Node.js Blog

Node v15.12.0 (Current)

Danielle Adams — Wed, 17 Mar 2021 22:31:55 GMT

Notable Changes

crypto:
- add optional callback to crypto.sign and crypto.verify (Filip Skokan) #37500
- support JWK objects in create*Key (Filip Skokan) #37254
deps:
- switch openssl to quictls/openssl (James M Snell) #37601
- update to cjs-module-lexer@1.1.0 (Guy Bedford) #37712
fs:
- improve fsPromises writeFile performance (Nitzan Uziely) #37610
- improve fsPromises readFile performance (Nitzan Uziely) #37608
lib:
- implement AbortSignal.abort() (James M Snell) #37693
node-api:
- define version 8 (Gabriel Schulhof) #37652
worker:
- add setEnvironmentData/getEnvironmentData (James M Snell) #37486

Commits

[44514600b2] - assert,util: fix commutativity edge case (Ruben Bridgewater) #37711
[8666d777cc] - benchmark: add benchmark for fsPromises.writeFile (Nitzan Uziely) #37610
[e9028eb646] - cluster: restructure to same prototype for cluster child (Yash Ladha) #36610
[8e1257e26d] - cluster: clarify construct Handle (Jackson Tian) #37385
[341ee31e15] - crypto: reconcile duplicated code (James M Snell) #37704
[a2d08d5dfd] - crypto: add internal error codes (Darshan Sen) #37650
[922f2f0eb2] - (SEMVER-MINOR) crypto: add optional callback to crypto.sign and crypto.verify (Filip Skokan) #37500
[55e522ca23] - (SEMVER-MINOR) crypto: support JWK objects in create*Key (Filip Skokan) #37254
[33180fad81] - crypto: add separate error for INVALID_KEY_TYPE (Darshan Sen) #37555
[d81b9af1fc] - crypto: improve randomUUID performance (Dawid Rusnak) #37243
[23d654105f] - crypto,test: improve hmac coverage with webcrypto tests (obi-el) #37571
[dfca2fac24] - (SEMVER-MINOR) deps: update to cjs-module-lexer@1.1.0 (Guy Bedford) #37712
[ce357c0c11] - (SEMVER-MINOR) deps: update archs files for OpenSSL-1.1.1+quic (James M Snell) #37601
[6d77b6174f] - (SEMVER-MINOR) deps: switch openssl to quictls/openssl (James M Snell) #37601
[3e1a46a6a8] - deps: upgrade npm to 7.6.3 (Ruy Adorno) #37721
[b2fd00398c] - deps: V8: cherry-pick 1648e050cade (Colin Ihrig) #37664
[7422453072] - deps: upgrade npm to 7.6.1 (Ruy Adorno) #37606
[89f3aa92b4] - doc: add marsonya as a triager (marsonya) #37667
[3710857de3] - doc: add hints to http.request() options (Luigi Pinca) #37745
[5d793737d7] - (SEMVER-MINOR) doc: update maintaining-openssl guide (James M Snell) #37601
[1022d3d947] - doc: recommend checking abortSignal.aborted first (James M Snell) #37714
[764aa2dcee] - doc: fix link to googletest fixtures (Tobias Nießen) #37698
[0d3cc2dc82] - doc: fix typo in description of close event (Tobias Nießen) #37662
[e55058fed1] - doc: use sentence case in README.md headers (marsonya) #37645
[e7fc7a4c23] - doc: crypto esm examples (James M Snell) #37594
[a3abd52e1e] - doc: add localPort to http.request() options (Luigi Pinca) #37586
[705bdfbe3e] - doc: fix grammar errors in http document (Qingyu Deng) #37265
[e5f7179d1e] - doc: add document for http.OutgoingMessage (Qingyu Deng) #37265
[7c0ce17e65] - doc: fix typo in doc/guides/collaborator-guide.md (marsonya) #37643
[60d8afa9ab] - doc: document that module.evaluate fulfills as undefined (James M Snell) #37663
[6192315cf3] - doc: remove generated from dsaEncoding description (Marko Kaznovac) #37459
[e4c8c50b28] - doc: fix typos in /doc/api/fs.md (Merlin Luntke) #37557
[ebc6f41072] - doc: fix linter issue (Antoine du Hamel) #37657
[d17aab1775] - doc: add esm examples for assert (James M Snell) #37607
[366772bf87] - doc: add return type of readline.createInterface (Darshan Sen) #37600
[f50db89a52] - doc: change lang info string in fs JS snippets (Antoine du Hamel) #37605
[5a9196e0e4] - doc: apply sentence case to headers in pull-requests.md (marsonya) #37602
[05badcf755] - doc: fix small typo in 15.11.0 release (Tierney Cyren) #37590
[e0e7aa1058] - doc: add top-level await syntax in vm.md (Antoine du Hamel) #37077
[732d8ca811] - doc: clarify that columnOffset applies only to the first line (James M Snell) #37563
[267bbe3412] - doc: document that NODE_EXTRA_CA_CERTS is read only once (James M Snell) #37562
[f56a805a0d] - doc: refactor signal info in child_process.md (Darshan Sen) #37528
[236ba04a79] - domain: add name to monkey-patched emit function (Colin Ihrig) #37550
[1c09776106] - domain: show falsy names as anonymous for DEP0097 (Colin Ihrig) #37550
[5a49e3139e] - errors: remove experimental from --enable-source-maps (Benjamin Coe) #37743
[e384291c90] - events: remove return value on addEventListener (James M Snell) #37696
[ba91ef2d08] - fs: improve fsPromises writeFile performance (Nitzan Uziely) #37610
[3572299fc2] - fs: add promisified readFile benchmark (Nitzan Uziely) #37608
[b277776845] - fs: improve fsPromises readFile performance (Nitzan Uziely) #37608
[6688569a50] - http: refactor to avoid unsafe array iteration (Antoine du Hamel) #37654
[c737df64fe] - http2: make res.req a normal property (Colin Ihrig) #37706
[ac2f50b3fd] - (SEMVER-MINOR) lib: implement AbortSignal.abort() (James M Snell) #37693
[12fb2ffc33] - lib: use AbortError consistently (James M Snell) #37715
[e63a25e2ff] - lib: fix typo in lib/internal/http2/core.js (marsonya) #37695
[852f53ed7e] - lib: fix typo in lib/internal/bootstrap/loaders.js (marsonya) #37644
[daa4ac54c5] - lib: remove use of array destructuring (Antoine du Hamel) #36818
[ae0e76c264] - module: refactor NativeModule to avoid unsafe array iteration (Antoine du Hamel) #37656
[a86334fbb9] - (SEMVER-MINOR) node-api: define version 8 (Gabriel Schulhof) #37652
[d28ce328ed] - src: fix variable name of OnCloseReceived callback (Tobias Nießen) #37521
[d59c6de7e8] - src: add error formatting support (Gus Caplan) #37598
[33436e39fe] - src: make BaseObject::is_snapshotable virtual (Anna Henningsen) #37539
[30c62dee1c] - src,test: support dynamically linking OpenSSL 3.0 (Daniel Bevenius) #37669
[4bf1f333c7] - stream,util: fix "the the" typo in comments (Luigi Pinca) #37674
[1b53087541] - (SEMVER-MINOR) test: update dom/abort tests (James M Snell) #37693
[c2cb153646] - (SEMVER-MINOR) test: fixup test to account for quic openssl version (James M Snell) #37601
[ede34aa128] - test: address flaky wpt/test-timers (Rich Trott) #37691
[ed32cd4e67] - test: fixup flaky test-crypto-x509 (Filip Skokan) #37709
[013b3ff2d4] - test: remove unnecessary V8 flag (Antoine du Hamel) #37671
[cc48816826] - test: fix WPT URL tests that fetch JSON data (Michaël Zasso) #37624
[b0ed1e790e] - test: improve error reporting in test-child-process-pipe-dataflow (Rich Trott) #37632
[f7edb07ec2] - test: terminate WPT workers after test completion (Michaël Zasso) #37627
[b7ef829dac] - test: ignore WPT worker errors after tests finished (Michaël Zasso) #37626
[257b1ab225] - test: update Web Platform Tests (Michaël Zasso) #37620
[1f6341852f] - test: remove FLAKY status for test-async-hooks-http-parser-destroy (Rich Trott) #37636
[044fd2fc86] - test: remove FLAKY status for fixed test (Rich Trott) #37633
[d5ff50d2a7] - test: clear flaky designation for test-stream-pipeline-http2 (Rich Trott) #37631
[381fb98061] - test: clear FLAKY designation for test-http2-pipe (Rich Trott) #37631
[0582c51754] - test: fix wasi/test-return-on-exit on 32-bit systems (Colin Ihrig) #37615
[0d04b6c043] - test: fix flaky test-child-process-exec-abortcontroller-promisified (Antoine du Hamel) #37572
[a44daff34d] - test: update all Web Platform Tests (Michaël Zasso) #37467
[c09bd77daf] - test: redownload wpt fixtures with correct encoding (Michaël Zasso) #37467
[57319770bb] - test,crypto: ensure promises resolve in webcrypto tests (Antoine du Hamel) #37653
[2d9b624668] - tls: refactor to avoid unsafe array iteration (Antoine du Hamel) #37655
[72af5d9895] - tools: parse changelogs only in the default branch (Antoine du Hamel) #37768
[bd62771a22] - tools: use bundled npm in update scripts (Ruy Adorno) #37613
[4de3b8483a] - tools: update glob-parent to 5.1.2 (Rich Trott) #37646
[ec71a0f817] - tools: check version number in YAML comments from changelogs (Antoine du Hamel) #37599
[07fc61b900] - tools: add support for mjs and cjs JS snippet linting (Antoine du Hamel) #37311
[440c944420] - tools: fix object name in prefer-assert-methods.js (Tobias Nießen) #37544
[7042ec89f1] - tools: update remark-preset-lint-node to 2.1.1 (Rich Trott) #37604
[82e78f7c12] - tools: fix compiler warning in inspector_protocol (Darshan Sen) #37573
[fd7234c52f] - tools: make update-eslint.sh work with npm@7 (Luigi Pinca) #37566
[057c6a842a] - tools: add ESLint rule no-array-destructuring (Antoine du Hamel) #36818
[25a5f0b3b8] - tools: update eslint-plugin-markdown configuration (Colin Ihrig) #37549
[7a1de1fce9] - tools: update ESLint to 7.21.0 (Luigi Pinca) #37546
[9c0ca4689d] - tools,doc: add support for several flavors of JS code snippets (Antoine du Hamel) #37162
[80af610d95] - util: inspect __proto__ key as written in object literal (Anna Henningsen) #37713
[0d135e8316] - (SEMVER-MINOR) worker: add setEnvironmentData/getEnvironmentData (James M Snell) #37486
[8024ffbba4] - worker: add ports property to MessageEvents (Anna Henningsen) #37538
[f4fd3fb6a7] - worker: allow BroadcastChannel in receiveMessageOnPort (Anna Henningsen) #37535

