node-linux-arm64 14.21.0 → 14.21.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +117 -0
- package/LICENSE +123 -50
- package/bin/node +0 -0
- package/include/node/common.gypi +1 -1
- package/include/node/config.gypi +2 -1
- package/include/node/js_native_api.h +2 -0
- package/include/node/js_native_api_types.h +2 -1
- package/include/node/node_api.h +2 -0
- package/include/node/node_version.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/BSD-x86/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN64-ARM/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64-ARM/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/aix-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-armv4/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-elf/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x32/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x32/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x32/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x32/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x32/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x32/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/include/progs.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/include/progs.h +1 -1
- package/include/node/openssl/bnerr.h +2 -1
- package/include/node/openssl/cmserr.h +1 -0
- package/include/node/openssl/opensslv.h +2 -2
- package/include/node/openssl/x509v3.h +2 -2
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -11,6 +11,9 @@
|
|
|
11
11
|
</tr>
|
|
12
12
|
<tr>
|
|
13
13
|
<td valign="top">
|
|
14
|
+
<a href="#14.21.3">14.21.3</a><br/>
|
|
15
|
+
<a href="#14.21.2">14.21.2</a><br/>
|
|
16
|
+
<a href="#14.21.1">14.21.1</a><br/>
|
|
14
17
|
<a href="#14.21.0">14.21.0</a><br/>
|
|
15
18
|
<a href="#14.20.1">14.20.1</a><br/>
|
|
16
19
|
<a href="#14.20.0">14.20.0</a><br/>
|
|
@@ -76,6 +79,120 @@
|
|
|
76
79
|
* [io.js](CHANGELOG_IOJS.md)
|
|
77
80
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
78
81
|
|
|
82
|
+
<a id="14.21.3"></a>
|
|
83
|
+
|
|
84
|
+
## 2023-02-16, Version 14.21.3 'Fermium' (LTS), @richardlau
|
|
85
|
+
|
|
86
|
+
This is a security release.
|
|
87
|
+
|
|
88
|
+
### Notable Changes
|
|
89
|
+
|
|
90
|
+
The following CVEs are fixed in this release:
|
|
91
|
+
|
|
92
|
+
* **[CVE-2023-23918](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23918)**: Node.js Permissions policies can be bypassed via process.mainModule (High)
|
|
93
|
+
* **[CVE-2023-23920](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23920)**: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
|
|
94
|
+
|
|
95
|
+
More detailed information on each of the vulnerabilities can be found in [February 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/) blog post.
|
|
96
|
+
|
|
97
|
+
This security release includes OpenSSL security updates as outlined in the recent
|
|
98
|
+
[OpenSSL security advisory](https://www.openssl.org/news/secadv/20230207.txt).
|
|
99
|
+
|
|
100
|
+
This security release also includes an npm update for Node.js 14 to address a number
|
|
101
|
+
of CVEs which either do not affect Node.js or are low severity in the context of Node.js. You
|
|
102
|
+
can get more details for the individual CVEs in
|
|
103
|
+
[nodejs-dependency-vuln-assessments](https://github.com/nodejs/nodejs-dependency-vuln-assessments).
