diff options
author | Ruy Adorno <ruyadorno@google.com> | 2022-09-21 01:22:11 +0300 |
---|---|---|
committer | Ruy Adorno <ruyadorno@google.com> | 2022-09-23 05:29:21 +0300 |
commit | 6b06e89c7dfccec6792008302af1cee57649445c (patch) | |
tree | 1206d2129f9500b143b20316976338cd6db97b33 | |
parent | 0713e21240f5a4a119994281f7743cdd4c930648 (diff) |
2022-09-23, Version 16.17.1 'Gallium' (LTS)v16.17.1
This is a security release.
Notable changes:
crypto:
* fix weak randomness in WebCrypto keygen (Ben Noordhuis) https://github.com/nodejs-private/node-private/pull/346
http:
* disable chunked encoding when using OBS fold is used (Paolo Insogna) https://github.com/nodejs-private/node-private/pull/341
src:
* fix IPv4 non routable validation (RafaelGSS) https://github.com/nodejs-private/node-private/pull/337
PR-URL: https://github.com/nodejs-private/node-private/pull/352
-rw-r--r-- | CHANGELOG.md | 3 | ||||
-rw-r--r-- | doc/changelogs/CHANGELOG_V16.md | 22 | ||||
-rw-r--r-- | src/node_version.h | 2 |
3 files changed, 25 insertions, 2 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 898a254c4a7..7fa9f406bf8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -33,7 +33,8 @@ release. </tr> <tr> <td valign="top"> -<b><a href="doc/changelogs/CHANGELOG_V16.md#16.17.0">16.17.0</a></b><br/> +<b><a href="doc/changelogs/CHANGELOG_V16.md#16.17.1">16.17.1</a></b><br/> +<a href="doc/changelogs/CHANGELOG_V16.md#16.17.0">16.17.0</a><br/> <a href="doc/changelogs/CHANGELOG_V16.md#16.16.0">16.16.0</a><br/> <a href="doc/changelogs/CHANGELOG_V16.md#16.15.1">16.15.1</a><br/> <a href="doc/changelogs/CHANGELOG_V16.md#16.15.0">16.15.0</a><br/> diff --git a/doc/changelogs/CHANGELOG_V16.md b/doc/changelogs/CHANGELOG_V16.md index f26c405068d..0db989d39cd 100644 --- a/doc/changelogs/CHANGELOG_V16.md +++ b/doc/changelogs/CHANGELOG_V16.md @@ -9,6 +9,7 @@ </tr> <tr> <td valign="top"> +<a href="#16.17.1">16.17.1</a><br/> <a href="#16.17.0">16.17.0</a><br/> <a href="#16.16.0">16.16.0</a><br/> <a href="#16.15.1">16.15.1</a><br/> @@ -63,6 +64,27 @@ * [io.js](CHANGELOG_IOJS.md) * [Archive](CHANGELOG_ARCHIVE.md) +<a id="16.17.1"></a> + +## 2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno + +### Notable changes + +The following CVEs are fixed in this release: + +* **[CVE-2022-32212](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212)**: DNS rebinding in --inspect on macOS (High) +* **[CVE-2022-32213](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32213)**: bypass via obs-fold mechanic (Medium) +* **[CVE-2022-35255](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35255)**: Weak randomness in WebCrypto keygen +* **[CVE-2022-35256](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35256)**: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium) + +More detailed information on each of the vulnerabilities can be found in [September 22nd 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/) blog post. + +### Commits + +* \[[`a54283a638`](https://github.com/nodejs/node/commit/a54283a638)] - **crypto**: fix weak randomness in WebCrypto keygen (Ben Noordhuis) [nodejs-private/node-private#346](https://github.com/nodejs-private/node-private/pull/346) +* \[[`0713e21240`](https://github.com/nodejs/node/commit/0713e21240)] - **http**: disable chunked encoding when using OBS fold is used (Paolo Insogna) [nodejs-private/node-private#341](https://github.com/nodejs-private/node-private/pull/341) +* \[[`77fe2f32e4`](https://github.com/nodejs/node/commit/77fe2f32e4)] - **src**: fix IPv4 non routable validation (RafaelGSS) [nodejs-private/node-private#337](https://github.com/nodejs-private/node-private/pull/337) + <a id="16.17.0"></a> ## 2022-08-16, Version 16.17.0 'Gallium' (LTS), @targos diff --git a/src/node_version.h b/src/node_version.h index d95df7498eb..aea46f3dad1 100644 --- a/src/node_version.h +++ b/src/node_version.h @@ -29,7 +29,7 @@ #define NODE_VERSION_IS_LTS 1 #define NODE_VERSION_LTS_CODENAME "Gallium" -#define NODE_VERSION_IS_RELEASE 0 +#define NODE_VERSION_IS_RELEASE 1 #ifndef NODE_STRINGIFY #define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n) |