12823138683bf1c
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_E21CEA7D_0x5915a296bf594b87
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_6EE78FAE_0xf54715bbe3fe4f8b
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_E21CEA7D_0xadf8b98836cac522
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x30e4308189d1ed9a
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0xe5f1bb661e3d4f07
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_trusted_range.cc_7874F2D3_0x39182b79f6e339c4
-_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_BFF00FE3_0x247bb223dc908a5
-_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0xce617811800832e7
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_code_pointer_table.cc_E21CEA7D_0x6c89caa5afd263ed
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_E21CEA7D_0x2ee69f41c5599282
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_BFF00FE3_0xc80f82ae5784deea
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0xbe2fe68ce29cacac
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_trusted_pointer_table.cc_E21CEA7D_0x8cc6988f8ac90839
-_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0x714206966796639e
+_GLOBAL__I_65535_0_.._deps_v8_src_common_ptr_compr.cc_BFF00FE3_0x535f740e30a7d99
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0x400bc780d5528460
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_sidetable.cc_6EE78FAE_0x4f2574f42cbfd99e
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0xd113a3c8675b07e1
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xf8e96fc1e8acf55c
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_DFF67DD7_0x73d9a0a253fcb6fe
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0x46b5e37aeb8c728e
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_E21CEA7D_0x41371aed00cbc313
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_6EE78FAE_0x8b1321a89c486ddb
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_E21CEA7D_0xa1dd23d60ef0b0f5
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x1dba925de8c53987
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x179be21b23004538
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_trusted_range.cc_7874F2D3_0x13cce3fb5ae6072a
+_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_BFF00FE3_0x495379ecad63c515
+_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0xa64454c740793eae
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_code_pointer_table.cc_E21CEA7D_0xdf10cfd1f8986891
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_E21CEA7D_0x7538213fbdaf9df1
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_BFF00FE3_0x16d255ce1b1bcefb
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0x41df37448a97d4d2
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_trusted_pointer_table.cc_E21CEA7D_0x18680b2cec3609fc
+_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0x62375e60e8eeb5aa
 _GLOBAL__I_65535_0_OPENSSL_ppccap_P
 _GLOBAL__I_65535_0__Z16_register_configv
 _GLOBAL__I_65535_0__Z17_register_symbolsv
@@ -7193,18 +7193,18 @@ _GLOBAL__I_65535_0__ZNK4node3sea11SeaResource12use_snapshotEv
 _GLOBAL__I_65535_0__ZNK4node3url11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _GLOBAL__I_65535_0__ZNK4node4quic14PathDescriptor8ToStringB5cxx11Ev
 _GLOBAL__I_65535_0__ZNK4node7modules11BindingData10MemoryInfoEPNS_13MemoryTrackerE
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x4b61556b7ed78a46
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_E21CEA7D_0x40e41e2397a2fa8f
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_bytecode_array_tq.cc_7874F2D3_0xc0c5005c54eb40c8
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_heap_number_tq.cc_7874F2D3_0x51d2223ac3ed2d9a
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_hole_tq.cc_7874F2D3_0x49b14e6decf8fe5a
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_name_tq.cc_BFF00FE3_0x1964cc0e8e7df7a7
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_oddball_tq.cc_7874F2D3_0x5ab86e3510c9d1a5
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_primitive_heap_object_tq.cc_7874F2D3_0xfaab98a814a4c605
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_regexp_match_info_tq.cc_E21CEA7D_0xfad0c9bcd2567a9c
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_string_tq.cc_E21CEA7D_0xa31980a8d7d27872
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0x8e9fd70cf9308a29
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_trusted_object_tq.cc_7874F2D3_0xbea6e5cbe733f0ef
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x9de5a4e1ed159dd9
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_E21CEA7D_0x93df2706c658984
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_bytecode_array_tq.cc_7874F2D3_0x4716557302907fa2
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_heap_number_tq.cc_7874F2D3_0xfce9e6684622ca14
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_hole_tq.cc_7874F2D3_0xcaa19d7e9fb88def
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_name_tq.cc_BFF00FE3_0xbec3ea7c9b69ade3
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_oddball_tq.cc_7874F2D3_0x48a8ae6a9bee9be7
