node-linux-arm64 16.20.0 → 16.20.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +41 -0
- package/bin/node +0 -0
- package/include/node/node_version.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/BSD-x86_64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN32/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64-ARM/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/VC-WIN64A/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/aix64-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin-i386-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-arm64-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/darwin64-x86_64-cc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-aarch64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-armv4/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-elf/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-ppc64le/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux-x86_64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux32-s390x/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-mips64/asm/crypto/buildinf.h +12 -12
- package/include/node/openssl/archs/linux64-mips64/asm_avx2/crypto/buildinf.h +12 -12
- package/include/node/openssl/archs/linux64-mips64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-riscv64/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/linux64-s390x/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris-x86-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/crypto/buildinf.h +1 -1
- package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/crypto/buildinf.h +1 -1
- package/include/node/openssl/opensslv.h +3 -3
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -9,6 +9,7 @@
|
|
|
9
9
|
</tr>
|
|
10
10
|
<tr>
|
|
11
11
|
<td valign="top">
|
|
12
|
+
<a href="#16.20.1">16.20.1</a><br/>
|
|
12
13
|
<a href="#16.20.0">16.20.0</a><br/>
|
|
13
14
|
<a href="#16.19.1">16.19.1</a><br/>
|
|
14
15
|
<a href="#16.19.0">16.19.0</a><br/>
|
|
@@ -69,6 +70,46 @@
|
|
|
69
70
|
* [io.js](CHANGELOG_IOJS.md)
|
|
70
71
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
71
72
|
|
|
73
|
+
<a id="16.20.1"></a>
|
|
74
|
+
|
|
75
|
+
## 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS
|
|
76
|
+
|
|
77
|
+
This is a security release.
|
|
78
|
+
|
|
79
|
+
### Notable Changes
|
|
80
|
+
|
|
81
|
+
The following CVEs are fixed in this release:
|
|
82
|
+
|
|
83
|
+
* [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High)
|
|
84
|
+
* [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
|
|
85
|
+
* [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium)
|
|
86
|
+
* [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium)
|
|
87
|
+
* [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium)
|
|
88
|
+
* OpenSSL Security Releases
|
|
89
|
+
* [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt).
|
|
90
|
+
* [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt).
|
|
91
|
+
* [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt)
|
|
92
|
+
* c-ares vulnerabilities:
|
|
93
|
+
* [GHSA-9g78-jv2r-p7vc](https://github.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc)
|
|
94
|
+
* [GHSA-8r8p-23f3-64c2](https://github.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2)
|
|
95
|
+
* [GHSA-54xr-f67r-4pc4](https://github.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4)
|
|
96
|
+
* [GHSA-x6mf-cxr9-8q6v](https://github.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v)
|
|
97
|
+
|
|
98
|
+
More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post.
|
|
99
|
+
|
|
100
|
+
### Commits
|
|
101
|
+
|
|
102
|
+
* \[[`5a92ea7a3b`](https://github.com/nodejs/node/commit/5a92ea7a3b)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen)
|
|
103
|
+
* \[[`5df04e893a`](https://github.com/nodejs/node/commit/5df04e893a)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#48156](https://github.com/nodejs/node/pull/48156)
|
|
104
|
+
* \[[`c171cbd124`](https://github.com/nodejs/node/commit/c171cbd124)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#48115](https://github.com/nodejs/node/pull/48115)
|
|
105
|
+
* \[[`155d3aac02`](https://github.com/nodejs/node/commit/155d3aac02)] - **deps**: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) [#48369](https://github.com/nodejs/node/pull/48369)
|
|
106
|
+
* \[[`8d4c8f8ebe`](https://github.com/nodejs/node/commit/8d4c8f8ebe)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1u (RafaelGSS) [#48369](https://github.com/nodejs/node/pull/48369)
|
|
107
|
+
* \[[`1a5c9284eb`](https://github.com/nodejs/node/commit/1a5c9284eb)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://github.com/nodejs-private/node-private/pull/426)
|
|
108
|
+
* \[[`e42ff4b018`](https://github.com/nodejs/node/commit/e42ff4b018)] - **http**: disable request smuggling via empty headers (Paolo Insogna) [nodejs-private/node-private#429](https://github.com/nodejs-private/node-private/pull/429)
