node-linux-arm64 22.21.1 → 22.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -9,6 +9,7 @@
9
9
  </tr>
10
10
  <tr>
11
11
  <td>
12
+ <a href="#22.22.0">22.22.0</a><br/>
12
13
  <a href="#22.21.1">22.21.1</a><br/>
13
14
  <a href="#22.21.0">22.21.0</a><br/>
14
15
  <a href="#22.20.0">22.20.0</a><br/>
@@ -67,6 +68,38 @@
67
68
  * [io.js](CHANGELOG_IOJS.md)
68
69
  * [Archive](CHANGELOG_ARCHIVE.md)
69
70
 
71
+ <a id="22.22.0"></a>
72
+
73
+ ## 2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito
74
+
75
+ This is a security release.
76
+
77
+ ### Notable Changes
78
+
79
+ lib:
80
+
81
+ * (CVE-2025-59465) add TLSSocket default error handler
82
+ * (CVE-2025-55132) disable futimes when permission model is enabled
83
+ lib,permission:
84
+ * (CVE-2025-55130) require full read and write to symlink APIs
85
+ src:
86
+ * (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks
87
+ src,lib:
88
+ * (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
89
+ tls:
90
+ * (CVE-2026-21637) route callback exceptions through error handlers
91
+
92
+ ### Commits
93
+
94
+ * \[[`6badf4e6f4`](https://github.com/nodejs/node/commit/6badf4e6f4)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#60997](https://github.com/nodejs/node/pull/60997)
95
+ * \[[`37509c3ff0`](https://github.com/nodejs/node/commit/37509c3ff0)] - **deps**: update undici to 6.23.0 (Matteo Collina) [nodejs-private/node-private#791](https://github.com/nodejs-private/node-private/pull/791)
96
+ * \[[`eb8e41f8db`](https://github.com/nodejs/node/commit/eb8e41f8db)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://github.com/nodejs-private/node-private/pull/797)
97
+ * \[[`ebbf942a83`](https://github.com/nodejs/node/commit/ebbf942a83)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://github.com/nodejs-private/node-private/pull/748)
98
+ * \[[`6b4849583a`](https://github.com/nodejs/node/commit/6b4849583a)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://github.com/nodejs-private/node-private/pull/760)
99
+ * \[[`ddadc31f09`](https://github.com/nodejs/node/commit/ddadc31f09)] - **(CVE-2025-59466)** **src**: rethrow stack overflow exceptions in async\_hooks (Matteo Collina) [nodejs-private/node-private#773](https://github.com/nodejs-private/node-private/pull/773)
100
+ * \[[`d4d9f3915f`](https://github.com/nodejs/node/commit/d4d9f3915f)] - **(CVE-2025-55131)** **src,lib**: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://github.com/nodejs-private/node-private/pull/759)
101
+ * \[[`25d6799df6`](https://github.com/nodejs/node/commit/25d6799df6)] - **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://github.com/nodejs-private/node-private/pull/796)
102
+
70
103
  <a id="22.21.1"></a>
71
104
 
72
105
  ## 2025-10-28, Version 22.21.1 'Jod' (LTS), @aduh95
package/bin/node CHANGED
Binary file
@@ -23,8 +23,8 @@
23
23
  #define SRC_NODE_VERSION_H_
24
24
 
25
25
  #define NODE_MAJOR_VERSION 22
26
- #define NODE_MINOR_VERSION 21
27
- #define NODE_PATCH_VERSION 1
26
+ #define NODE_MINOR_VERSION 22
27
+ #define NODE_PATCH_VERSION 0
28
28
 
29
29
  #define NODE_VERSION_IS_LTS 1
30
30
  #define NODE_VERSION_LTS_CODENAME "Jod"
@@ -244,6 +244,13 @@ class V8_EXPORT ArrayBuffer : public Object {
244
244
  */
245
245
  static std::unique_ptr<BackingStore> NewBackingStore(Isolate* isolate,
246
246
  size_t byte_length);
247
+ /**
248
+ * Returns a new standalone BackingStore with uninitialized memory and
249
+ * return nullptr on failure.
250
+ * This variant is for not breaking ABI on Node.js LTS. DO NOT USE.
251
+ */
252
+ static std::unique_ptr<BackingStore> NewBackingStoreForNodeLTS(
253
+ Isolate* isolate, size_t byte_length);
247
254
  /**
248
255
  * Returns a new standalone BackingStore that takes over the ownership of
249
256
  * the given buffer. The destructor of the BackingStore invokes the given
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "node-linux-arm64",
3
- "version": "22.21.1",
3
+ "version": "22.22.0",
4
4
  "description": "node",
5
5
  "repository": {
6
6
  "url": "git+https://github.com/aredridel/node-bin-gen.git"