node-linux-arm64 20.8.0 → 20.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +52 -0
- package/bin/node +0 -0
- package/include/node/node_version.h +3 -3
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,10 +4,15 @@
|
|
|
4
4
|
|
|
5
5
|
<table>
|
|
6
6
|
<tr>
|
|
7
|
+
<th>LTS 'Iron'</th>
|
|
7
8
|
<th>Current</th>
|
|
8
9
|
</tr>
|
|
9
10
|
<tr>
|
|
10
11
|
<td>
|
|
12
|
+
<a href="#20.9.0">20.9.0</a><br/>
|
|
13
|
+
</td>
|
|
14
|
+
<td>
|
|
15
|
+
<a href="#20.8.1">20.8.1</a><br/>
|
|
11
16
|
<a href="#20.8.0">20.8.0</a><br/>
|
|
12
17
|
<a href="#20.7.0">20.7.0</a><br/>
|
|
13
18
|
<a href="#20.6.1">20.6.1</a><br/>
|
|
@@ -46,6 +51,53 @@
|
|
|
46
51
|
* [io.js](CHANGELOG_IOJS.md)
|
|
47
52
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
48
53
|
|
|
54
|
+
<a id="20.9.0"></a>
|
|
55
|
+
|
|
56
|
+
## 2023-10-24, Version 20.9.0 'Iron' (LTS), @richardlau
|
|
57
|
+
|
|
58
|
+
### Notable Changes
|
|
59
|
+
|
|
60
|
+
This release marks the transition of Node.js 20.x into Long Term Support (LTS)
|
|
61
|
+
with the codename 'Iron'. The 20.x release line now moves into "Active LTS"
|
|
62
|
+
and will remain so until October 2024. After that time, it will move into
|
|
63
|
+
"Maintenance" until end of life in April 2026.
|
|
64
|
+
|
|
65
|
+
### Known issue
|
|
66
|
+
|
|
67
|
+
Collecting code coverage via the `NODE_V8_COVERAGE` environment variable may
|
|
68
|
+
lead to a hang. This is not thought to be a regression in Node.js 20 (some
|
|
69
|
+
reports are on Node.js 18). For more information, including some potential
|
|
70
|
+
workarounds, see issue [#49344](https://github.com/nodejs/node/issues/49344).
|
|
71
|
+
|
|
72
|
+
<a id="20.8.1"></a>
|
|
73
|
+
|
|
74
|
+
## 2023-10-13, Version 20.8.1 (Current), @RafaelGSS
|
|
75
|
+
|
|
76
|
+
This is a security release.
|
|
77
|
+
|
|
78
|
+
### Notable Changes
|
|
79
|
+
|
|
80
|
+
The following CVEs are fixed in this release:
|
|
81
|
+
|
|
82
|
+
* [CVE-2023-44487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487): `nghttp2` Security Release (High)
|
|
83
|
+
* [CVE-2023-45143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45143): `undici` Security Release (High)
|
|
84
|
+
* [CVE-2023-39332](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39332): Path traversal through path stored in Uint8Array (High)
|
|
85
|
+
* [CVE-2023-39331](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39331): Permission model improperly protects against path traversal (High)
|
|
86
|
+
* [CVE-2023-38552](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38552): Integrity checks according to policies can be circumvented (Medium)
|
|
87
|
+
* [CVE-2023-39333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39333): Code injection via WebAssembly export names (Low)
|
|
88
|
+
|
|
89
|
+
More detailed information on each of the vulnerabilities can be found in [October 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/october-2023-security-releases/) blog post.
|
|
90
|
+
|
|
91
|
+
### Commits
|
|
92
|
+
|
|
93
|
+
* \[[`c86883e844`](https://github.com/nodejs/node/commit/c86883e844)] - **deps**: update nghttp2 to 1.57.0 (James M Snell) [#50121](https://github.com/nodejs/node/pull/50121)
|
|
94
|
+
* \[[`2860631359`](https://github.com/nodejs/node/commit/2860631359)] - **deps**: update undici to v5.26.3 (Matteo Collina) [#50153](https://github.com/nodejs/node/pull/50153)
|
|
95
|
+
* \[[`cd37838bf8`](https://github.com/nodejs/node/commit/cd37838bf8)] - **lib**: let deps require `node` prefixed modules (Matthew Aitken) [#50047](https://github.com/nodejs/node/pull/50047)
|
|
96
|
+
* \[[`f5c90b2951`](https://github.com/nodejs/node/commit/f5c90b2951)] - **module**: fix code injection through export names (Tobias Nießen) [nodejs-private/node-private#461](https://github.com/nodejs-private/node-private/pull/461)
|
|
97
|
+
* \[[`fa5dae1944`](https://github.com/nodejs/node/commit/fa5dae1944)] - **permission**: fix Uint8Array path traversal (Tobias Nießen) [nodejs-private/node-private#456](https://github.com/nodejs-private/node-private/pull/456)
|
|
98
|
+
* \[[`cd35275111`](https://github.com/nodejs/node/commit/cd35275111)] - **permission**: improve path traversal protection (Tobias Nießen) [nodejs-private/node-private#456](https://github.com/nodejs-private/node-private/pull/456)
|
|
99
|
+
* \[[`a4cb7fc7c0`](https://github.com/nodejs/node/commit/a4cb7fc7c0)] - **policy**: use tamper-proof integrity check function (Tobias Nießen) [nodejs-private/node-private#462](https://github.com/nodejs-private/node-private/pull/462)
|
|
100
|
+
|
|
49
101
|
<a id="20.8.0"></a>
|
|
50
102
|
|
|
51
103
|
## 2023-09-28, Version 20.8.0 (Current), @ruyadorno
|
package/bin/node
CHANGED
|
Binary file
|
|
@@ -23,11 +23,11 @@
|
|
|
23
23
|
#define SRC_NODE_VERSION_H_
|
|
24
24
|
|
|
25
25
|
#define NODE_MAJOR_VERSION 20
|
|
26
|
-
#define NODE_MINOR_VERSION
|
|
26
|
+
#define NODE_MINOR_VERSION 9
|
|
27
27
|
#define NODE_PATCH_VERSION 0
|
|
28
28
|
|
|
29
|
-
#define NODE_VERSION_IS_LTS
|
|
30
|
-
#define NODE_VERSION_LTS_CODENAME ""
|
|
29
|
+
#define NODE_VERSION_IS_LTS 1
|
|
30
|
+
#define NODE_VERSION_LTS_CODENAME "Iron"
|
|
31
31
|
|
|
32
32
|
#define NODE_VERSION_IS_RELEASE 1
|
|
33
33
|
|