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b05beb9caa359aba0402412937a6f7434459adab016021c6e30f4c67b5ab35d9  node-v15.12.0-aix-ppc64.tar.gz
c04a77a3bf4a9ea7f5c0d34773cb8fcc4af594b202fa69ea41edc372ecd28df0  node-v15.12.0-darwin-x64.tar.gz
adcdfe6e147a67741ac32bd454f0ed69717387486b2275df33758b276d00de83  node-v15.12.0-darwin-x64.tar.xz
9514682405d3f1567838e289eeace2546a05fb88fc7d77f8ee566cadd92025ba  node-v15.12.0-headers.tar.gz
96fe0238aef09626ffed5288871ce7fe556a5aa3aeb529fe70ce8c8c9e722c60  node-v15.12.0-headers.tar.xz
cf1e276e381bbe58998feb584f907980ad2c6cd8c88dd4662a089b177b7ab0b2  node-v15.12.0-linux-arm64.tar.gz
be93231a6616356e2a33d5007de19ffd573d5a05a67662c1583edbb7b3ecb234  node-v15.12.0-linux-arm64.tar.xz
e90567de53a7a5a7ff4ff1088516ed5bbfa1db2ba7a7f9b7010cfbb3784ba408  node-v15.12.0-linux-armv7l.tar.gz
2bcebc5bc59acbd239e42967e2342e9385b407546d5570c09d5dde90a9b3bf77  node-v15.12.0-linux-armv7l.tar.xz
5f635bf5b6249562e220d40527a0d9dcb45f551660a4ee3948f639948c39ba90  node-v15.12.0-linux-ppc64le.tar.gz
a3d719ad30b90305a732414a3467c0833f8b58b1b8170c88e35c0c8e72958606  node-v15.12.0-linux-ppc64le.tar.xz
b8d0f1e206ff1efa512aa33b556359cde46724e8d9f8d6e6d1da27d109388bff  node-v15.12.0-linux-s390x.tar.gz
b04f13b4e34450d2794feac4bbc67028a595893f95fab63829763487b136e81c  node-v15.12.0-linux-s390x.tar.xz
0fa13e94e07e05b64819f44de92a81f4a95c8d952278e85eba3c7dd11fe63aea  node-v15.12.0-linux-x64.tar.gz
3892b4058cf12823c6cf39e4a3e9ce6da3f908cbfd211ddfc0a9df73eecd8bdc  node-v15.12.0-linux-x64.tar.xz
b8df5c09ed9bd191cf244d1d0d910e1f90bdfb17d4a163b690cff9794b061e37  node-v15.12.0.pkg
cfb13ad6443e9e08d2c37468e57d2d79b91c5372e9d9d3f03756a0e31d984497  node-v15.12.0.tar.gz
5ebbbe5024787a45134c4fbd77f50ae494c9cd49c87ce2c9f327af77d8af1a31  node-v15.12.0.tar.xz
e103b811f4be35cf3388a398ff487fd6a53e07c9acbfea52533a97e3668affd3  node-v15.12.0-win-x64.7z
630943523e7289545af6fba3a4ab615d3bef466b00e504be044c55bc8fa100e5  node-v15.12.0-win-x64.zip
b0a41cf8eb23f88ad187c6658ae470462c4b04e1385d20e95c1a5b800c6239ae  node-v15.12.0-win-x86.7z
8ba62e8ffa1e04c724e88522b07a395398bcd3215d908ec2d6b4bb8e313088ca  node-v15.12.0-win-x86.zip
238cc9aa94527ab2fbcef4a9bcf81bb01667fb4864dfe490aead1ae474d5584c  node-v15.12.0-x64.msi
7729c52a1dfd162217c698ca53c487abb300c011bdfd2b806b3cefa7ea10a82c  node-v15.12.0-x86.msi
a6e114a50a51dcdce880dac9ab48293132541cb682d21a5200001c354f93df6c  win-x64/node.exe
efec0902e39ae60a3c5e54db9e9fff3ebcec88744851f6df911da9ad9eb39a2d  win-x64/node.lib
68009b608bd60afbada5c08f447ecf37e60bd7c8f9299cb083dde8b41871fc61  win-x64/node_pdb.7z
a45dfbcfa66672328593d4a6840efb99124a0560bde7fc936d163617388f08fe  win-x64/node_pdb.zip
5bfd61ce67f5e4ef040ad2ed478644f28dd94d8be03be5ad8fa8f87930c09cc4  win-x86/node.exe
68abf8d368843410f4ca9ea0b3f8d31dbf9477c527a33a9039bbd9208236a732  win-x86/node.lib
6c445a037a3db38fedc6b2defae40b1a3f26876d11a75b70ffd04d57882fde3a  win-x86/node_pdb.7z
c11857ae1384e337034f54e188b05a3403cd69206870fd65bdba92b329c5ad4e  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEdPEmArbxxOkT+qN606iWE2Q7YgEFAmBSgPAACgkQ06iWE2Q7
YgHAxQ//X02ypoNObdBJR7Blg+tmi8Sz/sdDJ+8Etb1WwB0rzMqFr94vkZotx46l
GUSTZiVwKyi+rjAjJ+uJHJ0ywnLOj8hFLP6eL+yzn35nnoX0sBeg+2nML9N72eSM
BCWPSNOi5CsZdUFntBDJ5ZkMTZBaleIyqbgnBORTnUEqfzjmZGb2aErFXxYa6Gym
1vQyd+Ie+ZpKwWn+HhjjG+mqxnHmXHdS8DS1gBCZx507QiW8t5D0rbnR92jjstpo
ZNDcMvYXSzHxm6YvV5y8Aafkvb978gxkMww398eRQxxMFw6jKG7yARwjtB2qKoF+
8MDM7wg1RF5iP7rxFcWlA2rAk+/g3h2O9GGLkmpHc9YWrsrZXP2ejqWEgZaSLF2i
1HY/zz1IyE+rdWMvYY6Yc/8IUyLQX8yihnuUSlF70ziI4Ndpyqm6A2ZfrNfnO2e2
+zYt9eCymsn5avQ8PSoVPSdqRbqEU0l8ugIa4b3UQOLo1RfdkTKPg/NuH0p0OET6
a2mjnDWbQ1ycf7dDQ6o/6lCquIlRGgdrPYM5ptFN+DmdF2qjU1B+IsQa2m0uc7ab
iutwdgMKGRA2ynOdDkpHdCruWWcFczG29gf9AeSitLMxvNGU50y+AoeMy/FcUv1M
QSTd17389IYKzlYe7506olRf8iR03hQaP6S2pC5N6ZWNMLpX2vo=
=KqiK
-----END PGP SIGNATURE-----

Node v15.11.0 (Current)

Michaël Zasso — Wed, 03 Mar 2021 06:18:16 GMT

Notable Changes

[a3e3156b52] - (SEMVER-MINOR) crypto: make FIPS related options always awailable (Vít Ondruch) #36341
[9ba5c0f9ba] - (SEMVER-MINOR) errors: remove experimental from --enable-source-maps (Benjamin Coe) #37362

Commits

[d039e6fa80] - assert: refactor to avoid unsafe array iteration (Antoine du Hamel) #37344
[d2e5529e08] - bootstrap: include v8 module into the builtin snapshot (Joyee Cheung) #36943
[59861bac0e] - bootstrap: include fs module into the builtin snapshot (Joyee Cheung) #36943
[458a4108b7] - buffer: make Blob's constructor more spec-compliant (Michaël Zasso) #37361
[0d564ce214] - buffer: make Blob's slice method more spec-compliant (Michaël Zasso) #37361
[ddae112133] - child_process: fix spawn and fork abort behavior (Nitzan Uziely) #37325
[b1e188de8d] - crypto: refactor hasAnyNotIn to avoid unsafe array iteration (Antoine du Hamel) #37433
[291d9e9936] - crypto: check ed/x webcrypto key import algorithm names (Filip Skokan) #37305
[a3e3156b52] - (SEMVER-MINOR) crypto: make FIPS related options always awailable (Vít Ondruch) #36341
[b634469c38] - crypto: refactor to avoid unsafe array iteration (Antoine du Hamel) #37364
[01773ab614] - crypto: use BoringSSL compatible errors (Shelley Vohr) #37297
[f3d67000a0] - deps: upgrade npm to 7.6.0 (Ruy Adorno) #37559
[e1045f1004] - deps: upgrade npm to 7.5.6 (Ruy Adorno) #37496
[80d3c118f4] - deps: V8: cherry-pick 373f4ae739ee (Richard Lau) #37505
[1408de7e24] - deps: cherry-pick 8957d4677aa794c230577f234071af0 from V8 upstream (Antoine du Hamel) #37471
[725d48ae77] - doc: remove experimental from --enable-source-maps (Colin Ihrig) #37540
[5d939b7a49] - doc: fix typo in doc/api/packages.md (marsonya) #37536
[cbfc6b1692] - doc: document how to register external bindings for snapshot (Joyee Cheung) #37463
[dd7a04dc9f] - doc: fix typo "director" instead of "directory" (humanwebpl) #37523
[ba81e7cb5e] - doc: revise LTS text in collaborator guide (Rich Trott) #37527
[7529a97a5c] - doc: revise CI text in collaborator guide (Rich Trott) #37526
[1285b907ce] - doc: revise objections section of collaborator guide (Rich Trott) #37525
[bc86208a0a] - doc: revise premature disclosure text in collaborator guide (Rich Trott) #37524
[46af56752e] - doc: change links to use HEAD in top level docs (Michael Dawson) #37494
[3b737e63ce] - doc: apply sentence case to headers in doc/guides (marsonya) #37506
[fb5e5bed21] - doc: fix typo in webcrypto.md (marsonya) #37507
[3b7cb75554] - doc: document the NO_COLOR and FORCE_COLOR env vars (James M Snell) #37477
[0fac27d546] - doc: add url.resolve replacement example (Antoine du Hamel) #37501
[2228f44b25] - doc: apply sentence case to guides headers (marsonya) #37497
[617819e4fb] - doc: update CI requirements for landing pull requests (Antoine du Hamel) #37308
[4a40759b33] - doc: recommend queueMicrotask over process.nextTick (James M Snell) #37484
[834f63793a] - doc: apply sentence case to headers in doc/guides (marsonya) #37478
[7ac0820da0] - doc: fix typo in doc/api/http2/md (marsonya) #37479
[4ad7a78448] - doc: alphabetize vm Module class properties (Rich Trott) #37451
[a193d7ca87] - doc: alphabetize crypto Cipher class entries (Rich Trott) #37450
[54b6f1bcf9] - doc: use HEAD for links in api docs (Michael Dawson) #37437
[549d24b8ad] - doc: fix alignment of parameters (Michael Dawson) #37422
[f3559a922b] - doc: fix typo in doc/api/esm.md (marsonya) #37400
[c3d236d405] - doc: fix "referred to" in fs docs (Tobias Nießen) #37388
[9ac8c74539] - doc: document x509 error codes (Dan Čermák) #37096
[9a454afcd6] - doc: fix typo in esm.md (Jay Tailor) #37417
[b3bf3d9824] - doc: use HEAD in links where possible (Michael Dawson) #37421
[6675342cd9] - doc: clarify that async_hook callbacks cannot be async (James M Snell) #37384
[4b54c10500] - doc: use **Default:** more consistently (Colin Ihrig) #37387
[f20ce47dbb] - doc,child_process: pid can be undefined when ENOENT (dr-js) #37014
[6205e29cb9] - doc,lib: prepare for stricter multi-line array linting (Rich Trott) #37088
[9ba5c0f9ba] - (SEMVER-MINOR) errors: remove experimental from --enable-source-maps (Benjamin Coe) #37362
[c0cdb83433] - fs: fix writeFile signal does not close file (Nitzan Uziely) #37402
[e8b1e2c0a3] - fs: fix pre-aborted writeFile AbortSignal file leak (Nitzan Uziely) #37393
[6b42e65983] - fs: fixup negative length in fs.truncate (James M Snell) #37483
[d141fce634] - fs: use createDeferredPromise() in promises.watch() (Colin Ihrig) #37386
[bb81accb16] - lib: use .push and .unshift instead of .concat (Antoine du Hamel) #37239
[dc3c299862] - lib: remove outdated todo comment (Antoine du Hamel) #37396
[856d20b772] - lib: add URI handling functions to primordials (Antoine du Hamel) #37394
[a1ed78cb3b] - module: improve support of data: URLs (Antoine du Hamel) #37392
[27816eac61] - node-api: force env shutdown deferring behavior (Gabriel Schulhof) #37303
[f1381f7a7a] - src: fix alloc-dealloc-mismatch in node_snapshotable.h (Darshan Sen) #37443
[5ea2ed611f] - src: fix ETW_WRITE_EMPTY_EVENT macro (Michaël Zasso) #37334
[96bcd52d3e] - src: disable unfixable MSVC warnings (Michaël Zasso) #37334
[c75f5f372d] - src: avoid implicit type conversions (take 2) (Michaël Zasso) #37334
[e400f8c9c8] - src: support serialization of binding data (Joyee Cheung) #36943
[daad7bbd34] - src: adjust THP sysfs config token retrieval and file closure (James Addison) #37187
[4cc76457d9] - stream: move duplicated code to an internal module (Rich Trott) #37508
[3d3df0c005] - stream: add AbortSignal support to finished (Nitzan Uziely) #37354
[429dffd32e] - stream: add AbortSignal to promisified pipeline (Nitzan Uziely) #37359
[9696cf7142] - test: remove FLAKY status for test-http2-multistream-destroy-on-read-tls (Rich Trott) #37533
[453113938d] - test: make status file names consistent (Rich Trott) #37532
[00b3446a8e] - test: account for pending deprecations in esm test (Rich Trott) #37542
[f2aa305348] - test: fix incorrect timers-promisified case (ttzztztz) #37425
[ce7fbbf94c] - test: fix typo in test_node_crypto.cc (Ikko Ashimine) #37469
[ba319f0c60] - test: remove FLAKY for test-http2-compat-client-upload-reject (Rich Trott) #37462
[dfa0440341] - test: validate no debug info for http2 (Michael Dawson) #37447
[b38404ee17] - test: remove FLAKY designation for test-http2-client-upload-reject (Rich Trott) #37461
[b569105183] - test: clarify usage of tmpdir.refresh() (Darshan Sen) #37383
[4f41900687] - test: update upload.zip to be uncorrupted (Greg Ziskind) #37294
[d5c311ed15] - test: fix flaky test-worker-prof (Rich Trott) #37372
[df538ebc8e] - test: fix flaky test-webcrypto-encrypt-decrypt-aes (Darshan Sen) #37380
[19d6eb929c] - test: fix flaky test-fs-promises-file-handle-read (Rich Trott) #37371
[c554aa149c] - test,child_process: add check for subProcess.pid (dr-js) #37014
[5c27fd73b0] - tools: run doctool tests on GitHub Actions CI (Antoine du Hamel) #37398
[49013fcee1] - tools: make comma-dangle ESLint rule more stringent … (Rich Trott) #37088
[31f4600b7a] - worker: fix interaction of terminate() with messaging port (Anna Henningsen) #37319
[d93137b2a9] - workers: fix spawning from preload scripts (James M Snell) #37481

