2024-02-14, Version 20.11.1 'Iron' (LTS)

BackPup/node

0 Fork 0

mirror of https://github.com/nodejs/node.git synced 2026-10-14 10:26:26 -04:00

This is a security release.

Notable changes:

crypto:
  * disable PKCS#1 padding for privateDecrypt (Michael Dawson) https://github.com/nodejs-private/node-private/pull/525
deps:
  * upgrade libuv to 1.48.0 (Santiago Gimeno) https://github.com/nodejs/node/pull/51699
  * update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) https://github.com/nodejs/node/pull/51614
  * upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) https://github.com/nodejs/node/pull/51614
  * disable io\_uring support in libuv by default (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/529
  * fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) https://github.com/nodejs/node/pull/51737
fs:
  * protect against modified Buffer internals in possiblyTransformPath (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/49
http:
  * add maximum chunk extension size (Paolo Insogna) https://github.com/nodejs-private/node-private/pull/519
lib:
  * update undici to v5.28.3 (Matteo Collina) https://github.com/nodejs-private/node-private/pull/539
  * use cache fs internals against path traversal (RafaelGSS) https://github.com/nodejs-private/node-private/pull/516
src:
  * fix HasOnly(capability) in node::credentials (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/505
src,deps:
  * disable setuid() etc if io\_uring enabled (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/529
test,doc:
  * clarify wildcard usage (RafaelGSS) https://github.com/nodejs-private/node-private/pull/517
zlib:
  * pause stream if outgoing buffer is full (Matteo Collina) https://github.com/nodejs-private/node-private/pull/541

PR-URL: https://github.com/nodejs-private/node-private/pull/544

This commit is contained in:

marco-ippolito authored and

RafaelGSS committed 2024-02-14 14:10:22 -03:00

1 parent 2a5a150772

commit 5405aa5b90

3 files changed

+45 -2

No files matched your search

									
										doc/api/errors.md
									
		+3
		-1
	
												View File
												
				@@ -3174,7 +3174,9 @@ an `Error` with this code will be emitted.

				### `HPE_CHUNK_EXTENSIONS_OVERFLOW`

				<!-- YAML

				added: v18.19.1

				added:

				 - v20.11.1

				 - v18.19.1

				-->

				Too much data was received for a chunk extensions. In order to protect against