diff options
author | Myles Borins <mylesborins@github.com> | 2021-04-05 19:58:43 +0300 |
---|---|---|
committer | Myles Borins <mylesborins@github.com> | 2021-04-06 16:28:26 +0300 |
commit | 1a34e9c24bf6dd07ff575a8c198f93cd5e8d15b9 (patch) | |
tree | f770fae3b9889e75baed9067092cc73043154030 | |
parent | 629e72e9f406795148d3b1278645388b44ae6361 (diff) |
2021-04-06, Version 15.14.0 (Current)v15.14.0
Notable Changes:
This is a security release.
Vulnerabilities fixed:
- **CVE-2021-3450**: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
- **CVE-2021-3449**: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
- **CVE-2020-7774**: npm upgrade - Update y18n to fix Prototype-Pollution (High)
Other Notable changes:
fs:
* (SEMVER-MINOR) add support for async iterators to `fsPromises.writeFile` (HiroyukiYagihashi) https://github.com/nodejs/node/pull/37490
net:
* (SEMVER-MINOR) allow net.BlockList to use net.SocketAddress objects (James M Snell) https://github.com/nodejs/node/pull/37917
* (SEMVER-MINOR) add SocketAddress class (James M Snell) https://github.com/nodejs/node/pull/37917
* (SEMVER-MINOR) make net.BlockList cloneable (James M Snell) https://github.com/nodejs/node/pull/37917
net,tls:
* (SEMVER-MINOR) add abort signal support to connect (Nitzan Uziely) https://github.com/nodejs/node/pull/37735
readline:
* (SEMVER-MINOR) add AbortSignal support to interface (Nitzan Uziely) https://github.com/nodejs/node/pull/37932
PR-URL: https://github.com/nodejs/node/pull/38084
-rw-r--r-- | CHANGELOG.md | 3 | ||||
-rw-r--r-- | doc/api/errors.md | 2 | ||||
-rw-r--r-- | doc/api/fs.md | 2 | ||||
-rw-r--r-- | doc/api/net.md | 14 | ||||
-rw-r--r-- | doc/api/readline.md | 2 | ||||
-rw-r--r-- | doc/api/worker_threads.md | 2 | ||||
-rw-r--r-- | doc/changelogs/CHANGELOG_V15.md | 75 | ||||
-rw-r--r-- | src/node_version.h | 6 |
8 files changed, 91 insertions, 15 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 6b038b978dd..659b47caf75 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -32,7 +32,8 @@ release. </tr> <tr> <td valign="top"> -<b><a href="doc/changelogs/CHANGELOG_V15.md#15.13.0">15.13.0</a></b><br/> +<b><a href="doc/changelogs/CHANGELOG_V15.md#15.14.0">15.14.0</a></b><br/> +<a href="doc/changelogs/CHANGELOG_V15.md#15.13.0">15.13.0</a><br/> <a href="doc/changelogs/CHANGELOG_V15.md#15.12.0">15.12.0</a><br/> <a href="doc/changelogs/CHANGELOG_V15.md#15.11.0">15.11.0</a><br/> <a href="doc/changelogs/CHANGELOG_V15.md#15.10.0">15.10.0</a><br/> diff --git a/doc/api/errors.md b/doc/api/errors.md index 8b3bc962c8a..61ab2ad8a15 100644 --- a/doc/api/errors.md +++ b/doc/api/errors.md @@ -1367,7 +1367,7 @@ made to mark a stream and dependent of itself. <a id="ERR_HTTP2_TOO_MANY_INVALID_FRAMES"></a> ### `ERR_HTTP2_TOO_MANY_INVALID_FRAMES` <!-- -added: REPLACEME +added: v15.14.0 --> The limit of acceptable invalid HTTP/2 protocol frames sent by the peer, diff --git a/doc/api/fs.md b/doc/api/fs.md index 979ada95267..448f89ea833 100644 --- a/doc/api/fs.md +++ b/doc/api/fs.md @@ -1241,7 +1241,7 @@ All the [caveats][] for `fs.watch()` also apply to `fsPromises.watch()`. <!