|
|
104
|
+
|
|
105
|
+
### Commits
|
|
106
|
+
|
|
107
|
+
* \[[`97a0443f13`](https://github.com/nodejs/node/commit/97a0443f13)] - **build**: build ICU with ICU\_NO\_USER\_DATA\_OVERRIDE (RafaelGSS) [nodejs-private/node-private#374](https://github.com/nodejs-private/node-private/pull/374)
|
|
108
|
+
* \[[`9e6221529b`](https://github.com/nodejs/node/commit/9e6221529b)] - **deps**: cherry-pick Windows ARM64 fix for openssl (Richard Lau) [#46566](https://github.com/nodejs/node/pull/46566)
|
|
109
|
+
* \[[`0d5f86451d`](https://github.com/nodejs/node/commit/0d5f86451d)] - **deps**: update archs files for OpenSSL-1.1.1t (RafaelGSS) [#46566](https://github.com/nodejs/node/pull/46566)
|
|
110
|
+
* \[[`8c11d17b40`](https://github.com/nodejs/node/commit/8c11d17b40)] - **deps**: upgrade openssl sources to 1.1.1t (RafaelGSS) [#46566](https://github.com/nodejs/node/pull/46566)
|
|
111
|
+
* \[[`224e93c9ef`](https://github.com/nodejs/node/commit/224e93c9ef)] - **deps**: upgrade npm to 6.14.18 (Ruy Adorno) [#45936](https://github.com/nodejs/node/pull/45936)
|
|
112
|
+
* \[[`d73ea4de13`](https://github.com/nodejs/node/commit/d73ea4de13)] - **doc**: clarify release notes for Node.js 14.21.2 (Richard Lau) [#45846](https://github.com/nodejs/node/pull/45846)
|
|
113
|
+
* \[[`f7892c16be`](https://github.com/nodejs/node/commit/f7892c16be)] - **lib**: makeRequireFunction patch when experimental policy (RafaelGSS) [nodejs-private/node-private#358](https://github.com/nodejs-private/node-private/pull/358)
|
|
114
|
+
* \[[`fa115ee8ac`](https://github.com/nodejs/node/commit/fa115ee8ac)] - **module**: protect against prototype mutation (Antoine du Hamel) [#44007](https://github.com/nodejs/node/pull/44007)
|
|
115
|
+
* \[[`83975b7fb4`](https://github.com/nodejs/node/commit/83975b7fb4)] - **policy**: makeRequireFunction on mainModule.require (RafaelGSS) [nodejs-private/node-private#358](https://github.com/nodejs-private/node-private/pull/358)
|
|
116
|
+
* \[[`a5f8798d7a`](https://github.com/nodejs/node/commit/a5f8798d7a)] - **test**: avoid left behind child processes (Richard Lau) [#46276](https://github.com/nodejs/node/pull/46276)
|
|
117
|
+
|
|
118
|
+
<a id="14.21.2"></a>
|
|
119
|
+
|
|
120
|
+
## 2022-12-13, Version 14.21.2 'Fermium' (LTS), @richardlau
|
|
121
|
+
|
|
122
|
+
### Notable Changes
|
|
123
|
+
|
|
124
|
+
#### OpenSSL 1.1.1s
|
|
125
|
+
|
|
126
|
+
This OpenSSL version does not address any security vulnerabilities.
|
|
127
|
+
|
|
128
|
+
#### Root certificates updated to NSS 3.85
|
|
129
|
+
|
|
130
|
+
Certificates added:
|
|
131
|
+
* Autoridad de Certificacion Firmaprofesional CIF A62634068
|
|
132
|
+
* Certainly Root E1
|
|
133
|
+
* Certainly Root R1
|
|
134
|
+
* D-TRUST BR Root CA 1 2020
|
|
135
|
+
* D-TRUST EV Root CA 1 2020
|
|
136
|
+
* DigiCert TLS ECC P384 Root G5
|
|
137
|
+
* DigiCert TLS RSA4096 Root G5
|
|
138
|
+
* E-Tugra Global Root CA ECC v3
|
|
139
|
+
* E-Tugra Global Root CA RSA v3
|
|
140
|
+
* HiPKI Root CA - G1
|
|
141
|
+
* ISRG Root X2
|
|
142
|
+
* Security Communication ECC RootCA1
|
|
143
|
+
* Security Communication RootCA3
|
|
144
|
+
* Telia Root CA v2
|
|
145
|
+
* vTrus ECC Root CA
|
|
146
|
+
* vTrus Root CA
|
|
147
|
+
|
|
148
|
+
Certificates removed:
|
|
149
|
+
* Cybertrust Global Root
|
|
150
|
+
* DST Root CA X3
|
|
151
|
+
* GlobalSign Root CA - R2
|
|
152
|
+
* Hellenic Academic and Research Institutions RootCA 2011
|
|
153
|
+
|
|
154
|
+
