Notable Changes
-
CVE-2021-22930: Use after free on close http2 on stream canceling (High)
- Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930
This releases also fixes some regressions with internationalization introduced by the ICU updates in Node.js 14.17.0 and 14.17.1.
Commits
- [
] – benchmark: output JSON-compatible numbers (Michaël Zasso) #38778186477b2b53
- [
] – benchmark: fix http elapsed time (Antoine du Hamel) #387431f9693cf0a0
- [
] – build: fix building with external builtins (Momtchil Momtchev) #3909111ab4f81abc
- [
] – build: reconfigure when gyp files change on Windows (Joyee Cheung) #390661a657f250f1
- [
] – Revert “build: work around bug in MSBuild v16.10.0″ (Michaël Zasso) #3897716962c647d6
- [
] – build: make build-addons errors fail the build (Richard Lau) #389831069cf59e56
- [
] – build: fix commit-queue default branch (Mary Marchini) #389981d341561ae0
- [
] – build: don’t pass python override to V8 build (Richard Lau) #3896910736dd833a
- [
] – build: correct Xcode spelling in .gitignore (bl-ue) #38895149a000683a
- [
] – build: remove outdated dont-land-on-v6.x label (Michaël Zasso) #3888611ffbe3d5da
- [
] – build: add lto build to CI (Jiawen Geng) #3856717f53a0b349
- [
] – build: allow LTO with Clang 3.9.1+ (Jesse Chan) #387511a6f8ba8f0c
- [
] – build: replace non-POSIX test -a|o (Issam E. Maghni) #387311b5b1d1fb79
- [
] – child_process: refactor to use1fc2b1ec3081validateBoolean
(Qingyu Deng) #38927
- [
] – child_process: retain reference to data with advanced serialization (Anna Henningsen) #38728155ea29eedd
- [
] – debugger: rename internal library for clarity (Rich Trott) #390801716ee1531c
- [
] – debugger: use ERR_DEBUGGER_STARTUP_ERROR in _inspect.js (Rich Trott) #390241b7ee9d8287
- [
] – debugger: use error codes in debugger REPL (Rich Trott) #3902415d4d23dcf3
- [
] – debugger: use ERR_DEBUGGER_ERROR in debugger client (Rich Trott) #390241a3991d7c18
- [
] – debugger: removed unused function argument (Rich Trott) #388501052e1c5385
- [
] – debugger: refactor1f9a4dcb30c1inspect_repl
to use primordials (Antoine du Hamel) #38551
- [
] – debugger: refactor to use internal modules (Antoine du Hamel) #385501ad8056659f
- [
] – debugger: disable only the lint rules required by current file state (Rich Trott) #385291b5724a1984
- [
] – debugger: avoid non-ASCII char in code file (Rich Trott) #38529134659f2b7a
- [
] – debugger: wrap lines longer than 80 chars (Rich Trott) #385291ae90756582
- [
] – debugger: align message with Node.js standard (Rich Trott) #384001b30ff35a36
- [
] – debugger: remove unnecessary boilerplate copyright comment (Rich Trott) #389521d74d67f207
- [
] – debugger: enable linter on1e58f938ab31internal/inspector/inspect_client
(Antoine du Hamel) #38417
- [
] – debugger: reduce scope of eslint disable comment (Rich Trott) #389461249acd5e69
- [