-- YAML added: v10.0.0 changes: - - version: REPLACEME + - version: v15.14.0 pr-url: https://github.com/nodejs/node/pull/37490 description: The `data` argument supports `AsyncIterable`, `Iterable` & `Stream`. - version: v15.2.0 diff --git a/doc/api/net.md b/doc/api/net.md index 9a4b48317ea..699b1ba4d57 100644 --- a/doc/api/net.md +++ b/doc/api/net.md @@ -138,11 +138,11 @@ The list of rules added to the blocklist. ## Class: `net.SocketAddress` <!-- YAML -added: REPLACEME +added: v15.14.0 --> ### `new net.SocketAddress([options])` <!-- YAML -added: REPLACEME +added: v15.14.0 --> * `options` {Object} @@ -155,28 +155,28 @@ added: REPLACEME ### `socketaddress.address` <!-- YAML -added: REPLACEME +added: v15.14.0 --> * Type {string} ### `socketaddress.family` <!-- YAML -added: REPLACEME +added: v15.14.0 --> * Type {string} Either `'ipv4'` or `'ipv6'`. ### `socketaddress.flowlabel` <!-- YAML -added: REPLACEME +added: v15.14.0 --> * Type {number} ### `socketaddress.port` <!-- YAML -added: REPLACEME +added: v15.14.0 --> * Type {number} @@ -543,7 +543,7 @@ it to interact with the client. <!-- YAML added: v0.3.4 changes: - - version: REPLACEME + - version: v15.14.0 pr-url: https://github.com/nodejs/node/pull/37735 description: AbortSignal support was added. --> diff --git a/doc/api/readline.md b/doc/api/readline.md index 18e84389c6c..3e78a6e2391 100644 --- a/doc/api/readline.md +++ b/doc/api/readline.md @@ -544,7 +544,7 @@ the current position of the cursor down. <!-- YAML added: v0.1.98 changes: - - version: REPLACEME + - version: v15.14.0 pr-url: https://github.com/nodejs/node/pull/37932 description: The `signal` option is supported now. - version: v15.8.0 diff --git a/doc/api/worker_threads.md b/doc/api/worker_threads.md index 891e2414b1c..c89e51b6c10 100644 --- a/doc/api/worker_threads.md +++ b/doc/api/worker_threads.md @@ -527,7 +527,7 @@ are part of the channel. <!-- YAML added: v10.5.0 changes: - - version: REPLACEME + - version: v15.14.0 pr-url: https://github.com/nodejs/node/pull/37917 description: Add 'BlockList' to the list of cloneable types. - version: v15.9.0 diff --git a/doc/changelogs/CHANGELOG_V15.md b/doc/changelogs/CHANGELOG_V15.md index 78a4b24ae6f..513d3d2068a 100644 --- a/doc/changelogs/CHANGELOG_V15.md +++ b/doc/changelogs/CHANGELOG_V15.md @@ -10,6 +10,7 @@ </tr> <tr> <td> +<a href="#15.14.0">15.14.0</a><br/> <a href="#15.13.0">15.13.0</a><br/> <a href="#15.12.0">15.12.0</a><br/> <a href="#15.11.0">15.11.0</a><br/> @@ -48,6 +49,80 @@ * [io.js](CHANGELOG_IOJS.md) * [Archive](CHANGELOG_ARCHIVE.md) +<a id="15.14.0"></a> +## 2021-04-06, Version 15.14.0 (Current), @mylesborins + +This is a security release. + +### Notable Changes + +Vulnerabilties Fixed: + +* **CVE-2021-3450**: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) + * This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt + * Impacts: + * All versions of the 15.x, 14.x, 12.x and 10.x releases lines +* **CVE-2021-3449**: OpenSSL - NULL pointer deref in signature_algorithms processing (High) + * This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt + * Impacts: + * All versions of the 15.x, 14.x, 12.x and 10.x releases lines +* **CVE-2020-7774**: npm upgrade - Update y18n to fix Prototype-Pollution (High) + * This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in