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

dbe6ab79a7fcff06e72d5a062c5850132d06ecc79bbda5049d33a0702483f906  node-v15.11.0-aix-ppc64.tar.gz
def5bea3d66e1ca4239d2c6cb22be9b841cd937f037f7b13976960c895ebf803  node-v15.11.0-darwin-x64.tar.gz
521b1fe91fc039a6be2aa4299ba9838a323fca2eeb9360a9fb060467c3609454  node-v15.11.0-darwin-x64.tar.xz
9d37f33ce9c19adc08336a707f2ef352694bfff19001b2c835b2bcc794f3dad0  node-v15.11.0-headers.tar.gz
dbde89dce1aecdaaa278df6df5d71aa84c3981e516d0881171a594c1a53924d3  node-v15.11.0-headers.tar.xz
bac8f957c35df2985ab10098d7ee494de28872ce8382df412ef745895f30f0d8  node-v15.11.0-linux-arm64.tar.gz
6f88a96fe56cc3fb8a5983adf77c6f3bcabd957c61f9bb909806791a88cce059  node-v15.11.0-linux-arm64.tar.xz
5afd0dd1bcbbca579ebbd15e0269c0f3a2070f25a4a91772a8544f04f10418fd  node-v15.11.0-linux-armv7l.tar.gz
d5358ab1128819fd4e422489d86b797e29580ebfde70cd57d50b138c3170746a  node-v15.11.0-linux-armv7l.tar.xz
0431af5015fc11b62b99a1e043ffadda1a765ac16e3b4267a3405635cd63c0a8  node-v15.11.0-linux-ppc64le.tar.gz
3770d55974da2fa2752ad0544f37ed40771b11097b3d1884000bfa858a26c755  node-v15.11.0-linux-ppc64le.tar.xz
b7fde7316347ccb718125cdb9cce305ab3b72d6df2eca6eba04f1087d198db51  node-v15.11.0-linux-s390x.tar.gz
aeeb11ca9631c63ebd95341fb601c484080fc622cbc84ed3079939b2cda27c98  node-v15.11.0-linux-s390x.tar.xz
74df02fbe07f280ffbd20db01cd876db2bfc3463c3620849d5b4c2b4a21216e8  node-v15.11.0-linux-x64.tar.gz
389de1384e20ca0e878de359c3b4afb1e0e8f1ca5a3cc5059177cf04d5ed43a5  node-v15.11.0-linux-x64.tar.xz
c5831187bcd8d336c71a5cb4765bd3725ba14d01844eb56f33b3566e6964fae6  node-v15.11.0.pkg
367aea2415df651bf23242e1b627071173f044ffd9f216d9ff69d3322a889bad  node-v15.11.0.tar.gz
1a7091a210423970619b4af95dba6f4c6e2b576b9700460e5220afff24a8d2d1  node-v15.11.0.tar.xz
3c3dd5b380826fa9285aae2be1a55b56df1334da1b88175cb9964d4a6d9da1bd  node-v15.11.0-win-x64.7z
57904b14bb30bc8931a09f4d5d131f5c755093b0608cdd7d30d1f03cc41e61b2  node-v15.11.0-win-x64.zip
ff8684b8b3d86e43c14ab171e747c474729e0de539280ef2355a93a39cd1f2f9  node-v15.11.0-win-x86.7z
e4bf3e877211ecec1bc6d26849b4317e5ce0c8b7787331b519e78847a988ae3b  node-v15.11.0-win-x86.zip
5a792858e21a58050801d30885ca5c96dc908468ceb37783c219175ea67d923b  node-v15.11.0-x64.msi
57e93fe0a0bc4b56b4a3b913c956f96db2afefc79553a4dc06488f44985c3ce2  node-v15.11.0-x86.msi
1bfa1c2660078a4620d320ebde339d183ecd725e38febecd873cbdfda4edcd6a  win-x64/node.exe
0692711edaf626282aaeff0a28cce749488d03a5d1db6490c7bb19866ec4aedd  win-x64/node.lib
4c9e4b326e142cbc8ea55d07f10b90e37e982a7bd44f4d4ad40b0d887fbdaded  win-x64/node_pdb.7z
b1095c438bccc4495338c109b05be23bb8ebce771faebf21e41660b54b5d312d  win-x64/node_pdb.zip
2cddc4bc386cadb033c7b717180255150a5c6688d75d47a3705f0407119ab8d3  win-x86/node.exe
f884d9353d2b848084edd4b5be8bf4a2b84a2ce2c45f22dc569ebbf59314f5d5  win-x86/node.lib
05c5b5c4ddacf0f50baf884695a6293dc63fa74b3ff1f19d474ab549f5536ecd  win-x86/node_pdb.7z
d98fef2119452dc2307e3e353ab4284e49bb686ecd9c624a05919681aa6c71e5  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=Vh03
-----END PGP SIGNATURE-----

February 2021 Security Releases

Daniel Bevenius — Tue, 23 Feb 2021 13:30:00 GMT

(Update 23-Feb-2021) Security releases available

Updates are now available for v10.x, v12.x, v14.x and v15.x Node.js release lines for the following issues.

HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)

Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

Impacts:

All versions of the 15.x, 14.x, 12.x and 10.x releases lines

Thank you to OMICRON electronics for reporting this vulnerability.

DNS rebinding in --inspect (CVE-2021-22884)

Affected Node.js versions are vulnerable to a DNS rebinding attack when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.

Impacts:

All versions of the 15.x, 14.x, 12.x and 10.x releases lines

Thank you to Vít Šesták for reporting this vulnerability

OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)

This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210216.txt

Impacts:

All versions of the 15.x, 14.x, 12.x and 10.x releases lines

Downloads and release details

Node v14.16.0 (LTS)

Bethany Nicolle Griggs — Tue, 23 Feb 2021 13:02:35 GMT

Notable changes

Vulnerabilities fixed:

CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
CVE-2021-22884: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210216.txt

Commits

[313d26800c] - deps: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) #37412
[6098012b48] - deps: upgrade openssl sources to 1.1.1j (Daniel Bevenius) #37412
[afea10b097] - (SEMVER-MINOR) http2: add unknownProtocol timeout (Daniel Bevenius) nodejs-private/node-private#246
[1ca3f5abcb] - src: drop localhost6 as allowed host for inspector (Matteo Collina) nodejs-private/node-private#244