] – debugger: revise async iterator usage to comply with lint rules (Rich Trott) #3884710ef5e088c0
- [
] – debugger: wait for V8 debugger to be enabled (Michaël Zasso) #38811179bfb0416b
- [
] – debugger: refactor1721edeffd31internal/inspector/_inspect
to use more primordials (Antoine du Hamel) #38406
- [
] – debugger: add usage example for121ecee1b4b1--port
(Rafael Gonzaga) #38400
- [
] – Revert “debugger: rename internal library for clarity” (Antoine du Hamel) #394461cde72213d1
- [
] – debugger: rename internal library for clarity (Rich Trott) #3908014c2b813799
- [
] – debugger: apply automatic lint fixes for inspect_repl.js (Rich Trott) #38411161da371251
- [
] – debugger: apply automatic lint fixes for _inspect.js (Rich Trott) #3841118dd1f70fe3
- [
] – debugger: removed unused function argument (Rich Trott) #388501fb0ab4c034
- [
] – debugger: fix race condition/deadlock on initialization (Rich Trott) #3816119e28c6c946
- [
] – debugger: replace internal use of deprecated API (Rich Trott) #381611a8924fa0fb
- [
] – debugger: allow longer time to connect (Rich Trott) #38161122afb7cbe6
- [
] – debugger: accommodate line chunking in Windows (Rich Trott) #381611b172e6f436
- [
] – debugger: fix inspect restart on Windows (Rich Trott) #3816111da692185a
- [
] – debugger: remove unused code (Rich Trott) #3816110321c5b194
- [
] – debugger: move node-inspect to internal library (Rich Trott) #3816118bd2a3926a
- [
] – deps: upgrade npm to 6.14.14 (Darcy Clarke) #395531acf5279c39
- [
] – deps: V8: backport ae7bfb3f03b3 (Michaël Zasso) #3905114efefe02a8
- [
] – deps: V8: backport 16ffec97e5eb (Michaël Zasso) #3905115039f21396
- [
] – deps: V8: cherry-pick b0a7f5691113 (Michaël Zasso) #3905119b69069f71
- [
] – deps: V8: cherry-pick 81181a8ad80a (thomasmichaelwallace) #3918714213e97d26
- [
] – deps: restore minimum ICU version to 65 (Richard Lau) #390681ccecea5f72
- [
] – deps: V8: update build dependencies (Michaël Zasso) #3924417557e74cf4
- [
] – deps: V8: cherry-pick 895949419186 (Michaël Zasso) #392441a60a960406
- [
] – deps: V8: cherry-pick 0b3a4ecf7083 (Michaël Zasso) #3924417fdd6ecbb4
- [
] – deps: V8: cherry-pick 7c182bd65f42 (Michaël Zasso) #3924414be2e878b7
- [
] – deps: V8: cherry-pick 92e6d3317082 (Michaël Zasso) #392441a83b01a4af
- [
] – deps: V8: backport 1b1eda0876aa (Michaël Zasso) #39244117eb561184
- [
] – doc: remove references to deleted freenode channels (devsnek) #39047104032fa1a3
- [
] – doc: add missing parameter types (Voltrex) #390131797bd73849
- [
] – doc: clarify that only one Python version is required to build (bl-ue) #388941e474e984e5
- [
] – doc: fixed typo in process.md (Derevianchenko Maksym) #389411cd48ee71d9
- [
] – doc: add missing semis after classes (Darshan Sen) #38931141fcbad2b2
- [
] – doc: mark util.inherits as legacy (Voltrex) #388961b40529643b
- [
] – doc: clarify when1b2d836b1ea1readable._read(...)