#### Time zone update to 2022f
|
|
155
|
+
|
|
156
|
+
Time zone data has been updated to 2022f. This includes changes to Daylight
|
|
157
|
+
Savings Time (DST) for Fiji and Mexico. For more information, see
|
|
158
|
+
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
|
|
159
|
+
|
|
160
|
+
### Commits
|
|
161
|
+
|
|
162
|
+
* \[[`436a596e99`](https://github.com/nodejs/node/commit/436a596e99)] - **crypto**: update root certificates (Luigi Pinca) [#45490](https://github.com/nodejs/node/pull/45490)
|
|
163
|
+
* \[[`4b422d34af`](https://github.com/nodejs/node/commit/4b422d34af)] - **deps**: V8: cherry-pick d2db7fa7f786 (Richard Lau) [#45785](https://github.com/nodejs/node/pull/45785)
|
|
164
|
+
* \[[`625f4bf3a9`](https://github.com/nodejs/node/commit/625f4bf3a9)] - **deps**: update corepack to 0.15.1 (Node.js GitHub Bot) [#45331](https://github.com/nodejs/node/pull/45331)
|
|
165
|
+
* \[[`48a9810de8`](https://github.com/nodejs/node/commit/48a9810de8)] - **deps**: update corepack to 0.15.0 (Node.js GitHub Bot) [#45235](https://github.com/nodejs/node/pull/45235)
|
|
166
|
+
* \[[`9f4e64b603`](https://github.com/nodejs/node/commit/9f4e64b603)] - **deps**: update timezone to 2022f (Richard Lau) [#45521](https://github.com/nodejs/node/pull/45521)
|
|
167
|
+
* \[[`f297b6bd21`](https://github.com/nodejs/node/commit/f297b6bd21)] - **deps**: update archs files for OpenSSL-1.1.1s (RafaelGSS) [#45272](https://github.com/nodejs/node/pull/45272)
|
|
168
|
+
* \[[`11629fef15`](https://github.com/nodejs/node/commit/11629fef15)] - **deps**: upgrade openssl sources to 1.1.1s (RafaelGSS) [#45272](https://github.com/nodejs/node/pull/45272)
|
|
169
|
+
* \[[`c3a90c4b44`](https://github.com/nodejs/node/commit/c3a90c4b44)] - **http2**: fix memory leak when nghttp2 hd threshold is reached (rogertyang) [#41502](https://github.com/nodejs/node/pull/41502)
|
|
170
|
+
* \[[`785dc3efee`](https://github.com/nodejs/node/commit/785dc3efee)] - **module**: cjs-module-lexer WebAssembly fallback (Guy Bedford) [#43612](https://github.com/nodejs/node/pull/43612)
|
|
171
|
+
* \[[`2dbeb889f6`](https://github.com/nodejs/node/commit/2dbeb889f6)] - **node-api**: handle no support for external buffers (Michael Dawson) [#45181](https://github.com/nodejs/node/pull/45181)
|
|
172
|
+
* \[[`5b2ea124f3`](https://github.com/nodejs/node/commit/5b2ea124f3)] - **test**: add test to validate changelogs for releases (Richard Lau) [#45325](https://github.com/nodejs/node/pull/45325)
|
|
173
|
+
* \[[`f13f889956`](https://github.com/nodejs/node/commit/f13f889956)] - **test**: add a test to ensure the correctness of timezone upgrades (Darshan Sen) [#45299](https://github.com/nodejs/node/pull/45299)
|
|
174
|
+
* \[[`5608e6fa72`](https://github.com/nodejs/node/commit/5608e6fa72)] - **tools**: update certdata.txt (Luigi Pinca) [#45490](https://github.com/nodejs/node/pull/45490)
|
|
175
|
+
* \[[`d6f1d7107b`](https://github.com/nodejs/node/commit/d6f1d7107b)] - **tools**: have test-asan use ubuntu-20.04 (Filip Skokan) [#45581](https://github.com/nodejs/node/pull/45581)
|
|
176
|
+
* \[[`370a00f737`](https://github.com/nodejs/node/commit/370a00f737)] - **tools**: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) [#41258](https://github.com/nodejs/node/pull/41258)
|
|
177
|
+
|
|
178
|
+
<a id="14.21.1"></a>
|
|
179
|
+
|
|
180
|
+
## 2022-11-04, Version 14.21.1 'Fermium' (LTS), @BethGriggs
|
|
181
|
+
|
|
182
|
+
This is a security release.