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

086c8b4aa726c3b197765c9f66e05b25f8e811853d0686dfbf380299b4bf5869  node-v14.16.0-aix-ppc64.tar.gz
14ec767e376d1e2e668f997065926c5c0086ec46516d1d45918af8ae05bd4583  node-v14.16.0-darwin-x64.tar.gz
e20317c315198b3a6eaefbcf60b76082558d63be264736d56ecc7f5b0dabe60b  node-v14.16.0-darwin-x64.tar.xz
4b44b92903a61c29af20550f9d25bfc3029657df6b5f0a12072a70360f7eedee  node-v14.16.0-headers.tar.gz
e0704d9f5accdb876dd45be1b2ade2176219893b8a5df863130f3d9a11e69702  node-v14.16.0-headers.tar.xz
2b78771550f8a3e6e990d8e60e9ade82c7a9e2738b6222e92198bcd5ea857ea6  node-v14.16.0-linux-arm64.tar.gz
440489a08bfd020e814c9e65017f58d692299ac3f150c8e78d01abb1104c878a  node-v14.16.0-linux-arm64.tar.xz
a64860a02e4b692d262d453952cae99a3c9842d3fc90336b54ca03e990c780b8  node-v14.16.0-linux-armv7l.tar.gz
5d28ac28088c9a8c679285ed09df979125982941eec2c7cb465eee9a3b0be3c0  node-v14.16.0-linux-armv7l.tar.xz
2339b4b1a8db39348cb1877b0cfdee3b2ef2b730f461ef7263610cbaaea5232a  node-v14.16.0-linux-ppc64le.tar.gz
47a3768924a1f09ab8f9f50d0c73503e7bf9bb5a2bee58acf91e1e02d412ec78  node-v14.16.0-linux-ppc64le.tar.xz
485d6f38270de0763d9132b78fc88cefc8312a71f53587c874a2c09e58396057  node-v14.16.0-linux-s390x.tar.gz
335348e46f45284b6356416ef58f85602d2dee99094588b65900f6c8839df77e  node-v14.16.0-linux-s390x.tar.xz
7212031d7468718d7c8f5e1766380daaabe09d54611675338e7a88a97c3e31b6  node-v14.16.0-linux-x64.tar.gz
2e079cf638766fedd720d30ec8ffef5d6ceada4e8b441fc2a093cb9a865f4087  node-v14.16.0-linux-x64.tar.xz
8f8f6f7b6db7c518be52878a3a58d48bcd575446a9c6ce75a60cdb6cfe1a3dd0  node-v14.16.0.pkg
f6b904b06951de4c52089dd4456155d853e835b0dc4640f75458c6eb49f9e8ce  node-v14.16.0.tar.gz
4e7648a617f79b459d583f7dbdd31fbbac5b846d41598f3b54331a5b6115dfa6  node-v14.16.0.tar.xz
67f352be37b1b0c00ff7531e6b2a93b0021e5f06743f16394b9dbd6fc47a7fe9  node-v14.16.0-win-x64.7z
716045c2f16ea10ca97bd04cf2e5ef865f9c4d6d677a9bc25e2ea522b594af4f  node-v14.16.0-win-x64.zip
0f862027290301918db84dd705024a9b623a08f2ad86dfb3829c32c9c050e25c  node-v14.16.0-win-x86.7z
9699067581e0d333b13158d4ebb27b6357444564548aaa220d821cdc6d840bd2  node-v14.16.0-win-x86.zip
d9243c9d02f5e4801b8b3ab848f45ce0da2882b5fff448191548ca49af434066  node-v14.16.0-x64.msi
61d549ed39fc264df9978f824042f3f4cac90a866e933c5088384d5dedf283fe  node-v14.16.0-x86.msi
5c10d99cc7229fd8092585f7a5e15771d62dc84b9edeb0c2140a2d187b305506  win-x64/node.exe
3f67805bbcfea13e9acc892f4590cacc5eb2514ac817d003f5327c07a2385a0d  win-x64/node.lib
fe3cab4ca83172f495b83710731224e01cd936c2d823a53480bed1113fa704f8  win-x64/node_pdb.7z
099ed74db3ceb4e47816bd1a9d792a4ab465ba60ec945b65e95e24b7049f76e0  win-x64/node_pdb.zip
c7b723504b5ee487785a12989026db061f5ee1fb120826fcc1afcbec5fc5d1d5  win-x86/node.exe
dfe06cfa2c95a49a92bfebc8f68ec1216b951c9363cfc8b36fbc80fc1588fb15  win-x86/node.lib
235bc5ec83e9dfd328dbca9c71f2f036f9bb13d2378c3869ced7a1edc5ff63a1  win-x86/node_pdb.7z
58a50e0a495189c054c96e76d2f9a6c8f45d6880852db3404eaca99a133c91a4  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAmA0/HgACgkQ1wYoSKGr
AFxqNQgArjEJi6JfqFHsMDkKp75ZHZY7X+1VjbwaPZd7r1dY4gbe/ZqHdXEzVHEB
Y1Pbqrkng8zOzHDWqxGhjuOYCwjcKynLAKcfKqCpZ/reqQzf2lmdB2zM8clqG++r
rWT9auJz4JtxC5cSQ48rEjju2aQpwSARlrZepr99k8QoRWL8lZhp8t/ccYwWMunN
oE8v/4wR1WX23GnQmAze9I7ABYmxClFmDSUG85ml4VAI7+G0bLiH72gCe6sJR2Ms
e5gS5XqbRvth4oUH4f/IRRoS0BOl5oXY74Qg2d23qMG6WKBu6Gu/phcFWpSuiMnV
BHFfl4y/8zRNLHPD00KwOp4qucMLvA==
=XRSJ
-----END PGP SIGNATURE-----

Node v12.21.0 (LTS)

Richard Lau — Tue, 23 Feb 2021 13:01:45 GMT

Notable changes

Vulnerabilities fixed:

CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
CVE-2021-22884: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210216.txt

Commits

[e69177a088] - deps: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) #37413
[0633ae77e6] - deps: upgrade openssl sources to 1.1.1j (Daniel Bevenius) #37413
[922ada7713] - (SEMVER-MINOR) http2: add unknownProtocol timeout (Daniel Bevenius) nodejs-private/node-private#246
[1564752d55] - src: drop localhost6 as allowed host for inspector (Matteo Collina) nodejs-private/node-private#244

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

10a487471ebd720f0d643c9e8e919db580baf852b812788f00db736d2e634d77  node-v12.21.0-aix-ppc64.tar.gz
4d0b5d07d41a16909fdeb41c3158c27bcdccf16231cccf76d5eb6835e2076e90  node-v12.21.0-darwin-x64.tar.gz
4184cc5412cdf256996aa7f559859abc355b48f03144349cf8531b6bf0526f49  node-v12.21.0-darwin-x64.tar.xz
f708e19706d1c486b80ee2420cb8ef5d25c0958bf05f7c880519f97b8bf6d46d  node-v12.21.0-headers.tar.gz
5a59cb03e24e7a23f3e9ba236627604f14c9296c461034fc6126beeacb1befa9  node-v12.21.0-headers.tar.xz
5748bfc5bbf7d9c1c8e79bd4f71d8f049c7fc7bc5b52e04685633319843c4f93  node-v12.21.0-linux-arm64.tar.gz
66fcb5a975fbc2dec449fab5eedd947b92cc2a4ad02085be5c3277896abab252  node-v12.21.0-linux-arm64.tar.xz
6edc31a210e47eb72b0a2a150f7fe604539c1b2a45e8c81d378ac9315053a54f  node-v12.21.0-linux-armv7l.tar.gz
00c0a0ac0841e3ca3eefd561b54ec5e32978255489d64f4077410660d3bee1a6  node-v12.21.0-linux-armv7l.tar.xz
6fea17dc8bc059692dce1a149b2eb49c837f8b8569ba1c5b9a51a955b9df22f3  node-v12.21.0-linux-ppc64le.tar.gz
19cb55de1337b1beb7a8a7241f624b70ddc39687f9f1aabc0a524f2cdee8bce7  node-v12.21.0-linux-ppc64le.tar.xz
e521bc915c0568995f3083bf069ef41a930585a35f4cac50e17208be125c865d  node-v12.21.0-linux-s390x.tar.gz
038872f0ac5d061c1f299383a7faf9abc1c2c82314e08b2c548a0e5baf99c29f  node-v12.21.0-linux-s390x.tar.xz
ab121de3c472d76ec425480b0594e43109ee607bd57c3d5314bdb65fa816bf1c  node-v12.21.0-linux-x64.tar.gz
eb89c02153cfa25e40170e5e9b0ab43ad55d456af8b72ad2a8c2a42b7a647432  node-v12.21.0-linux-x64.tar.xz
30d8bee18a5f874104997a0383abe9c8bc983971c1cb0d7be7b49ef957e3b196  node-v12.21.0.pkg
d44d09355caea12f280f2854c2f6e933446b49b65e926bcb5e50bd0ab2b17d73  node-v12.21.0-sunos-x64.tar.gz
08b76d199feb0f2c76742c192ee6040f61d6f551ca6bbc1618bd2e387699e27a  node-v12.21.0-sunos-x64.tar.xz
36e862555bebc04b13f7afebf4472c4dd7ebf4c891f9d6746ec545a4f099d05e  node-v12.21.0.tar.gz
052f37ace6f569b513b5a1154b2a45d3c4d8b07d7d7c807b79f1566db61e979d  node-v12.21.0.tar.xz
3d635d2cc254a3d203182d2051b57ad3e2000afecc3cb8da0128ae1bf610b040  node-v12.21.0-win-x64.7z
d8ae037fb8be60e74fb96124e341fdf1251eae0d5d88d7d86f056d4b0c9440f3  node-v12.21.0-win-x64.zip
892429ab069d325622040dc81f35c8903c9271dd2abcf21a50cc0eb260356426  node-v12.21.0-win-x86.7z
1e966131d9d65107d8ca1dbdaa997533a6f7375af4b9dbc2d38d786d37b271b5  node-v12.21.0-win-x86.zip
aa644a95369423095d274e3f7a4ee4826021c7b54c1b267de0c855578d9599db  node-v12.21.0-x64.msi
221d142409fd750c2eb7fc829e597b3a28f16622e64dd05f27bf62e17503cbb3  node-v12.21.0-x86.msi
dfc0a5056def827b5e16a9dcf0c8bad65e09fa327de03839116fc32f802d427d  win-x64/node.exe
2662b79e36ee678661554d290a3b8277c4c92cc74dffcda37a9f8f8e83287c73  win-x64/node.lib
6132bece56ab20f45388b83c16e8fadc2c1fa84ab2c7bcbccd2e729c08e99e9d  win-x64/node_pdb.7z
bd49185210e0a32410f42c3cc0c5dca12c9423a7a8e8db653557b0e2157cee2d  win-x64/node_pdb.zip
68f086de221ee2e0bd40968400181cb9bd4b0ca38f6370a5665b5fac0fd85f20  win-x86/node.exe
794dd4c597af2483d162426a37c99746d319aaa358219ace7bb179140f16d5f2  win-x86/node.lib
4f42fb8127392963c5144c24d5655cbd01cfb17b0a6337e4e8d9289498c28e8b  win-x86/node_pdb.7z
ba116759b56690967d41fc27101a4e5659a2f8fd853e9010a3b1407575423325  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=GYm4
-----END PGP SIGNATURE-----

Node v15.10.0 (Current)

Bethany Nicolle Griggs — Tue, 23 Feb 2021 13:01:31 GMT

Notable changes

Vulnerabilities fixed:

CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
CVE-2021-22884: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210216.txt

Commits

[2a3ce5974b] - deps: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) #37412
[afbce66874] - deps: upgrade openssl sources to 1.1.1j (Daniel Bevenius) #37412
[4184806dee] - (SEMVER-MINOR) http2: add unknownProtocol timeout (Daniel Bevenius) nodejs-private/node-private#246
[43ae9c46c3] - src: drop localhost6 as allowed host for inspector (Matteo Collina) nodejs-private/node-private#244