is called (Shaun Keys) #38726
- [
] – doc: fixed typo in n-api.md (julianjany) #388221e36d2a6d6a
- [
] – doc: use “Long Term Support” in collaborator guide (Rich Trott) #388411b4f60bb523
- [
] – doc: use “Long Term Support” in technical values doc (Rich Trott) #3884117a9850a5fb
- [
] – doc: use “Long Term Support” in README (Philip) #388391dfe9698db0
- [
] – doc: fix grammar in18699e622fc1fs.md
(yotamselementor) #38818
- [
] – doc: fixup code sample in http.md (TodorTotev) #387761826ae9b2e2
- [
] – doc: document null target pattern (Guy Bedford) #3872418049b69b7f
- [
] – doc: update code examples for14d9129eb711node:url
module (fisker Cheung) #38645
- [
] – doc,url: clarify domainTo* when built without ICU (Darshan Sen) #3878912ff671e4c4
- [
] – errors: add ERR_DEBUGGER_STARTUP_ERROR (Rich Trott) #3902419b993edca8
- [
] – errors: add ERR_DEBUGGER_ERROR (Rich Trott) #390241cfccf13e84
- [
] – errors: don’t rekey on primitive type (Benjamin Coe) #390251bb9a9adc2b
- [
] – http2: on receiving rst_stream with cancel code add it to pending list (Akshay K) #394231d48b91ea2b
- [
] – lib: add primordials.SafeArrayIterator (Antoine du Hamel) #365321d8cc2fffd6
- [
] – lib: harden lint checks for globals (Antoine du Hamel) #384191e3223edb89
- [
] – lib: enforce using1d4f96bb9261primordials.globalThis
instead of
1global(Antoine du Hamel) #38230
- [
] – lib: add1ea9003a5591globalThis
to primordials (Antoine du Hamel) #38211
- [
] – lib: remove semicolon in preparation for babel/eslint-parser update (Rich Trott) #390941097a7874d3
- [
] – lib: make internal/options lazy (Joyee Cheung) #389931199fe32cbc
- [
] – lib: add JSDoc typings for child_process (Voltrex) #3822212bc2a232af
- [
] – lib: fix typos (bl-ue) #388461b0a1984d4d
- [
] – meta: update label-pr-config (Michaël Zasso) #3895016c061d5f2c
- [
] – module: fix legacy1afb61786b91node
specifier resolution to resolve
1"main"field (Antoine du Hamel) #38979
- [
] – node-api: avoid SecondPassCallback crash (Michael Dawson) #388991cd3305a9e4
- [
] – src: use SPrintF in ProcessEmitWarning (Darshan Sen) #387581e7f266e93d
- [
] – src: cleanup uv_fs_t regardless of success or not (legendecas) #38996143fe6c1d27
- [
] – src: refactor to use locale functions (Darshan Sen) #390141dcfb182546
- [
] – src: throw error in LoadBuiltinModuleSource when reading fails (Joyee Cheung) #389041bee477b000
- [
] – src: add not-weak DCHECK to PersistentToLocal::Strong (Anna Henningsen) #388751ff7cc8f9ef
- [
] – src: replace1981217e48a1auto
s in node_api.cc (Khaidi Chu) #38852
- [
] – src: fix typos (bl-ue) #38845173e199d963
- [
] – src: use HandleScope in StreamReq::Done() (Darshan Sen) #3872012d32031724
- [
] – src: remove commented code in12c11d3ec0a1node_file.cc
(Juan José Arboleda) #38693
- [
] – src: write named pipe info in diagnostic report (legendecas) #386371846a138f54
- [
] – src: replace17d822008611auto
s in node_contextify.cc (Khaidi Chu) #38644
- [
] – src,url: separate some tables out of node_url.cc (Khaidi Chu) #38988151da7d2048
- [
] – test: add NumberFormat resolvedOptions test (Richard Lau) #39401145c2ea3b72
- [
] – test: move inspector-cli tests to sequential (Rich Trott) #3907916b2fea38d1
- [
] – test: improve buffer coverage (Rongjian Zhang) #3853816447cab7be
- [
] – test: fix name of variable in inspector-cli test (Tobias Nießen) #3886916f1862eab3