|
|
183
|
+
|
|
184
|
+
### Notable changes
|
|
185
|
+
|
|
186
|
+
The following CVEs are fixed in this release:
|
|
187
|
+
|
|
188
|
+
* **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium)
|
|
189
|
+
|
|
190
|
+
More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post.
|
|
191
|
+
|
|
192
|
+
### Commits
|
|
193
|
+
|
|
194
|
+
* \[[`2b433af094`](https://github.com/nodejs/node/commit/2b433af094)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#354](https://github.com/nodejs-private/node-private/pull/354)
|
|
195
|
+
|
|
79
196
|
<a id="14.21.0"></a>
|
|
80
197
|
|
|
81
198
|
## 2022-11-01, Version 14.21.0 'Fermium' (LTS), @danielleadams
|
package/LICENSE
CHANGED
|
@@ -636,56 +636,129 @@ The externally maintained libraries used by Node.js are:
|
|
|
636
636
|
|
|
637
637
|
- OpenSSL, located at deps/openssl, is licensed as follows:
|
|
638
638
|
"""
|
|
639
|
-
|
|
640
|
-
|
|
641
|
-
|
|
642
|
-
|
|
643
|
-
|
|
644
|
-
|
|
645
|
-
|
|
646
|
-
|
|
647
|
-
|
|
648
|
-
|
|
649
|
-
|
|
650
|
-
|
|
651
|
-
|
|
652
|
-
|
|
653
|
-
|
|
654
|
-
|
|
655
|
-
|
|
656
|
-
|
|
657
|
-
|
|
658
|
-
|
|
659
|
-
|
|
660
|
-
|
|
661
|
-
|
|
662
|
-
|
|
663
|
-
|
|
664
|
-
|
|
665
|
-
|
|
666
|
-
|
|
667
|
-
|
|
668
|
-
|
|
669
|
-
|
|
670
|
-
|
|
671
|
-
|
|
672
|
-
|
|
673
|
-
|
|
674
|
-
|
|
675
|
-
|
|
676
|
-
|
|
677
|
-
|
|
678
|
-
|
|
679
|
-
|
|
680
|
-
|
|
681
|
-
|
|
682
|
-
|
|
683
|
-
|
|
684
|
-
|
|
685
|
-
|
|
686
|
-
|
|
687
|
-
|
|
688
|
-
|
|
639
|
+
LICENSE ISSUES
|
|
640
|
+
==============
|
|
641
|
+
|
|
642
|
+
The OpenSSL toolkit stays under a double license, i.e. both the conditions of
|
|
643
|
+
the OpenSSL License and the original SSLeay license apply to the toolkit.
|
|
644
|
+
See below for the actual license texts.
|
|
645
|
+
|
|
646
|
+
OpenSSL License
|
|
647
|
+
---------------
|
|
648
|
+
|
|
649
|
+
/* ====================================================================
|
|
650
|
+
* Copyright (c) 1998-2019 The OpenSSL Project. All rights reserved.
|
|
651
|
+
*
|
|
652
|
+
* Redistribution and use in source and binary forms, with or without
|
|
653
|
+
* modification, are permitted provided that the following conditions
|
|
654
|
+
* are met:
|
|
655
|
+
*
|
|
656
|
+
* 1. Redistributions of source code must retain the above copyright
|
|
657
|
+
* notice, this list of conditions and the following disclaimer.
|
|
658
|
+
*
|
|
659
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
|
660
|
+
* notice, this list of conditions and the following disclaimer in
|
|
661
|
+
* the documentation and/or other materials provided with the
|
|
662
|
+
* distribution.
|
|
663
|
+
*
|
|
664
|
+
* 3. All advertising materials mentioning features or use of this
|
|
665
|
+
* software must display the following acknowledgment:
|
|
666
|
+
* "This product includes software developed by the OpenSSL Project
|
|
667
|
+
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
|
|
668
|
+
*
|
|
669
|
+
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
|
670
|
+
* endorse or promote products derived from this software without
|
|
671
|
+
* prior written permission. For written permission, please contact
|
|
672
|
+
* openssl-core@openssl.org.
