node-linux-s390x 21.7.1 → 21.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -3
- package/bin/node +0 -0
- package/include/node/node_version.h +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -8,6 +8,7 @@
|
|
|
8
8
|
</tr>
|
|
9
9
|
<tr>
|
|
10
10
|
<td>
|
|
11
|
+
<a href="#21.7.2">21.7.2</a><br/>
|
|
11
12
|
<a href="#21.7.1">21.7.1</a><br/>
|
|
12
13
|
<a href="#21.7.0">21.7.0</a><br/>
|
|
13
14
|
<a href="#21.6.2">21.6.2</a><br/>
|
|
@@ -46,6 +47,27 @@
|
|
|
46
47
|
* [io.js](CHANGELOG_IOJS.md)
|
|
47
48
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
48
49
|
|
|
50
|
+
<a id="21.7.2"></a>
|
|
51
|
+
|
|
52
|
+
## 2024-04-03, Version 21.7.2 (Current), @RafaelGSS prepared by @marco-ippolito
|
|
53
|
+
|
|
54
|
+
This is a security release.
|
|
55
|
+
|
|
56
|
+
### Notable changes
|
|
57
|
+
|
|
58
|
+
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
|
|
59
|
+
* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation- (Medium)
|
|
60
|
+
* llhttp version 9.2.1
|
|
61
|
+
* undici version 6.11.1
|
|
62
|
+
|
|
63
|
+
### Commits
|
|
64
|
+
|
|
65
|
+
* \[[`3dfc10c851`](https://github.com/nodejs/node/commit/3dfc10c851)] - **deps**: update undici to 6.11.1 (Node.js GitHub Bot) [#52328](https://github.com/nodejs/node/pull/52328)
|
|
66
|
+
* \[[`aceea1c5e7`](https://github.com/nodejs/node/commit/aceea1c5e7)] - **deps**: update undici to 6.10.2 (Node.js GitHub Bot) [#52227](https://github.com/nodejs/node/pull/52227)
|
|
67
|
+
* \[[`5f0f96b275`](https://github.com/nodejs/node/commit/5f0f96b275)] - **deps**: update llhttp to 9.2.0 (Node.js GitHub Bot) [#51719](https://github.com/nodejs/node/pull/51719)
|
|
68
|
+
* \[[`1a65e98e22`](https://github.com/nodejs/node/commit/1a65e98e22)] - **http**: do not allow OBS fold in headers by default (Paolo Insogna) [nodejs-private/node-private#556](https://github.com/nodejs-private/node-private/pull/556)
|
|
69
|
+
* \[[`3bd39fb474`](https://github.com/nodejs/node/commit/3bd39fb474)] - **src**: ensure to close stream when destroying session (RafaelGSS) [nodejs-private/node-private#561](https://github.com/nodejs-private/node-private/pull/561)
|
|
70
|
+
|
|
49
71
|
<a id="21.7.1"></a>
|
|
50
72
|
|
|
51
73
|
## 2024-03-08, Version 21.7.1 (Current), @targos
|
|
@@ -515,7 +537,7 @@ Node.js 21.6.0 comes with several fixes for the experimental permission model an
|
|
|
515
537
|
We're adding a new flag `--allow-addons` to enable addon usage when using the Permission Model.
|
|
516
538
|
|
|
517
539
|
```console
|
|
518
|
-
|
|
540
|
+
node --experimental-permission --allow-addons
|
|
519
541
|
```
|
|
520
542
|
|
|
521
543
|
Contributed by Rafael Gonzaga in [#51183](https://github.com/nodejs/node/pull/51183)
|
|
@@ -524,7 +546,7 @@ And relative paths are now supported through the `--allow-fs-*` flags.
|
|
|
524
546
|
Therefore, with this release one can use:
|
|
525
547
|
|
|
526
548
|
```console
|
|
527
|
-
|
|
549
|
+
node --experimental-permission --allow-fs-read=./index.js
|
|
528
550
|
```
|
|
529
551
|
|
|
530
552
|
To give only read access to the entrypoint of the application.
|
|
@@ -536,7 +558,7 @@ Contributed by Rafael Gonzaga and Carlos Espa in [#50758](https://github.com/nod
|
|
|
536
558
|
We are adding a new flag `--build-snapshot-config` to configure snapshots through a custom JSON configuration file.
|
|
537
559
|
|
|
538
560
|
```console
|
|
539
|
-
|
|
561
|
+
node --build-snapshot-config=/path/to/myconfig.json
|
|
540
562
|
```
|
|
541
563
|
|
|
542
564
|
When using this flag, additional script files provided on the command line will
|
package/bin/node
CHANGED
|
Binary file
|