https://github.com/advisories/GHSA-c4w7-xm78-47vh + * Impacts: + * All versions of the 14.x, 12.x and 10.x releases lines + +Other Notable Changes: + +* [[`b6f4901221`](https://github.com/nodejs/node/commit/b6f4901221)] - **(SEMVER-MINOR)** **fs**: add support for async iterators to `fsPromises.writeFile` (HiroyukiYagihashi) [#37490](https://github.com/nodejs/node/pull/37490) +* [[`0709cbb7fe`](https://github.com/nodejs/node/commit/0709cbb7fe)] - **(SEMVER-MINOR)** **net**: allow net.BlockList to use net.SocketAddress objects (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`daa8a7bbcf`](https://github.com/nodejs/node/commit/daa8a7bbcf)] - **(SEMVER-MINOR)** **net**: add SocketAddress class (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`a4169ce519`](https://github.com/nodejs/node/commit/a4169ce519)] - **(SEMVER-MINOR)** **net**: make net.BlockList cloneable (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`669b81c68b`](https://github.com/nodejs/node/commit/669b81c68b)] - **(SEMVER-MINOR)** **net,tls**: add abort signal support to connect (Nitzan Uziely) [#37735](https://github.com/nodejs/node/pull/37735) +* [[`a1123f0a29`](https://github.com/nodejs/node/commit/a1123f0a29)] - **(SEMVER-MINOR)** **readline**: add AbortSignal support to interface (Nitzan Uziely) [#37932](https://github.com/nodejs/node/pull/37932) + +### Commits + +* [[`ac69b95e47`](https://github.com/nodejs/node/commit/ac69b95e47)] - **crypto**: use correct webcrypto RSASSA-PKCS1-v1\_5 algorithm name (Filip Skokan) [#38029](https://github.com/nodejs/node/pull/38029) +* [[`960c6be229`](https://github.com/nodejs/node/commit/960c6be229)] - **crypto**: add buffering to randomInt (Tobias Nießen) [#35110](https://github.com/nodejs/node/pull/35110) +* [[`4ef102d34e`](https://github.com/nodejs/node/commit/4ef102d34e)] - **deps**: update to cjs-module-lexer@1.1.1 (Guy Bedford) [#37992](https://github.com/nodejs/node/pull/37992) +* [[`f0e77149a4`](https://github.com/nodejs/node/commit/f0e77149a4)] - **deps**: update archs files for OpenSSL-1.1.1k (Hassaan Pasha) [#37916](https://github.com/nodejs/node/pull/37916) +* [[`bbdcdad2c6`](https://github.com/nodejs/node/commit/bbdcdad2c6)] - **deps**: upgrade openssl sources to 1.1.1k+quic (Hassaan Pasha) [#37916](https://github.com/nodejs/node/pull/37916) +* [[`913ec56798`](https://github.com/nodejs/node/commit/913ec56798)] - **deps**: cjs-module-lexer: cherry-pick 22093e765f (pezhmanparsaee) [#37895](https://github.com/nodejs/node/pull/37895) +* [[`afc6ab2122`](https://github.com/nodejs/node/commit/afc6ab2122)] - **doc**: fix asyncLocalStorage.run() description (Darkripper214) [#38023](https://github.com/nodejs/node/pull/38023) +* [[`b40d35d649`](https://github.com/nodejs/node/commit/b40d35d649)] - **doc**: document how to unref stdin when using readline.Interface (Anu Pasumarthy) [#38019](https://github.com/nodejs/node/pull/38019) +* [[`ce14080473`](https://github.com/nodejs/node/commit/ce14080473)] - **doc**: move psmarshall to collaborators emeriti (Peter Marshall) [#37994](https://github.com/nodejs/node/pull/37994) +* [[`ae70aa3c63`](https://github.com/nodejs/node/commit/ae70aa3c63)] - **doc**: add distinctive color for code