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

351ef617dea3ec93819ebb92435b82febaa1de393bdb442dcc129ac76a03014c  node-v15.10.0-aix-ppc64.tar.gz
45ccf8dc5ac539a4f965313593510970a992e5f5dcf8cfacaebec0f99fd546be  node-v15.10.0-darwin-x64.tar.gz
60678b3995712ed96928c9bcce86d6847035d7853417b9862e8b2f7bd888aa7e  node-v15.10.0-darwin-x64.tar.xz
5ee67c683f7d5d060829aece2ec04609de9d500f5b6f56f584c0f1707650c9da  node-v15.10.0-headers.tar.gz
b8cb4c1f8cdfb19c3ecffa01a1a23754ae2075a19dfac3c33ababe9f3e5c9ad0  node-v15.10.0-headers.tar.xz
a9f8c807ec31ed24fe6e0b2d002ce2d1b9f20b7e23a0efe10679331a44b30dba  node-v15.10.0-linux-arm64.tar.gz
d3af39fb8d7bfc22c711aed4120a3fc4419cd70b3d2016b18c6a709fa0f0e845  node-v15.10.0-linux-arm64.tar.xz
ca27a48dd9233b00c49b37a07751395657d4e454ebfa5066a6371e5f6c9969cf  node-v15.10.0-linux-armv7l.tar.gz
200ca8de7f7d575dcf9221a40fe8754be40759b97f254d55b1f4679f368d5eee  node-v15.10.0-linux-armv7l.tar.xz
49977dac42124295bedff31b8409f2990b586aa673f439ed5e9636ac1485a08d  node-v15.10.0-linux-ppc64le.tar.gz
7a54dc554686d7fe7c45db57068a03c69dfd64afd7994873b77c1c7bc978db8a  node-v15.10.0-linux-ppc64le.tar.xz
078a8c2207f92040e0decdcfde0cd368973208876f01ff7d03de6bd0d5f09090  node-v15.10.0-linux-s390x.tar.gz
c2c8375d491e9f7c39e297587bcf99fe6be70ae38aaa9c1757405a5818fe5c73  node-v15.10.0-linux-s390x.tar.xz
31554d9b2de47948a364a007031c635d3943c303e50703b5f4c41a5eead07737  node-v15.10.0-linux-x64.tar.gz
a56793179965235e7c4f911f2cec08dd3f31dc1e09d68eddbb397107042a43fc  node-v15.10.0-linux-x64.tar.xz
aa188140cdc1f96a719bcc88904a37fdcd0745ed8344de9866a4e6869cc45466  node-v15.10.0.pkg
643f9bbd6ae4c424224c946cad52d11b9379aaab927673b2e3c6c4df9a1a7b0e  node-v15.10.0.tar.gz
7748d8f15eabb5543f26fec8ca08e755044512fab1f6bd98d5ba403f276deec4  node-v15.10.0.tar.xz
1e346ced805d316f9d288a2165e9273ed3e75d18bf02b55cda890af25e90919b  node-v15.10.0-win-x64.7z
2bf72da4e5ddc485599f2eca54ab7c59001d70baec7ff2bb050d9f4ed1b066a6  node-v15.10.0-win-x64.zip
3509ce1b7d26116e955c39eae2f60e2132b0b7db423283cac19ef643d682efc6  node-v15.10.0-win-x86.7z
aba943732f371eda2341a62de84c459b376b755917ea92ae587afcc4bfbbaf5d  node-v15.10.0-win-x86.zip
999ca54fb0b329dca36eb01975d6f4a2b3120707d078c594019e88cdda8f0a85  node-v15.10.0-x64.msi
ed40690ceee7339554f0d592453f864235e1e241a85f0e53d7e39a2c73554ab3  node-v15.10.0-x86.msi
a0db7bf0565841e88b85979efb9a640a702dd8ded3b5915342635b190b1413ca  win-x64/node.exe
0692711edaf626282aaeff0a28cce749488d03a5d1db6490c7bb19866ec4aedd  win-x64/node.lib
456373f6ed6145be5b01ce588590ec927c7c05f025704082a4986dc2eb4b25a6  win-x64/node_pdb.7z
b6de50aebb75696fca501a5bbf1914c7a01ebd929d2dc49707621410b8017276  win-x64/node_pdb.zip
5c0095f58e0d4e0bdb0598b5db5a5c4c31ba1cf090994fbd415ab4dc273506f6  win-x86/node.exe
6cec3adfe0cbf4f894d89fafe857fbda9dba14b61586d6abf145b3dd7775dad3  win-x86/node.lib
1ff43f5c0c77951cdfe21bb49973e800c8fdee6ea7565d6054bd2775a024ec47  win-x86/node_pdb.7z
59bb4f60277962be395513fa597126a44ce7264674a94ada6d32c0d2b6477f22  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAmA0/JQACgkQ1wYoSKGr
AFzJvggAn5bMlAIhNEZUTZHEX9KiBMiSozCY+E+sZHFCuUwW5wCP2C1eZ6ImNcTi
QAjQEtHk2Pa2weHY2+TI0PZ+BNvXCYcgdTI5jsuhNEoIAvcNRKjdJzEWSwbMZfPv
LHbaGl4SyvNlAweDDsE7lskI1DpyS3p6h/X2+NmUZjcqceMVUPD2/udymIZHwW3P
/8hgntl3N19Qu18VXm1cUDR5VlCuDFrcC1Y/1Lt9Ju++08VV6zWxKz+asrUleQ3S
sPPHOmLVlJlh8tRCY0gGaGzbwhTT0/6fODPlBZzvGQUxUJaSXsQDnY8fcU6D84CX
btojDN2Lobjy1SINcPNh8/Pav0h8AQ==
=22VP
-----END PGP SIGNATURE-----

Node v10.24.0 (LTS)

Richard Lau — Tue, 23 Feb 2021 12:58:46 GMT

Notable changes

Vulnerabilities fixed:

CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
CVE-2021-22884: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210216.txt

Commits

[0afcb4f6bb] - deps: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) #37415
[447be941cd] - deps: upgrade openssl sources to 1.1.1j (Daniel Bevenius) #37415
[3f2e9dc40c] - (SEMVER-MINOR) http2: add unknownProtocol timeout (Daniel Bevenius) nodejs-private/node-private#246
[d1cf6a9b0f] - src: drop localhost6 as allowed host for inspector (Matteo Collina) nodejs-private/node-private#244

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

59bdb393035c605627bf4ba64ad8edcc74f067043790c7edc545333cca8630c4  node-v10.24.0-aix-ppc64.tar.gz
265ccad26fdfdcd86d6571b0bf5f1815b55f6a4a9b367816ad0369790501f55e  node-v10.24.0-darwin-x64.tar.gz
ba749262eb5599360cdfe5edf7516a98269defcb6d2de56a9bbfd95a76366a7d  node-v10.24.0-darwin-x64.tar.xz
165ca4182bcfa952d2405e53f480525dfe62c3fd453a893bc34df6cbb8fc6740  node-v10.24.0-headers.tar.gz
c7afbb814018f2bed87e85b2aa71c864c961a3754b0733bcfd077fbb068cfd76  node-v10.24.0-headers.tar.xz
65e6255c6f95b6dcf87f13c21994bc80205b4bd7c7d9a3fe1f8f2a18daec576d  node-v10.24.0-linux-arm64.tar.gz
41bbf035512a72d073e93440458ad6e48586853fc0a5b6396ded80a2d45cb49c  node-v10.24.0-linux-arm64.tar.xz
5a5dcc02bfd0ddcbeb2ef68f116bb72e416149f15f12767864bde77edd7f39d1  node-v10.24.0-linux-armv6l.tar.gz
076d387b1e9345c675745a453f642b6819b07b21cf21d6824f33c8d508f71559  node-v10.24.0-linux-armv6l.tar.xz
02feb052d0e1eb77c9beea5cfe3b67b90d5209ab509797f4f6c892c75cc30fda  node-v10.24.0-linux-armv7l.tar.gz
0b01cb43903bc2d06f0ea3bb6753da4c91fd9533f1bd74e8bd2ee55b470a9084  node-v10.24.0-linux-armv7l.tar.xz
227338ffe74d2c2a87bd1bd77f4c74d21d8027e8eff78eb8e7f686a470b83fbe  node-v10.24.0-linux-ppc64le.tar.gz
1d5b9c5a6ffb7027bbf9cf608d919c280039cea1f1f0308324aca871d874fca7  node-v10.24.0-linux-ppc64le.tar.xz
5a4478e6602c6c6fb28bc01b5356215e714ef0d3917fb1ede487c9b93e88741e  node-v10.24.0-linux-s390x.tar.gz
322d9faf2d724de4596cc021e5eb37553ceafc07fccd2f39afede8c56dde7432  node-v10.24.0-linux-s390x.tar.xz
d8d7ecb0667a9b86b7ce1994731f9c9d313b46f04de59f724259a6fda685617a  node-v10.24.0-linux-x64.tar.gz
a937fb43225289ada54c6c3272a2ad18e1e33b8c7d6211c289d421b5051fdbd0  node-v10.24.0-linux-x64.tar.xz
347004459f040a83bf7f1cb663dd9ba846df8def8967a9572801484768b8a754  node-v10.24.0.pkg
c5233cea13d3ce560cda1cdda873c2054bd3b5621da466fb4965668ef4259b93  node-v10.24.0-sunos-x64.tar.gz
2b43e85f73a0dbc1ec0e64394c2607cbfe53045aaa11f3d9a65ceb4cc6ee8394  node-v10.24.0-sunos-x64.tar.xz
c8d0a56279be77a9033b5f89603c6c491060a661c607fbf82bbe931ca662996e  node-v10.24.0.tar.gz
158273af66f891b2fca90aec7336c42f7574f467affad02c14e80ca163cb3acc  node-v10.24.0.tar.xz
bf839f4d96e1cb105c271a1ccb7a728ff8ce7dfd34a260afaf02e349b00831d2  node-v10.24.0-win-x64.7z
abf0aa48f642aa9ef6cc0021d2fe0275a60feece603664a76c31a812adc710bb  node-v10.24.0-win-x64.zip
7e0e4c6b43935ce194456bbf066bb72fad49427fa08bfd4e7fc9818b4f312d3c  node-v10.24.0-win-x86.7z
6e32b8c513ba209ae7ac2058c106d0b83b4c14c3472d3f1ad956fd3462691799  node-v10.24.0-win-x86.zip
a2c5dd02e43715127248d8533d260a9d4359b9f2d6ba6958df65631b8bf627cf  node-v10.24.0-x64.msi
afcfa989c331e92ed02aeb88b0865ac2264b7bc297685ea46de48d5a945d46c0  node-v10.24.0-x86.msi
58c529834cbc65363d07e1ee59bb577cc76f527a2b0db80d0784e9b6e3c7e6da  win-x64/node.exe
7688ed23318d253aa98ee198f94983e4b563fab188e6fd9dd32955e77111096a  win-x64/node.lib
2ae5424c759a3eb7aabfbb5d21ce8227f43d27150fbf6e1dd89173eeae9a4f8c  win-x64/node_pdb.7z
7a68fa70295977484f1b1dcffa7d590c5b5f84b28d0ea51ffea734850307933a  win-x64/node_pdb.zip
121c6d54aa31bb43a042e7cdedf0bdc916c39895f0f46c34cac76c3990895381  win-x86/node.exe
de1f3445597cbbee2e5eac435651f5dcab049a2d8bd3636877ab5803a87e269e  win-x86/node.lib
2e218cafa528cd3a35dd58ba621b3f182498db7f235c072f14d1426043cf2eb8  win-x86/node_pdb.7z
2e4d6d1c72a90bdff03412d525b764a445edc108cd0503c4baf7da708b081a6e  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=V+LP
-----END PGP SIGNATURE-----

Node v15.9.0 (Current)

Danielle Adams — Thu, 18 Feb 2021 02:30:19 GMT

Notable Changes

crypto:
- add keyObject.export() 'jwk' format option (Filip Skokan) #37081
deps:
- upgrade to libuv 1.41.0 (Colin Ihrig) #37360
doc:
- add dmabupt to collaborators (Xu Meng) #37377
- refactor fs docs structure (James M Snell) #37170
fs:
- add fsPromises.watch() (James M Snell) #37179
- use a default callback for fs.close() (James M Snell) #37174
- add AbortSignal support to watch (Benjamin Gruenbaum) #37190
perf_hooks:
- introduce createHistogram (James M Snell) #37155
stream:
- improve Readable.from error handling (Benjamin Gruenbaum) #37158
timers:
- introduce setInterval async iterator (linkgoron) #37153
tls:
- add ability to get cert/peer cert as X509Certificate object (James M Snell) #37070