|
|
673
|
+
*
|
|
674
|
+
* 5. Products derived from this software may not be called "OpenSSL"
|
|
675
|
+
* nor may "OpenSSL" appear in their names without prior written
|
|
676
|
+
* permission of the OpenSSL Project.
|
|
677
|
+
*
|
|
678
|
+
* 6. Redistributions of any form whatsoever must retain the following
|
|
679
|
+
* acknowledgment:
|
|
680
|
+
* "This product includes software developed by the OpenSSL Project
|
|
681
|
+
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
|
|
682
|
+
*
|
|
683
|
+
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
|
684
|
+
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
685
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
686
|
+
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
|
687
|
+
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
688
|
+
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
689
|
+
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
690
|
+
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
691
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
692
|
+
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
693
|
+
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
694
|
+
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
695
|
+
* ====================================================================
|
|
696
|
+
*
|
|
697
|
+
* This product includes cryptographic software written by Eric Young
|
|
698
|
+
* (eay@cryptsoft.com). This product includes software written by Tim
|
|
699
|
+
* Hudson (tjh@cryptsoft.com).
|
|
700
|
+
*
|
|
701
|
+
*/
|
|
702
|
+
|
|
703
|
+
Original SSLeay License
|
|
704
|
+
-----------------------
|
|
705
|
+
|
|
706
|
+
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
|
|
707
|
+
* All rights reserved.
|
|
708
|
+
*
|
|
709
|
+
* This package is an SSL implementation written
|
|
710
|
+
* by Eric Young (eay@cryptsoft.com).
|
|
711
|
+
* The implementation was written so as to conform with Netscapes SSL.
|
|
712
|
+
*
|
|
713
|
+
* This library is free for commercial and non-commercial use as long as
|
|
714
|
+
* the following conditions are aheared to. The following conditions
|
|
715
|
+
* apply to all code found in this distribution, be it the RC4, RSA,
|
|
716
|
+
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
|
717
|
+
* included with this distribution is covered by the same copyright terms
|
|
718
|
+
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
|
|
719
|
+
*
|
|
720
|
+
* Copyright remains Eric Young's, and as such any Copyright notices in
|
|
721
|
+
* the code are not to be removed.
|
|
722
|
+
* If this package is used in a product, Eric Young should be given attribution
|
|
723
|
+
* as the author of the parts of the library used.
|
|
724
|
+
* This can be in the form of a textual message at program startup or
|
|
725
|
+
* in documentation (online or textual) provided with the package.
|
|
726
|
+
*
|
|
727
|
+
* Redistribution and use in source and binary forms, with or without
|
|
728
|
+
* modification, are permitted provided that the following conditions
|
|
729
|
+
* are met:
|
|
730
|
+
* 1. Redistributions of source code must retain the copyright
|
|
731
|
+
* notice, this list of conditions and the following disclaimer.
|
|
732
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
|
733
|
+
* notice, this list of conditions and the following disclaimer in the
|
|
734
|
+
* documentation and/or other materials provided with the distribution.
|
|
735
|
+
* 3. All advertising materials mentioning features or use of this software
|
|
736
|
+
* must display the following acknowledgement:
|
|
737
|
+
* "This product includes cryptographic software written by
|
|
738
|
+
* Eric Young (eay@cryptsoft.com)"
|
|
739
|
+
* The word 'cryptographic' can be left out if the rouines from the library
|
|
740
|
+
* being used are not cryptographic related :-).
|
|
741
|
+
* 4. If you include any Windows specific code (or a derivative thereof) from
|
|
742
|
+
* the apps directory (application code) you must include an acknowledgement:
|
|
743
|
+
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
|
|
744
|
+
*
|
|
745
|
+
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
|
746
|
+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
747
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
748
|
+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
749
|
+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
750
|
+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
751
|
+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
752
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
753
|
+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
754
|
+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
755
|
+
* SUCH DAMAGE.
|
|
756
|
+
*
|
|
757
|
+
* The licence and distribution terms for any publically available version or
|
|
758
|
+
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
|
759
|
+
* copied and put under another distribution licence
|
|
760
|
+
* [including the GNU Public Licence.]