- [
] – test: fix typo (Houssem Chebab) #39045140093504bc
- [
] – test: remove obsolete TLS test (Rich Trott) #390011ab28f9b9a1
- [
] – test: improve coverage of lib/events.js (Rongjian Zhang) #385821b3b59953fe
- [
] – test: http outgoing _headers setter null (ycjcl868) #388811c99a09f05f
- [
] – test: suppress warning in test_environment.cc (Daniel Bevenius) #388681660a97b1d5
- [
] – test: improve coverage of fs internal utils (Rongjian Zhang) #3874610cca16ac4c
- [
] – test: fix writefile with fd (Nitzan Uziely) #388201fecad40f27
- [
] – test: simplify test-path-resolve.js (himself65) #38671101f00faaa8
- [
] – test: improve coverage for1504bfd7a881question
in readline (Qingyu Deng) #38799
- [
] – test: os, replace custom flatten method with built-in Array.flat (Wael Almattar) #387701eb91932e77
- [
] – test: improve coverage of lib/_http_outgoing.js (Rongjian Zhang) #387341aeea252b96
- [
] – test: give js-native-api tests consistent names (Gabriel Schulhof) #386921e265d8ee1b
- [
] – test: fix flaky inspector-cli tests when breakpionts are restored (Rich Trott) #38431199fd8bfc6a
- [
] – test: extend timeout on debugger tests for slower machines (Rich Trott) #3816114d3a1fad28
- [
] – test: fix comment typo (Rich Trott) #381611dd2642b5db
- [
] – test: fix test-inspector-cli-address (Rich Trott) #381611193ea8fd91
- [
] – test,debugger: migrate node-inspect tests to core (Rich Trott) #381611a62826bbe6
- [
] – tools: update babel-eslint-parser to 7.14.5 (Rich Trott) #390941ab45ace9bd
- [
] – tools: update ESLint to 7.29.0 (Rich Trott) #390831b8e63b3c08
- [
] – tools: update doctool dependencies, migrate to ESM (Michaël Zasso) #38966154a250e79c
- [
] – tools: avoid crashing CQ when git push fails (Antoine du Hamel) #368611443db64eed
- [
] – tools: fix typo in commit-queue.sh (bl-ue) #390001547f88b149
- [
] – tools: update ESLint to 7.28.0 (Luigi Pinca) #3895511023433a81
- [
] – tools: bump remark-preset-lint-node to 2.3.0 (Rich Trott) #3891019b4ae8fbb0
- [
] – tools: refloat 7 Node.js patches to cpplint.py (Rich Trott) #3885112ad0719e86
- [
] – tools: bump cpplint to 1.5.5 (Rich Trott) #388511b7686d0c1e
- [
] – tools: remove exception for Node.js 8 and earlier (Rich Trott) #3884012ec7c9de57
- [
] – tools: update setup-node to setup-node@v2 (pengjie) #3882511dc71da302
- [
] – tools: remove node-inspect from license (Rich Trott) #381611fc219d862c
- [
] – tools,doc: forbid CJS globals in ESM code snippets (Antoine du Hamel) #3888914bb0bd0f0e
- [
] – typings: add JSDoc typings for https (Voltrex) #38589158154ce426
- [
] – typings: add JSDoc typings for events (Voltrex) #3871216ea1368a67
- [
] – url,src: simplify ipv6 logic by using uv_inet_pton (Khaidi Chu) #388421b6942a6138
- [
] – vm: use missing validator (Voltrex) #389351dd00547ada
- [
] – worker: do not look up context twice in PostMessage (Anna Henningsen) #3878412c28e00685
Windows 32-bit Installer: https://nodejs.org/dist/v14.17.4/node-v14.17.4-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v14.17.4/node-v14.17.4-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v14.17.4/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v14.17.4/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v14.17.4/node-v14.17.4.pkg