Commits

[d0f1ff53ff] - async_hooks: set unhandledRejection async context (Sajal Khandelwal) #37281
[c160d88c9e] - buffer: add @@toStringTag to Blob (Colin Ihrig) #37336
[8487184457] - child_process: fix bad abort signal leak (Nitzan Uziely) #37257
[e28ea89b1a] - crypto: fix subtle.importKey JWK OKP public key import (Filip Skokan) #37255
[55fd6b6611] - crypto: avoid infinite loops in prime generation (Tobias Nießen) #37212
[9dac99a11a] - crypto: fix and simplify prime option validation (Tobias Nießen) #37164
[3e2746ff63] - crypto: remove webcrypto "DSA" JWK Key Type operations (Filip Skokan) #37203
[011910b424] - (SEMVER-MINOR) crypto: add keyObject.export() 'jwk' format option (Filip Skokan) #37081
[c0eadef495] - deps: upgrade to libuv 1.41.0 (Colin Ihrig) #37360
[50e81ba0b8] - deps: V8: cherry-pick 0c8b6e415c30 (Matin Zadehdolatabad) #37276
[d1c1724c69] - deps: upgrade npm to 7.5.3 (Ruy Adorno) #37283
[20c65b00c2] - deps: V8: backport dfcf1e86fac0 (Michaël Zasso) #37245
[e63b380f76] - deps: upgrade npm to 7.5.2 (Ruy Adorno) #37191
[d808db2732] - doc: add dmabupt to collaborators (Xu Meng) #37377
[dd054ca37f] - doc: optimize HTML rendering (Antoine du Hamel) #37301
[c188466a18] - doc: fix quotes in stream docs (Tobias Nießen) #37269
[f5e4625468] - doc: fix backticks in crypto API docs (Tobias Nießen) #37269
[e2a2bab44e] - doc: link PACKAGE_EXPORTS_RESOLVE to ESM section (Utku Gultopu) #37135
[1e99175e01] - doc: alphabetize crypto.* methods (Rich Trott) #37353
[392c86d38b] - doc: use sentence case in benchmark doc (Rich Trott) #37351
[62b2648a96] - doc: apply sentence-consistently in C++ style guide (Rich Trott) #37350
[189ce399da] - doc: apply sentence case to release doc headers (Rich Trott) #37349
[610b29b8bd] - doc: fix performanceEntry.flags style format (Cheng Liu) #37274
[85b1476f1d] - doc: fix typo in deprecations.md (marsonya) #37282
[f253cb9303] - doc: fix typo in buffer.md (marsonya) #37268
[804e7ae713] - doc: add version metadata for packages features (Antoine du Hamel) #37289
[cdd2fe5651] - doc: fix typo in /api/dns.md (marsonya) #37312
[7d8fd3f576] - doc: refactor fs docs structure (James M Snell) #37170
[facf3a5c23] - doc: fix description of hasSubscribers (Tobias Nießen) #37324
[3464c9f007] - doc: discourage error event (Benjamin Gruenbaum) #37264
[85bed2ec26] - doc: fix misnamed SHASUMS256.txt name in README.md (marsonya) #37260
[cd50e93307] - doc: warn about using strings as inputs in crypto (Tobias Nießen) #37248
[5a4288ebb6] - doc: fix typo in crypto.md (marsonya) #37279
[0e887caf32] - doc: fix typo in console.md (marsonya) #37279
[47c4f1fc54] - doc: use sentence case in README headers (Rich Trott) #37251
[7da1c9b219] - doc: use sentence case for headers in BUILDING.md (Rich Trott) #37250
[ebf3597db1] - doc: rename N-API to Node-API (Gabriel Schulhof) #37259
[760f126adb] - doc: mark Certificate methods as static, add missing KeyObject.from (Filip Skokan) #37198
[aebe532967] - doc: consistent webcrypto node.keyObject format (Filip Skokan) #37200
[596bfb36a0] - doc: mention CryptoKey in port.postMessage() (Filip Skokan) #37196
[0702d60def] - doc: fix webcrypto HMAC generateKey example (Filip Skokan) #37197
[8a254058f5] - doc: fix accommodate typos (Colin Ihrig) #37229
[5906e85ce2] - doc: fix version number for DEP006 (Antoine du Hamel) #37231
[52c40c7a48] - doc: fix CHANGELOG_ARCHIVE table of contents (Antoine du Hamel) #37232
[eb08afdf24] - doc: fix typo in globals.md (Darshan Sen) #37228
[b87c0d6c16] - doc: fix typo in cli.md (Kalvin Vasconcellos) #37214
[3f815d93bf] - doc: fix pr-url for DEP0148 (Antoine du Hamel) #37205
[ff02e5e12c] - doc: fix 404 links in module.md (Antoine du Hamel) #37202
[67c9a8e176] - doc: improve promise terminology (Benjamin Gruenbaum) #37181
[15804e0b3f] - errors: align source-map stacks with spec (Benjamin Coe) #37252
[88d3f74c85] - (SEMVER-MINOR) fs: add fsPromises.watch() (James M Snell) #37179
[c30245072a] - fs: allow passing negative zero fd (Darshan Sen) #37123
[655d19638a] - (SEMVER-MINOR) fs: use a default callback for fs.close() (James M Snell) #37174
[acd087dffb] - (SEMVER-MINOR) fs: add AbortSignal support to watch (Benjamin Gruenbaum) #37190
[f5d1bf9d0e] - http: explain the possibilty of refactor unused argument (Qingyu Deng) #37275
[d63ac28a9a] - http: explain the unused argument in IncomingMessage._read (Qingyu Deng) #37275
[4cdc5ea823] - http: fix ClientRequest unhandled errors (Robert Nagy) #36970
[c6198fddc7] - lib: simplify check in child_process (Darshan Sen) #37367
[f6f9af6a59] - lib: fix WebIDL object and dictionary type conversion (ExE Boss) #37047
[acabe08b10] - lib: add weak event handlers (Benjamin Gruenbaum) #36607
[3db1b30732] - meta: update README releases section (Zuzana Svetlikova) #37318
[d96a97a2b9] - module: make synthetic module evaluation steps return a Promise to support top level await (Daniel Clark) #37300
[a693baa0cb] - module: use optional chaining in cjs/loader.js (Darshan Sen) #37238
[061939d2f6] - (SEMVER-MINOR) node-api: allow retrieval of add-on file name (Gabriel Schulhof) #37195
[c4faa39768] - (SEMVER-MINOR) perf_hooks: introduce createHistogram (James M Snell) #37155
[799b2d5275] - policy: fix cascade getting scope (Bradley Meck) #37298
[6d53e797d7] - repl: refactor to avoid unsafe array iteration (Antoine du Hamel) #37345
[3fee5b2219] - repl: add auto‑completion for dynamic import calls (ExE Boss) #37178
[c3778343aa] - repl: refactor to avoid unsafe array iteration (Antoine du Hamel) #37188
[e28fa6c3fc] - src: fix return type of method in string_search.h (Darshan Sen) #37167
[42cc33cc48] - src: add mutex to ManagedEVPPKey class (Daniel Bevenius) #36825
[1a9bcdf1d9] - src: refactor v8 binding (Joyee Cheung) #37112
[54d36b00af] - src: rename binding_data_name to type_name in BindingData (Joyee Cheung) #37112
[3079a78428] - src: avoid implicit type conversions (Michaël Zasso) #37149
[a6053dc14a] - src: add context for TODO comment in env.cc (Yash Ladha) #37140
[354df9e8a1] - src: use make_shared for safe allocation (Yash Ladha) #37139
[337b4e7540] - src: put (de)serialization code into node_snapshotable.h/cc (Joyee Cheung) #37114
[2a5f67b381] - src: refactor bookkeeping of bootstrap status (Joyee Cheung) #37113
[48ce1eb364] - src: fix warning in string_search.h (Darshan Sen) #37146
[bfe0b46d92] - src: simplify calls to BN_bin2bn in prime gen (Tobias Nießen) #37169
[9946c1137e] - src: read exactly two tokens from Linux THP sysfs config (James Addison) #37065
[1fea05149a] - (SEMVER-MINOR) stream: improve Readable.from error handling (Benjamin Gruenbaum) #37158
[d2a487e640] - Revert "stream: fix .end() error propagation" (Matteo Collina) #37060
[b5692b4b06] - test: fix test-doctool-html (Antoine du Hamel) #37397
[b09d21b06b] - test: enable no-restricted-syntax rule for test-timers-promisified (Rich Trott) #37357
[1fc8307138] - test: re-implement promises.setInterval() test robustly (Rich Trott) #37230
[8483de4da8] - test: only run prime test with supported OpenSSL (Tobias Nießen) #37212
[48a634e514] - test: rename n-api to node-api (Gabriel Schulhof) #37217
[51575252f5] - test: remove flaky designation for test-http2-large-file (Rich Trott) #37156
[13fe17c4ef] - test: split heap snapshot limit tests (Rich Trott) #37189
[dc38dd2c6f] - timers: fix unsafe array iteration (Darshan Sen) #37223
[eb7ec1b257] - timers: remove flaky setInterval test (Nitzan Uziely) #37227
[4ebe38b212] - (SEMVER-MINOR) timers: introduce setInterval async iterator (linkgoron) #37153
[dc84c181c3] - (SEMVER-MINOR) tls: add ability to get cert/peer cert as X509Certificate object (James M Snell) #37070
[2e1f1c6f3c] - tools: refactor prefer-primordials (Antoine du Hamel) #36018
[b2b64113b1] - tools: update ESLint to 7.20.0 (Colin Ihrig) #37339
[a483c284f3] - tools: fix lint-pr-url message (Antoine du Hamel) #37304
[1ff375beb3] - tools: avoid pending deprecation in doc generator (Michaël Zasso) #37267
[6db5e7958a] - tools: add GitHub Action linter for pr-url (Antoine du Hamel) #37221
[d8d851ac5c] - tools: bump remark-present-lint-node from 2.0.0 to 2.0.1 (Rich Trott) #37270
[eb0daaedf9] - tools: fix d8 macOS build (Michaël Zasso) #37211
[745aad73dc] - tools: update ESLint to 7.19.0 (Colin Ihrig) #37159
[676f696a99] - url: fix definitions of URL/SearchParams methods and accessors (ExE Boss) #36799
[fbcab109de] - url: move URLSearchParams method definitions (ExE Boss) #36799
[7c51cecbca] - util: use assert for unreachable code (Rich Trott) #37249
[66a14d3992] - vm: add importModuleDynamically option to compileFunction (Gus Caplan) #35431
[05a16e7259] - worker: refactor to avoid unsafe array iteration (Antoine du Hamel) #37346