|
|
761
|
+
*/
|
|
689
762
|
"""
|
|
690
763
|
|
|
691
764
|
- Punycode.js, located at lib/punycode.js, is licensed as follows:
|
package/bin/node
CHANGED
|
Binary file
|
package/include/node/common.gypi
CHANGED
package/include/node/config.gypi
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
# Do not edit. Generated by the configure script.
|
|
2
2
|
{ 'target_defaults': { 'cflags': [],
|
|
3
3
|
'default_configuration': 'Release',
|
|
4
|
-
'defines': ['NODE_OPENSSL_CONF_NAME=nodejs_conf'
|
|
4
|
+
'defines': [ 'NODE_OPENSSL_CONF_NAME=nodejs_conf',
|
|
5
|
+
'ICU_NO_USER_DATA_OVERRIDE'],
|
|
5
6
|
'include_dirs': [],
|
|
6
7
|
'libraries': []},
|
|
7
8
|
'variables': { 'asan': 0,
|
|
@@ -387,6 +387,7 @@ NAPI_EXTERN napi_status napi_create_arraybuffer(napi_env env,
|
|
|
387
387
|
size_t byte_length,
|
|
388
388
|
void** data,
|
|
389
389
|
napi_value* result);
|
|
390
|
+
#ifndef NODE_API_NO_EXTERNAL_BUFFERS_ALLOWED
|
|
390
391
|
NAPI_EXTERN napi_status
|
|
391
392
|
napi_create_external_arraybuffer(napi_env env,
|
|
392
393
|
void* external_data,
|
|
@@ -394,6 +395,7 @@ napi_create_external_arraybuffer(napi_env env,
|
|
|
394
395
|
napi_finalize finalize_cb,
|
|
395
396
|
void* finalize_hint,
|
|
396
397
|
napi_value* result);
|
|
398
|
+
#endif // NODE_API_NO_EXTERNAL_BUFFERS_ALLOWED
|
|
397
399
|
NAPI_EXTERN napi_status napi_get_arraybuffer_info(napi_env env,
|
|
398
400
|
napi_value arraybuffer,
|
|
399
401
|
void** data,
|
|
@@ -92,7 +92,8 @@ typedef enum {
|
|
|
92
92
|
napi_date_expected,
|
|
93
93
|
napi_arraybuffer_expected,
|
|
94
94
|
napi_detachable_arraybuffer_expected,
|
|
95
|
-
napi_would_deadlock // unused
|
|
95
|
+
napi_would_deadlock, // unused
|
|
96
|
+
napi_no_external_buffers_allowed
|
|
96
97
|
} napi_status;
|
|
97
98
|
// Note: when adding a new enum value to `napi_status`, please also update
|
|
98
99
|
// * `const int last_status` in the definition of `napi_get_last_error_info()'
|
package/include/node/node_api.h
CHANGED
|
@@ -138,12 +138,14 @@ NAPI_EXTERN napi_status napi_create_buffer(napi_env env,
|
|
|
138
138
|
size_t length,
|
|
139
139
|
void** data,
|
|
140
140
|
napi_value* result);
|
|
141
|
+
#ifndef NODE_API_NO_EXTERNAL_BUFFERS_ALLOWED
|
|
141
142
|
NAPI_EXTERN napi_status napi_create_external_buffer(napi_env env,
|
|
142
143
|
size_t length,
|
|
143
144
|
void* data,
|
|
144
145
|
napi_finalize finalize_cb,
|
|
145
146
|
void* finalize_hint,
|
|
146
147
|
napi_value* result);
|
|
148
|
+
#endif // NODE_API_NO_EXTERNAL_BUFFERS_ALLOWED
|
|
147
149
|
NAPI_EXTERN napi_status napi_create_buffer_copy(napi_env env,
|
|
148
150
|
size_t length,
|
|
149
151
|
const void* data,
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* WARNING: do not edit!
|
|
3
3
|
* Generated by apps/progs.pl
|
|
4
4
|
*
|
|
5
|
-
* Copyright 1995-
|
|
5
|
+
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
6
6
|
*
|
|
7
7
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
8
8
|
* this file except in compliance with the License. You can obtain a copy
|