macOS Intel 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v14.17.4/node-v14.17.4-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v14.17.4/node-v14.17.4.tar.gz
Other release files: https://nodejs.org/dist/v14.17.4/
Documentation: https://nodejs.org/docs/v14.17.4/api/
SHASUMS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51 -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
58e4ca29b0585ebeb1dbf5a701d9959dda219b5bdf6d8363213f51a779d395da node-v14.17.4-aix-ppc64.tar.gz
5c055a295e030cb789e2925b4c0647f7aaf461ffe5f2a08145c0605fb83ad4e0 node-v14.17.4-darwin-x64.tar.gz
f86bb831a371b3720e4d0037e4e77ffa427afdbd14e96d9fd16202fbbd84ce7d node-v14.17.4-darwin-x64.tar.xz
24fa6a3925027980e32cfa2555d1cc9eca989db6c0890fe1e12e1c9f9ef4baa7 node-v14.17.4-headers.tar.gz
9515893f1f6b844b179120d95e34ee2edbd47741291456ab69913184bdb9368c node-v14.17.4-headers.tar.xz
88b130c8f08a2baafb4e4c953ad46ba69cc60210da7d95c558c7ae3456beb825 node-v14.17.4-linux-arm64.tar.gz
4c42f31e7b52980e6bb930a7c2872e6e29533828c40623ba39e1c847e9ee6c89 node-v14.17.4-linux-arm64.tar.xz
e5452a8786ea018fe9c588ffe05ca4b4b66d6a7cda1f6352bda9bd0d0421e325 node-v14.17.4-linux-armv7l.tar.gz
df65ca9aea52b693b82638077a46218ae555160a20a8a5b0edd15ff0b3438c2b node-v14.17.4-linux-armv7l.tar.xz
67dc73c42d08b5b365da37354568555e404aa902bf17dfe35f5b3ecbf699700b node-v14.17.4-linux-ppc64le.tar.gz
255fffa3b2a78b86aa7dce7b65442bb2092d99be74d2f326f1dd66f7a1931b5d node-v14.17.4-linux-ppc64le.tar.xz
b169c8b3821e3360be90bde075e28bf4632c5d36ce97d8c30b10411abc960ac8 node-v14.17.4-linux-s390x.tar.gz
3e086d99c3e303a05657c04053df9e31e46a7cdf0245b1022ddecd0fc0e14663 node-v14.17.4-linux-s390x.tar.xz
99cc7115a30fe62abf06145d57b314092c9bf27499da85413a12f50140199619 node-v14.17.4-linux-x64.tar.gz
db18c54ebe01974d46198b08729249acbb0dcdc9aea82b53eec913f8c56035c6 node-v14.17.4-linux-x64.tar.xz
aaf06036afcc730971e9048b72ea6c79659a1fcc15d810ed822d33f51c35c848 node-v14.17.4.pkg
70c75f21ac601ae9e0fd86bdfd4e13e4d302f42b4fafcd6d21804b043a571c36 node-v14.17.4.tar.gz
ae7bf4e784f8c8027ffa1e3757f37d2bd5925d0c48988c4d7f07e4515853cf2c node-v14.17.4.tar.xz
0de71309336bc324bc5155867dc9d8d6337d83c1eed4777141ae83e967b3aca1 node-v14.17.4-win-x64.7z
d82a3ca777b4dccc97aa391eb483325cda731e0ae9b3a5669dbf34bb8defde6e node-v14.17.4-win-x64.zip
67caaa209d2d938f763f1a9ab08b3e30c06b2f18bf5c5d90b1198d0ddbd35feb node-v14.17.4-win-x86.7z
6564c13aa47240231eff9c28fdafa479dda3186fbc7e2bbc97bb5b791ccd0419 node-v14.17.4-win-x86.zip
e889da1ee06e576de4f31c3e6e0f12c73cfec495a53db4dd166fd58b0fea9f22 node-v14.17.4-x64.msi
296378f482fed803adfc0dd63870ebdd925adfadd0f2e0e04a3c2ccd2b16999e node-v14.17.4-x86.msi
dcef8bbee862ffbf498327d2ab0b9e1ccfc412d8e2270cbc0e45b0e6a1cdca86 win-x64/node.exe
859ceb82ba9af9df5831bb67f45427bfb774aae22e7c0ee52623a3196ec0e1eb win-x64/node.lib
bd9b1ff379588006a22d27b2cfbfa8e9a6291c4eb44ab4ec4819d971e56c0485 win-x64/node_pdb.7z
65ffd6a70fb9164d1a340683462edf64c52dd05f9363d7add276d79bcc92e93f win-x64/node_pdb.zip
300c4e8ca527361eab0e9128dd15913cf9e4edd0d3b00c3d623ab925d5fa2f91 win-x86/node.exe
1078be47b9315c81aa3bb989c4bba8ee23e0da9e4854a44006decf45d578833e win-x86/node.lib
e3c8ad2df1de6be3478479ae2f45a88402c423850dda7bf7aab1f76432f4efc9 win-x86/node_pdb.7z
c5a49448e192b41e8f93992055f773f5d3915f1ee908d8b1c596020e84aafe62 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=Tzuk
-----END PGP SIGNATURE-----
0 Comments