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_primitive_heap_object_tq.cc_7874F2D3_0xbe60926b238cce19
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_regexp_match_info_tq.cc_E21CEA7D_0xbb3da8ab76826ecc
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_string_tq.cc_E21CEA7D_0xf653febee91cc774
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0x69f41d8c0fb0bf33
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_trusted_object_tq.cc_7874F2D3_0xbd8314243ab36ffd
 _GLOBAL__I_65535_0_nodedbg_const_ContextEmbedderIndex__kEnvironment__int
 _GLOBAL__I_65535_0_v8dbg_frametype_EntryFrame
 _HZData_75
@@ -60728,7 +60728,6 @@ _ZN4node10JSONWriter12write_stringESt17basic_string_viewIcSt11char_traitsIcEE
 _ZN4node10JSONWriter13json_arrayendEv
 _ZN4node10JSONWriter13json_keyvalueIA10_cA256_cEEvRKT_RKT0_
 _ZN4node10JSONWriter13json_keyvalueIA11_cmEEvRKT_RKT0_
-_ZN4node10JSONWriter13json_keyvalueIA12_cmEEvRKT_RKT0_
 _ZN4node10JSONWriter13json_keyvalueIA15_cmEEvRKT_RKT0_
 _ZN4node10JSONWriter13json_keyvalueIA19_cmEEvRKT_RKT0_
 _ZN4node10JSONWriter13json_keyvalueIA4_cmEEvRKT_RKT0_
@@ -62045,7 +62044,6 @@ _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm1024EE25AllocateSufficientS
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm128EE25AllocateSufficientStorageEm
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm16EE25AllocateSufficientStorageEm
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm256EE25AllocateSufficientStorageEm
-_ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm32EE25AllocateSufficientStorageEm
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm5EE25AllocateSufficientStorageEm
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm64EE25AllocateSufficientStorageEm
 _ZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm8EE25AllocateSufficientStorageEm
@@ -82768,6 +82766,7 @@ _ZNKSt10_HashtableIN2v88internal8compiler10turboshaft7OpIndexESt4pairIKS4_NS1_4w
 _ZNKSt10_HashtableIN2v88internal8compiler14FeedbackSourceESt4pairIKS3_PKNS2_17ProcessedFeedbackEENS1_13ZoneAllocatorIS9_EENSt8__detail10_Select1stENS3_5EqualENS3_4HashENSC_18_Mod_range_hashingENSC_20_Default_ranged_hashENSC_20_Prime_rehash_policyENSC_17_Hashtable_traitsILb1ELb0ELb1EEEE4findERS5_
 _ZNKSt10_HashtableIN2v88internal9SignatureINS1_4wasm9ValueTypeEEESt4pairIKS5_jENS1_13ZoneAllocatorIS8_EENSt8__detail10_Select1stESt8equal_toIS5_ENS0_4base4hashIS5_EENSB_18_Mod_range_hashingENSB_20_Default_ranged_hashENSB_20_Prime_rehash_policyENSB_17_Hashtable_traitsILb1ELb0ELb1EEEE19_M_find_before_nodeEmRS7_m
 _ZNKSt10_HashtableIN4node13SocketAddressESt4pairIKS1_St14_List_iteratorIS2_IS1_NS0_4quic8Endpoint23SocketAddressInfoTraits4TypeEEEESaISB_ENSt8__detail10_Select1stESt8equal_toIS1_ENS1_4HashENSD_18_Mod_range_hashingENSD_20_Default_ranged_hashENSD_20_Prime_rehash_policyENSD_17_Hashtable_traitsILb1ELb0ELb1EEEE4findERS3_
+_ZNKSt10_HashtableIN4node4quic3CIDESt4pairIKS2_S2_ESaIS5_ENSt8__detail10_Select1stESt8equal_toIS2_ENS2_4HashENS7_18_Mod_range_hashingENS7_20_Default_ranged_hashENS7_20_Prime_rehash_policyENS7_17_Hashtable_traitsILb1ELb0ELb1EEEE19_M_find_before_nodeEmRS4_m
 _ZNKSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10unique_ptrIN4node9inspector8protocol5ValueESt14default_deleteISC_EEESaISG_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSI_18_Mod_range_hashingENSI_20_Default_ranged_hashENSI_20_Prime_rehash_policyENSI_17_Hashtable_traitsILb1ELb0ELb1EEEE4findERS7_
 _ZNKSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St6vectorIS5_SaIS5_EEESaISB_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSD_18_Mod_range_hashingENSD_20_Default_ranged_hashENSD_20_Prime_rehash_policyENSD_17_Hashtable_traitsILb1ELb0ELb1EEEE4findERS7_
 _ZNKSt10_HashtableIPKN2v88internal8compiler10turboshaft5BlockESt4pairIKS6_NS3_10LoopFinder8LoopInfoEENS1_13ZoneAllocatorISB_EENSt8__detail10_Select1stESt8equal_toIS6_ENS0_4base4hashIS6_EENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_policyENSE_17_Hashtable_traitsILb1ELb0ELb1EEEE4findERS8_
@@ -93306,7 +93305,6 @@ _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm16EE25AllocateSufficientSt
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm16EEixEmE4args
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm256EE25AllocateSufficientStorageEmE4args
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm256EEixEmE4args
-_ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm32EE25AllocateSufficientStorageEmE4args
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm32EEixEmE4args
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm5EE25AllocateSufficientStorageEmE4args
 _ZZN4node16MaybeStackBufferIN2v85LocalINS1_5ValueEEELm5EEixEmE4args

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 22
 #define NODE_MINOR_VERSION 4
-#define NODE_PATCH_VERSION 0
+#define NODE_PATCH_VERSION 1
 
 #define NODE_VERSION_IS_LTS 0
 #define NODE_VERSION_LTS_CODENAME ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-aix-ppc64",
-  "version": "v22.4.0",
+  "version": "v22.4.1",
   "description": "node",
   "bin": {
     "node": "bin/node"