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

7d160d3accabb6c61a2d54aa0405f08060e0924e079ceccb31763c5666c72358  node-v15.9.0-aix-ppc64.tar.gz
55c6a84ce4d72b886914d4972007e09b72a34ee2483263a0d7218953ab716c70  node-v15.9.0-darwin-x64.tar.gz
aa8728706ff1474c086bd134c4c89c072b0a696934633c93e846489513759fd1  node-v15.9.0-darwin-x64.tar.xz
6738c98c79d6b85356453fa39e1fe8eb0a6ec66fca5981c31f33587afaf8c545  node-v15.9.0-headers.tar.gz
d9a1fd9459e0900c54d9e2d9d197ea548b455bf80322df84e880c740b75e6b39  node-v15.9.0-headers.tar.xz
65f3f889e6ac6952a7fa892e5d3ad19759d58771fbf4bc492d5e87117c2072d7  node-v15.9.0-linux-arm64.tar.gz
876ec8b8d2260408bfa781a8ca7cb2f4ff8cd2904a59ac53de946841f2c9348b  node-v15.9.0-linux-arm64.tar.xz
359614c3dcf7a5557ca9c9e6bcdcb6b9c6f0205aa87119335889e068a940c384  node-v15.9.0-linux-armv7l.tar.gz
610d4d56bd1430a4b8405d05cdd7832c0ac9a2cdddc03b752c354d84624627db  node-v15.9.0-linux-armv7l.tar.xz
0850c5cf32487980f0c93dfba6a2534ed138e9601f57c594561d68f52438c486  node-v15.9.0-linux-ppc64le.tar.gz
75540da591c4a529ada559368610e29c8698027e92e598d4b9f289fd05328e6b  node-v15.9.0-linux-ppc64le.tar.xz
f9fdfc66172ded7d2c8df80c46abca3f0fa01dff8a8118e723ff754234395f28  node-v15.9.0-linux-s390x.tar.gz
c632de7d132cd1b5cdf7ff63bdf76f46ece9e1d353eb7f33f9b26640fbaf939a  node-v15.9.0-linux-s390x.tar.xz
4e0488824dbdea2bd2db91e93aa08e250c655fedb35f06f4ca4373cbb198d428  node-v15.9.0-linux-x64.tar.gz
c57b1f33a1ee5957981df553f6a0e0cac302528f260140eda10fe5fdd24e1cbd  node-v15.9.0-linux-x64.tar.xz
302ee0469bab99d599aa02c5dbec50e94ca7ca9b4080b9db3069ee25109ce0fc  node-v15.9.0.pkg
5f41f4d15d7d592b170145cd994c9d7986536bb28ec151046da0632bd30e33bc  node-v15.9.0.tar.gz
bdd7961c003b4a2dbc8b54695dd1da2bf1f9b934aadb8fd4757e8e2fe437d8c3  node-v15.9.0.tar.xz
949a15edd5dc3a3c5cfa16ce8235f1290b7d4b2b89efb951f26ef4566e09d79f  node-v15.9.0-win-x64.7z
e9f8fc15566754bb4dac1e525beb2c9751a3ba750b98d4eae9f88711e505a2d6  node-v15.9.0-win-x64.zip
f909653ff31dcc1004bf3d8e056933f3513ff616fcf135cb720de7cb6d93c312  node-v15.9.0-win-x86.7z
28b9950221d826f0e3951d94ebc3b0ccf3021786839fd2fead56f0e308788417  node-v15.9.0-win-x86.zip
75cfbfabe1b9539602200853dfac45643ec92121332a00f59b1109d8038568eb  node-v15.9.0-x64.msi
624dc288c9ae9963f44fef4fbe9a38ed8652514c959c05eed0890de75dc221b7  node-v15.9.0-x86.msi
e1f84d3fad6adcf8ac0922982b713ee09c0f8edc9bb4e88dd021d6872c23d6e7  win-x64/node.exe
0692711edaf626282aaeff0a28cce749488d03a5d1db6490c7bb19866ec4aedd  win-x64/node.lib
55318a8cb06567cbea1cfc6b142fac72bf542a54a17a103e52224f9cb52e1dc6  win-x64/node_pdb.7z
1841543eb6428448b2f2b5d20c62b3a6417374dc71117bb0debb33e5a8ed338d  win-x64/node_pdb.zip
a1a1dbed3c71823859579c2d21736b183c15277c64ad3de73088b9c0746f38ab  win-x86/node.exe
6cec3adfe0cbf4f894d89fafe857fbda9dba14b61586d6abf145b3dd7775dad3  win-x86/node.lib
11820023b72160662f4b713023da513821d630bbc1ea36546d0652c4a41953fb  win-x86/node_pdb.7z
c5ffcc6b956475b92f8e8c08d36f7d1766b9ae7047c91c0eb96f1ca1a94a1515  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=TnR1
-----END PGP SIGNATURE-----

Node v12.20.2 (LTS)

Ruy Adorno — Wed, 10 Feb 2021 20:39:50 GMT

Notable changes

deps:
- upgrade npm to 6.14.11 (Ruy Adorno) #37173

Commits

[e8a4e560ea] - async_hooks: fix leak in AsyncLocalStorage exit (Stephen Belanger) #35779
[427968d266] - deps: upgrade npm to 6.14.11 (Ruy Adorno) #37173
[cd9a8106be] - http: do not loop over prototype in Agent (Michaël Zasso) #36410
[4ac8f37800] - http2: check write not scheduled in scope destructor (David Halls) #36241

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

663510979b18d0cde123156f4fe78569716559cebe798390db4f2fd5e1940206  node-v12.20.2-aix-ppc64.tar.gz
c226e98116c169d230dd71d9adbab0fc8cc696af914de8cb80cedaa496af54cc  node-v12.20.2-darwin-x64.tar.gz
bacc1d30b62e4ea532b60672d3395ee593816d08bbcb20f907b6e02489a502f9  node-v12.20.2-darwin-x64.tar.xz
e5823b133fe58670c4f19f39c9f7f268c934f39cc4339031ac7d96fbc4ac8e72  node-v12.20.2-headers.tar.gz
da9dbb04e1d97b1531c5d6348b2d619f03a778a67d1c7ff4609232bba847c7f2  node-v12.20.2-headers.tar.xz
cd7a83dd8d9e00953079b09520647d474431f5aaad1a67200005ddff9166d55d  node-v12.20.2-linux-arm64.tar.gz
b1140e13b37250e594b8c2918a0d532fbafd816bbeee854ae2b0bcb407d9a72b  node-v12.20.2-linux-arm64.tar.xz
3a8102e4c76f588de73c0b25d2f8aaec350dff4dd445d26d65030d665e622c91  node-v12.20.2-linux-armv7l.tar.gz
c78b355ad131e03340132e8c31892c7d4916389def37f1beed1d7df55e6771c9  node-v12.20.2-linux-armv7l.tar.xz
987bc61b5f0b847eef960bc34d48cea9d14e282708f2233839d54f7d99ce8585  node-v12.20.2-linux-ppc64le.tar.gz
bdbcedf776e8504698eb98dfa39c246835017150abb8ee6c1aacb61f223ad08b  node-v12.20.2-linux-ppc64le.tar.xz
2db220600a4097c1e5c8e7e20c00a548df69696781b353cb12c24b69e2c90aae  node-v12.20.2-linux-s390x.tar.gz
d99fd6a3ad78f564b26fd5980eedd59b08d62822c32ec06c6e252bcb5f1e050a  node-v12.20.2-linux-s390x.tar.xz
e85d6866ae036782b0f5f53419a941fd742c5d5dc83fff86428b629570caa703  node-v12.20.2-linux-x64.tar.gz
bebb3596c114ca94c2f7ee0bf9370417656962c481e9b6e86744d748da422742  node-v12.20.2-linux-x64.tar.xz
1a0c934eb7cb7ccbf531db884a62edde87fffe40a7ceb331a8cc84f2612aaab5  node-v12.20.2.pkg
de0eac806ee19989c547903736e48cd4e1d660a754a78d11426928194f687718  node-v12.20.2-sunos-x64.tar.gz
71a4d4290b54876e463e4099c9f470285c7550bd7df36960369bd7203c615ef3  node-v12.20.2-sunos-x64.tar.xz
47869f9857d40f2ecb42be6c776a8794f4664fb3fb2fdbeb3caad00dc0a36a1f  node-v12.20.2.tar.gz
961ad600f0706c396390ebc7767fb01d5e3792a5022dc2e7774796756eec6d3c  node-v12.20.2.tar.xz
98c60066735f960b2f8fc6a39df6a10257969b4d0617ff2c59669be70421ac9c  node-v12.20.2-win-x64.7z
535881af6e29db15e121f847220e60659f4bc00b84afac00c577c1021954f2ab  node-v12.20.2-win-x64.zip
50169657a0ab697f11995d55cd6e1dfe0cb2b875ac1c0e8a17901670055137e9  node-v12.20.2-win-x86.7z
6d74bcd99ba6467e609af9e466105f8c6a2bb6e798ea8e0e3998bba214d684a2  node-v12.20.2-win-x86.zip
ae243f9d3def45f68b84c409ea9e15053d9375fd783a92bd36668c9c7b17332e  node-v12.20.2-x64.msi
cc3bf10d191bae17dbc34c7213d3b2b32cbc8c91bb2f73b7cbe25c06978940c7  node-v12.20.2-x86.msi
a8bdef825da10224bf848f8f5076c69e7f936847819bcc28550b691cd8ff8de4  win-x64/node.exe
2662b79e36ee678661554d290a3b8277c4c92cc74dffcda37a9f8f8e83287c73  win-x64/node.lib
0576aad8d4e68409404db0c19b3818ef7d24dc0a2184148a44bffcac8221434b  win-x64/node_pdb.7z
3574f0c7a2a3b5a09cce65332c49787f7d58c42f2877cfadc45b9e96298edc71  win-x64/node_pdb.zip
13c8e8711afa577c2aedcfdc2abc0d94d8298a9088023f4f0ed9cbc0f159c152  win-x86/node.exe
794dd4c597af2483d162426a37c99746d319aaa358219ace7bb179140f16d5f2  win-x86/node.lib
6df10df71780d29cb574434e1f9b3db92ed2b63dfe45d1858bbee050fdfc45a7  win-x86/node_pdb.7z
81d548dbbcf9494e4f5d29e3f7905112dd12306eb8b8f54f5c3a5dbe00f8d81b  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=TdsO
-----END PGP SIGNATURE-----

Node v10.23.3 (LTS)

Richard Lau — Tue, 09 Feb 2021 23:05:55 GMT

Notable changes

The update to npm 6.14.11 has been relanded so that npm correctly reports its version.

Commits

[953a85035d] - crypto: fix crash when calling digest after piping (Tobias Nießen) #28251
[fe2c98003e] - deps: upgrade npm to 6.14.11 (Ruy Adorno) #37173
[7b7fb43b8a] - Revert "deps: upgrade npm to 6.14.11" (Richard Lau) #37278
[1c6fbd6ffe] - test: add test that verifies crypto stream pipeline (Evan Lucas) #37009