elements inside links (Antoine du Hamel) [#37950](https://github.com/nodejs/node/pull/37950) +* [[`8792c7c96b`](https://github.com/nodejs/node/commit/8792c7c96b)] - **doc**: add missing events.on metadata (Anna Henningsen) [#37965](https://github.com/nodejs/node/pull/37965) +* [[`a57dc06adf`](https://github.com/nodejs/node/commit/a57dc06adf)] - **doc**: improve Buffer's encoding documentation (Michaël Zasso) [#37945](https://github.com/nodejs/node/pull/37945) +* [[`f3fabb57cf`](https://github.com/nodejs/node/commit/f3fabb57cf)] - **doc**: add missing cleanup step in OpenSSL upgrade (Tobias Nießen) [#37927](https://github.com/nodejs/node/pull/37927) +* [[`13c3924af8`](https://github.com/nodejs/node/commit/13c3924af8)] - **doc**: add Windows-specific info to subprocess.kill() (João Lucas Lucchetta) [#34867](https://github.com/nodejs/node/pull/34867) +* [[`b6f4901221`](https://github.com/nodejs/node/commit/b6f4901221)] - **(SEMVER-MINOR)** **fs**: add support for async iterators to `fsPromises.writeFile` (HiroyukiYagihashi) [#37490](https://github.com/nodejs/node/pull/37490) +* [[`ad7e34446c`](https://github.com/nodejs/node/commit/ad7e34446c)] - **fs**: fix chown abort (Darshan Sen) [#38004](https://github.com/nodejs/node/pull/38004) +* [[`d86aca9a77`](https://github.com/nodejs/node/commit/d86aca9a77)] - **http**: optimize debug function correctly (Michaël Zasso) [#37966](https://github.com/nodejs/node/pull/37966) +* [[`062541aae5`](https://github.com/nodejs/node/commit/062541aae5)] - **http2**: add specific error code for custom frames (Anna Henningsen) [#37936](https://github.com/nodejs/node/pull/37936) +* [[`8525231902`](https://github.com/nodejs/node/commit/8525231902)] - **lib**: change wording in lib/domain.js comment (Akhil Marsonya) [#37933](https://github.com/nodejs/node/pull/37933) +* [[`21e399be4c`](https://github.com/nodejs/node/commit/21e399be4c)] - **lib**: change wording in lib/internal/child\_process comment (Akhil Marsonya) [#37903](https://github.com/nodejs/node/pull/37903) +* [[`3ab9619e56`](https://github.com/nodejs/node/commit/3ab9619e56)] - **module**: improve error message for invalid data URL (Antoine du Hamel) [#37701](https://github.com/nodejs/node/pull/37701) +* [[`0709cbb7fe`](https://github.com/nodejs/node/commit/0709cbb7fe)] - **(SEMVER-MINOR)** **net**: allow net.BlockList to use net.SocketAddress objects (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`daa8a7bbcf`](https://github.com/nodejs/node/commit/daa8a7bbcf)] - **(SEMVER-MINOR)** **net**: add SocketAddress class (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`a4169ce519`](https://github.com/nodejs/node/commit/a4169ce519)] - **(SEMVER-MINOR)** **net**: make net.BlockList cloneable (James M Snell) [#37917](https://github.com/nodejs/node/pull/37917) +* [[`669b81c68b`](https://github.com/nodejs/node/commit/669b81c68b)] - **(SEMVER-MINOR)** **net,tls**: add abort signal support to connect (Nitzan Uziely) [#37735](https://github.com/nodejs/node/pull/37735) +* [[`a94cc27cbe`](https://github.com/nodejs/node/commit/a94cc27cbe)] - **path**: refactor to use more primordials (Akhil Marsonya) [#37893](https://github.com/nodejs/node/pull/37893) +* [[`6cc1e15669`](https://github.com/nodejs/node/commit/6cc1e15669)] - **readline**: fix pre-aborted signal question handling (Nitzan Uziely) [#37929](https://github.com/nodejs/node/pull/37929) +* [[`a1123f0a29`](https://github.com/nodejs/node/commit/a1123f0a29)] - **(SEMVER-MINOR)** **readline**: add AbortSignal support to interface (Nitzan Uziely) [#37932](https://github.com/nodejs/node/pull/37932) +* [[`629e72e9f4`](https://github.com/nodejs/node/commit/629e72e9f4)] - **src**: fix typo in node\_mutex (Tobias Nießen) [#38011](https://github.com/nodejs/node/pull/38011) +* [[`e61cc0bfb0`](https://github.com/nodejs/node/commit/e61cc0bfb0)] - **src**: fix typos in crypto comments (Tobias Nießen) [#38024](https://github.com/nodejs/node/pull/38024) +* [[`6ad0b6f0f5`](https://github.com/nodejs/node/commit/6ad0b6f0f5)] - **src**: fix error handling for CryptoJob::ToResult (Tobias Nießen) [#37076](https://github.com/nodejs/node/pull/37076) +* [[`3175559bed`](https://github.com/nodejs/node/commit/3175559bed)] - **test**: add extra space in test failure output (Qingyu Deng) [#37957](https://github.com/nodejs/node/pull/37957) +* [[`0243376cfc`](https://github.com/nodejs/node/commit/0243376cfc)] - **test**: use faster variant for rss (Pooja D P) [#36839](https://github.com/nodejs/node/pull/36839) +* [[`b02c352ad6`](https://github.com/nodejs/node/commit/b02c352ad6)] - **test**: fix test-tls-no-sslv3 for OpenSSL 3 (Richard Lau) [#38027](https://github.com/nodejs/node/pull/38027) +* [[`0db1a1eacf`](https://github.com/nodejs/node/commit/0db1a1eacf)] - **test**: deflake test-fs-read-optional-params (Luigi Pinca) [#37991](https://github.com/nodejs/node/pull/37991) +* [[`4d50975cd7`](https://github.com/nodejs/node/commit/4d50975cd7)] - **test**: improve clarity of ALS-enable-disable.js (Darkripper214) [#38008](https://github.com/nodejs/node/pull/38008) +* [[`5e15ae05d0`](https://github.com/nodejs/node/commit/5e15ae05d0)] - **test**: add DataView test case for v8 serdes (Rich Trott) [#37955](https://github.com/nodejs/node/pull/37955) +* [[`6d28a24f1c`](https://github.com/nodejs/node/commit/6d28a24f1c)] - **tools**: update ESLint to 7.23.0 (Luigi Pinca) [#37979](https://github.com/nodejs/node/pull/37979) +* [[`51e7a33d54`](https://github.com/nodejs/node/commit/51e7a33d54)] - **tools,doc**: add "legacy" badge in the TOC (Antoine du Hamel) [#37949](https://github.com/nodejs/node/pull/37949) +* [[`570fbcef93`](https://github.com/nodejs/node/commit/570fbcef93)] - **url**: forbid pipe in URL host (Darshan Sen) [#37877](https://github.com/nodejs/node/pull/37877) + <a id="15.13.0"></a> ## 2021-03-31, Version 15.13.0 (Current), @ruyadorno diff --git a/src/node_version.h b/src/node_version.h index 7b85540aa99..e1fb571fbab 100644 --- a/src/node_version.h +++ b/src/node_version.h @@ -23,13 +23,13 @@ #define SRC_NODE_VERSION_H_ #define NODE_MAJOR_VERSION 15 -#define NODE_MINOR_VERSION 13 -#define NODE_PATCH_VERSION 1 +#define NODE_MINOR_VERSION 14 +#define NODE_PATCH_VERSION 0 #define NODE_VERSION_IS_LTS 0 #define NODE_VERSION_LTS_CODENAME "" -#define NODE_VERSION_IS_RELEASE 0 +#define NODE_VERSION_IS_RELEASE 1 #ifndef NODE_STRINGIFY #define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n) |