|
|
109
|
+
* \[[`10042683c8`](https://github.com/nodejs/node/commit/10042683c8)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://github.com/nodejs-private/node-private/pull/408)
|
|
110
|
+
* \[[`a6f4e87bc9`](https://github.com/nodejs/node/commit/a6f4e87bc9)] - **policy**: handle mainModule.\_\_proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://github.com/nodejs-private/node-private/pull/416)
|
|
111
|
+
* \[[`b77000f4d7`](https://github.com/nodejs/node/commit/b77000f4d7)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#47851](https://github.com/nodejs/node/pull/47851)
|
|
112
|
+
|
|
72
113
|
<a id="16.20.0"></a>
|
|
73
114
|
|
|
74
115
|
## 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs
|
package/bin/node
CHANGED
|
Binary file
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
*/
|
|
12
12
|
|
|
13
13
|
#define PLATFORM "platform: linux64-mips64"
|
|
14
|
-
#define DATE "built on:
|
|
14
|
+
#define DATE "built on: Tue Jun 6 20:34:59 2023 UTC"
|
|
15
15
|
|
|
16
16
|
/*
|
|
17
17
|
* Generate compiler_flags as an array of individual characters. This is a
|
|
@@ -21,15 +21,15 @@
|
|
|
21
21
|
static const char compiler_flags[] = {
|
|
22
22
|
'c','o','m','p','i','l','e','r',':',' ','g','c','c',' ','-','f',
|
|
23
23
|
'P','I','C',' ','-','p','t','h','r','e','a','d',' ','-','m','a',
|
|
24
|
-
'b','i','=','6','4',' ','-','
|
|
25
|
-
'
|
|
26
|
-
'
|
|
27
|
-
'
|
|
28
|
-
'
|
|
29
|
-
'
|
|
30
|
-
'
|
|
31
|
-
'
|
|
32
|
-
'
|
|
33
|
-
'
|
|
34
|
-
'B','U','G','\0'
|
|
24
|
+
'b','i','=','6','4',' ','-','m','i','p','s','3',' ','-','W','a',
|
|
25
|
+
',','-','-','n','o','e','x','e','c','s','t','a','c','k',' ','-',
|
|
26
|
+
'W','a','l','l',' ','-','O','3',' ','-','D','O','P','E','N','S',
|
|
27
|
+
'S','L','_','U','S','E','_','N','O','D','E','L','E','T','E',' ',
|
|
28
|
+
'-','D','O','P','E','N','S','S','L','_','P','I','C',' ','-','D',
|
|
29
|
+
'O','P','E','N','S','S','L','_','B','N','_','A','S','M','_','M',
|
|
30
|
+
'O','N','T',' ','-','D','S','H','A','1','_','A','S','M',' ','-',
|
|
31
|
+
'D','S','H','A','2','5','6','_','A','S','M',' ','-','D','S','H',
|
|
32
|
+
'A','5','1','2','_','A','S','M',' ','-','D','A','E','S','_','A',
|
|
33
|
+
'S','M',' ','-','D','P','O','L','Y','1','3','0','5','_','A','S',
|
|
34
|
+
'M',' ','-','D','N','D','E','B','U','G','\0'
|
|
35
35
|
};
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
*/
|
|
12
12
|
|
|
13
13
|
#define PLATFORM "platform: linux64-mips64"
|
|
14
|
-
#define DATE "built on:
|
|
14
|
+
#define DATE "built on: Tue Jun 6 20:35:01 2023 UTC"
|
|
15
15
|
|
|
16
16
|
/*
|
|
17
17
|
* Generate compiler_flags as an array of individual characters. This is a
|
|
@@ -22,15 +22,15 @@ static const char compiler_flags[] = {
|
|
|
22
22
|
'c','o','m','p','i','l','e','r',':',' ','.','.','/','c','o','n',
|
|
23
23
|
'f','i','g','/','f','a','k','e','_','g','c','c','.','p','l',' ',
|
|
24
24
|
'-','f','P','I','C',' ','-','p','t','h','r','e','a','d',' ','-',
|
|
25
|
-
'm','a','b','i','=','6','4',' ','-','
|
|
26
|
-
'
|
|
27
|
-
'
|
|
28
|
-
'
|
|
29
|
-
'
|
|
30
|
-
'
|
|
31
|
-
'
|
|
32
|
-
'
|
|
33
|
-
'
|
|
34
|
-
'
|
|
35
|
-
'D','E','B','U','G','\0'
|
|
25
|
+
'm','a','b','i','=','6','4',' ','-','m','i','p','s','3',' ','-',
|
|
26
|
+
'W','a',',','-','-','n','o','e','x','e','c','s','t','a','c','k',
|
|
27
|
+
' ','-','W','a','l','l',' ','-','O','3',' ','-','D','O','P','E',
|
|
28
|
+
'N','S','S','L','_','U','S','E','_','N','O','D','E','L','E','T',
|
|
29
|
+
'E',' ','-','D','O','P','E','N','S','S','L','_','P','I','C',' ',
|
|
30
|
+
'-','D','O','P','E','N','S','S','L','_','B','N','_','A','S','M',
|
|
31
|
+
'_','M','O','N','T',' ','-','D','S','H','A','1','_','A','S','M',
|
|
32
|
+
' ','-','D','S','H','A','2','5','6','_','A','S','M',' ','-','D',
|
|
33
|
+
'S','H','A','5','1','2','_','A','S','M',' ','-','D','A','E','S',
|
|
34
|
+
'_','A','S','M',' ','-','D','P','O','L','Y','1','3','0','5','_',
|
|
35
|
+
'A','S','M',' ','-','D','N','D','E','B','U','G','\0'
|
|
36
36
|
};
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/*
|
|
2
|
-
* Copyright 1999-
|
|
2
|
+
* Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
3
3
|
*
|
|
4
4
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
5
5
|
* this file except in compliance with the License. You can obtain a copy
|
|
@@ -39,8 +39,8 @@ extern "C" {
|
|
|
39
39
|
* (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
|
|
40
40
|
* major minor fix final patch/beta)
|
|
41
41
|
*/
|
|
42
|
-
# define OPENSSL_VERSION_NUMBER
|
|
43
|
-
# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.
|
|
42
|
+
# define OPENSSL_VERSION_NUMBER 0x1010115fL
|
|
43
|
+
# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.1u+quic 30 May 2023"
|
|
44
44
|
|
|
45
45
|
/*-
|
|
46
46
|
* The macros below are to be used for shared library (.so, .dll, ...)
|