From 948f5152d7e90451439cb8040fd15237decbc229 Mon Sep 17 00:00:00 2001 From: Beth Griggs Date: Sat, 14 Nov 2020 16:58:06 +0000 Subject: 2020-11-16, Version 14.15.1 'Fermium' (LTS) This is a security release. Notable changes: Vulnerabilities fixed: * CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses. PR-URL: https://github.com/nodejs-private/node-private/pull/234 --- CHANGELOG.md | 3 ++- doc/changelogs/CHANGELOG_V14.md | 16 ++++++++++++++++ src/node_version.h | 2 +- 3 files changed, 19 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 73b0ddbb0a8..12ca5b9be08 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -30,7 +30,8 @@ release. -14.15.0
+14.15.1
+14.15.0
14.14.0
14.13.1
14.13.0
diff --git a/doc/changelogs/CHANGELOG_V14.md b/doc/changelogs/CHANGELOG_V14.md index b898d85a3da..fd4693c69a1 100644 --- a/doc/changelogs/CHANGELOG_V14.md +++ b/doc/changelogs/CHANGELOG_V14.md @@ -11,6 +11,7 @@ +14.15.1
14.15.0
@@ -51,6 +52,21 @@ * [io.js](CHANGELOG_IOJS.md) * [Archive](CHANGELOG_ARCHIVE.md) + +## 2020-11-16, Version 14.15.1 'Fermium' (LTS), @BethGriggs + +### Notable changes + +This is a security release. + +Vulnerabilities fixed: + +* **CVE-2020-8277**: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses. + +### Commits + +* [[`1fd2c8142b`](https://github.com/nodejs/node/commit/1fd2c8142b)] - **deps**: cherry-pick 0d252eb from upstream c-ares (Michael Dawson) [nodejs-private/node-private#231](https://github.com/nodejs-private/node-private/pull/231) + ## 2020-10-27, Version 14.15.0 'Fermium' (LTS), @richardlau diff --git a/src/node_version.h b/src/node_version.h index 1fc66446fb9..20855d5807e 100644 --- a/src/node_version.h +++ b/src/node_version.h @@ -29,7 +29,7 @@ #define NODE_VERSION_IS_LTS 1 #define NODE_VERSION_LTS_CODENAME "Fermium" -#define NODE_VERSION_IS_RELEASE 0 +#define NODE_VERSION_IS_RELEASE 1 #ifndef NODE_STRINGIFY #define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n) -- cgit v1.2.3