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b9ad6ba0f7377fc5010b7aa3bb852385e3a54d6a910d294a76b23419a3eeb297  node-v10.23.3-aix-ppc64.tar.gz
f33d88fe2bf93c1b1f6312cb849a56185d3c8371517119d48245fa322b82d96e  node-v10.23.3-darwin-x64.tar.gz
2a375f2f25676100f5f5235d01e5ff6d722c87bb12e45e0caa1c8e6ee2c0247d  node-v10.23.3-darwin-x64.tar.xz
e11f10d58e7243e7da74213723093a47739b31ed0d9fe9074964806e3f515f79  node-v10.23.3-headers.tar.gz
501e99629521487a60add061d6fc6a99695ff038f7b899ab448c6d82bf5bafd9  node-v10.23.3-headers.tar.xz
483a4b609fe406b87da290bc0aa582b863e725321d71c6207f050ebe06baec8d  node-v10.23.3-linux-arm64.tar.gz
d559e61a043c56a3202baf670e4c3c973dafcfadc1109e4523ce1c5b2d80c1d8  node-v10.23.3-linux-arm64.tar.xz
24fcc84e890eb0fae3f75af4ec08f207230b41e1012a2ecdd8f006628be3353d  node-v10.23.3-linux-armv6l.tar.gz
39968109857b4d14427e717c76295a8703523d2942bd9704e69260ef1c9e6399  node-v10.23.3-linux-armv6l.tar.xz
2629053bba51065326bed825460e4b794ec9daf0be00c15daf6ff017c144eecb  node-v10.23.3-linux-armv7l.tar.gz
d3f9641f33cdf2c851b473de8dba993821d3f05eaeb51e7da6cafa160502d3f8  node-v10.23.3-linux-armv7l.tar.xz
b199aecee44c9251854773879ed7c6b707b1f6a7e5aa36021bdde853391d7ee8  node-v10.23.3-linux-ppc64le.tar.gz
6ee49bf9ffa6180ff3263ee153123643df892365290de8d775d744f6e979a3f9  node-v10.23.3-linux-ppc64le.tar.xz
f107548b47ba9e911b68dcfd73065e21b2d32d7cd00908401e0c2eed554fc51a  node-v10.23.3-linux-s390x.tar.gz
5a9a778fc981763ab18076bf7af645c61fd8799d71b54218bebec84f43995a6f  node-v10.23.3-linux-s390x.tar.xz
08e225a3581ca45b8c00d5561cf68ec7c53fe9022a30a1d167b9544789477f5b  node-v10.23.3-linux-x64.tar.gz
245cbb538c758f27efd2fa49b5ded81c924e2dc4d5b0d140855465366dea7f17  node-v10.23.3-linux-x64.tar.xz
689b768ccfe15e27a677662cea38626068b2f57ccf2ed178be700d9c4eac2c5d  node-v10.23.3.pkg
63d6910af4e87ab65624652e727c7c0941c28512418192e4f2c5f3dff45c33d7  node-v10.23.3-sunos-x64.tar.gz
fb72ab18ce155be6f549dcab583bfcfd115f6b7d93f00c95fc9b2f9e3b92ec8a  node-v10.23.3-sunos-x64.tar.xz
517db39eefccb03cb9ec1de67ddc917be943a755b290bff309b2e4b1bd78ffaf  node-v10.23.3.tar.gz
515bd7f2a1c3653c4f45eb0823479e812a24050da467dfd90b679ef09701ea8f  node-v10.23.3.tar.xz
9a94936e826a73130f030345bacd09bc39e3bd5727dd0b708e455b91ab1a84b5  node-v10.23.3-win-x64.7z
3d9a51c8dc073a2f36efe084abf08122c9d1a10e61fa440d6e1fbf5751cbe64b  node-v10.23.3-win-x64.zip
e9a78f452bbacc4ba9f40b0c48e7997ad13db4f976ec006ef99837b7a27d009a  node-v10.23.3-win-x86.7z
fa2456c7ea3a74922168f9e1c8168437babf2a6293aec2dd0f697754e3ad1fbd  node-v10.23.3-win-x86.zip
1cc375f5af02ce8db295a6fd932b2645122cc6dd527290f947ad6da2a1bb4d15  node-v10.23.3-x64.msi
68325cae566ad54ae076bf1160d47378f0a4a57ca65d3dc30d27fb2d5f9477e0  node-v10.23.3-x86.msi
1c2784462001f250a158be98cd93d3ed3ec40d52fbba0cd3a241ea9b6ce14d05  win-x64/node.exe
7688ed23318d253aa98ee198f94983e4b563fab188e6fd9dd32955e77111096a  win-x64/node.lib
c8b79a94be1fd400003067ff9a376f1c602d051a5547f6e9eeeddfc5c1f0207e  win-x64/node_pdb.7z
f81c67014590af935c860085eb915ef8e6ca9a6b45be49cc831162f21ef9c545  win-x64/node_pdb.zip
56136c34f7a765cc784adea093e32da1b295596a443f837c04cac951d86b7152  win-x86/node.exe
de1f3445597cbbee2e5eac435651f5dcab049a2d8bd3636877ab5803a87e269e  win-x86/node.lib
84057dadd63ccda17af28b7431adc3e4f56e7463ae3ee507c035b28060343127  win-x86/node_pdb.7z
5dd040cdd8888fd26aee9c671acc2f7948a32fc1cbf27725f01d96c01a8da93f  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=xqTD
-----END PGP SIGNATURE-----

Node v14.15.5 (LTS)

Bethany Nicolle Griggs — Tue, 09 Feb 2021 16:54:12 GMT

Notable Changes

deps:
- upgrade npm to 6.14.11 (Ruy Adorno) #37173
- V8: backport dfcf1e86fac0 (Michaël Zasso) #37245
  - Note: Node.js is not believed to be vulnerable to CVE-2021-21148.
stream,zlib: do not use _stream_* anymore (Matteo Collina) #36618

Commits

[20b1e6c802] - deps: V8: backport dfcf1e86fac0 (Michaël Zasso) #37245
[408c7a65f3] - deps: upgrade npm to 6.14.11 (Ruy Adorno) #37173
[017eed665b] - http: do not loop over prototype in Agent (Michaël Zasso) #36410
[25a3204fe2] - http: don't cork .end when not needed (Dimitris Halatsis) #36633
[2a1e4e9244] - stream: accept iterable as a valid first argument (ZiJian Liu) #36479
[9ff73fcdbe] - stream,zlib: do not use _stream_* anymore (Matteo Collina) #36618
[c03cddb46f] - test: http complete response after socket double end (Dimitris Halatsis) #36633
[f206505e9d] - util: fix instanceof checks with null prototypes during inspection (Ruben Bridgewater) #36178
[2f7944b18b] - util: fix module prefixes during inspection (Ruben Bridgewater) #36178

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

cc7dc8f702ab9fe143e4d9cfce33331f630b5ce5df9b76e4353b91fe7d5075ee  node-v14.15.5-aix-ppc64.tar.gz
78e2a63c54f0d3e22f0b3d29a832d0379406a619f1107d6e74679a1e76a132b0  node-v14.15.5-darwin-x64.tar.gz
278d4827988c3d32e39666279b133faa74eaf3f264440b62c28b1c798c6a83f2  node-v14.15.5-darwin-x64.tar.xz
adaa32ed32106f7a354ab6ad32bf7552df6ee99a148f3975bf71d6a10bb0c006  node-v14.15.5-headers.tar.gz
8d479b58252ad765f0972a4a73b9a12e9fa7399d5261b4599f76dbbd1adc6ffa  node-v14.15.5-headers.tar.xz
a1fb6f28041198971fd95e58638c30565de4ee74bd13db7f30ffd1d1c6820599  node-v14.15.5-linux-arm64.tar.gz
765204443777ebab13df6491f3fbd14cb64b7741dd7a697f4a74e4c2cb8bac0f  node-v14.15.5-linux-arm64.tar.xz
c2d5429b6d3c6e887d9fa72cb07485e6180177747b6bbb1074f3d3789694c378  node-v14.15.5-linux-armv7l.tar.gz
9524a54026e6b6bf111e0dfbb6e8f15903dd8517b7380fb22ed259ae759042d8  node-v14.15.5-linux-armv7l.tar.xz
0f5b26fb3913f62aacf4827c46b409fcec4c91479292ab094a319ccc975778e4  node-v14.15.5-linux-ppc64le.tar.gz
414660201f8c3653ee4df04ee69f88b2e2edb9ea9128e4efb53fdb300e24e4ab  node-v14.15.5-linux-ppc64le.tar.xz
13ea1f04870b2c1f7f6fbf5ecc31a972f79c016b8fef59e1233393d460293a3a  node-v14.15.5-linux-s390x.tar.gz
b1a79cd66a0653e4756fca76355869b32cc3f436f734d0fa42c31b2da0d274d3  node-v14.15.5-linux-s390x.tar.xz
e30c1fd4807fba052c209d7577bb6b63b5096d67c1b9ac753b9d502fda43ded9  node-v14.15.5-linux-x64.tar.gz
fa198afa9a2872cde991c3aa71796894bf7b5310d6eb178c3eafcf66e3ae79a7  node-v14.15.5-linux-x64.tar.xz
58ad4a08da1b7fc633a12ccd03efe3cc62b4bbba906dc418a70b0e3fe08e4b13  node-v14.15.5.pkg
043f39bb43ecaca699a21a8bd65d064ef53b48bf2cc6acaddb5ee0f4227e4d2a  node-v14.15.5.tar.gz
e19b1d40e958fe30c224f5a67af4ee4081e7f9d6fb586fb4bbc8d94aab39655b  node-v14.15.5.tar.xz
a78954324217009b42b09a2b0c7c512ef6dbb068cc61c822d2519c5cf7a3df8a  node-v14.15.5-win-x64.7z
e691461adf7cac8b8b21da6e3a80d1bfe69d57e51ddc1377504302fcef4d7a69  node-v14.15.5-win-x64.zip
f52153563487716b0a9a22d192378a446432e86b76d06aaa9797df9c3c029912  node-v14.15.5-win-x86.7z
50b3a92691dce913e16d8a486e7f328f5e2c625c90d041c83fa5569b8b23e148  node-v14.15.5-win-x86.zip
b53cbf58663d31fefaee7f6439287ef07d55a9ab4dac6f2ac7182cd85d090170  node-v14.15.5-x64.msi
29475fa79b845e700bde0d1a2704b79e10bc40c7c22b587bdc174215a748afe9  node-v14.15.5-x86.msi
89fbfa6627d40fac95410e2386634ebd8aafc069c3396f4ff0cb84d5a4ae400c  win-x64/node.exe
340890391521b66afabeddc9aba73bfa44b5c21f38614f2613a56c681415e903  win-x64/node.lib
a6329b004b5023aab2cf8d4f0f3e503e9fd221c4ebe3300acdfcdf0bee18c076  win-x64/node_pdb.7z
a4ec3525ca81585f909df594d02bb223c82590e149f689a0ee98dd71eed5fb2a  win-x64/node_pdb.zip
f1801dbcde563d2e88084dc2f6264b9b47bbce8a76b4bb6eb05e92156b301ee7  win-x86/node.exe
79478c3af7538b3585c201d565d5de8b2361f7e2482354b25f9b5449f302798a  win-x86/node.lib
c94c8eef210a69818ea156b993b772994eb1c6bb1aa2b7393f11e17f18e55cd2  win-x86/node_pdb.7z
74272d1e71af0635ab592077c986fa51df85b40959c7b9bc84b4e082df573690  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAmAivgYACgkQ1wYoSKGr
AFwupQf9H68qjEF02U6upnfNOl8HxZRINwayd7DrbGJ3cyhfxAUU5zrJFyv0eRXo
PiRpH/1BHQH0/fZC5WJ9ChXKn5SN+Ga+MYUz4n0gsbOG/nW0IPf7tbSssrbAgthY
k9G0GDCcFY63FCrPliub2xtQU9hFfMWVvOfNNqP292UWuTCnw2tT7uFS5WdeahUd
pJrztP+z1p0ZyOybBs9fZQNb/WZDjYenALF8V9ITU5TcXPys4yt2tnnNS/btIYey
3GsYLOd1u2IsZuhPo4NYxQlT8VT7Tagwh7wtBRhtw+jwvTOkIZ6on/GHyRJXmIi4
q2kvyBUaTEQFX3QDR8jTqzCQS2X+CA==
=LglY
-----END PGP SIGNATURE-----

Node v15.8.0 (Current)

Michaël Zasso — Tue, 02 Feb 2021 20:56:09 GMT

Notable Changes

[110063d694] - (SEMVER-MINOR) crypto: add generatePrime/checkPrime (James M Snell) #36997
[53a0bdff47] - (SEMVER-MINOR) crypto: experimental (Ed/X)25519/(Ed/X)448 support (James M Snell) #36879
[03460432af] - deps: upgrade npm to 7.5.0 (Ruy Adorno) #37117
- This update adds a new npm diff command.
[2c7ad38c75] - (SEMVER-MINOR) dgram: support AbortSignal in createSocket (Nitzan Uziely) #37026
[b7c3f99f7e] - doc: add Zijian Liu to collaborators (ZiJian Liu) #37075
[02f1d2fda4] - esm: deprecate legacy main lookup for modules (Guy Bedford) #36918
[75124298d5] - (SEMVER-MINOR) readline: add history event and option to set initial history (Mattias Runge-Broberg) #33662
[4e757eab96] - (SEMVER-MINOR) readline: add support for the AbortController to the question method (Mattias Runge-Broberg) #33676

Commits

[602aaf25af] - async_hooks: refactor to avoid unsafe array iteration (Antoine du Hamel) #37125
[dcd34b0144] - benchmark: add benchmark for NODE_V8_COVERAGE (Benjamin Coe) #36972
[ec22756ac9] - benchmark: make output RFC 4180 compliant (Tobias Nießen) #37038
[96cec1e5f3] - benchmark: improve explanations in R script (Tobias Nießen) #36995
[e4b88b521a] - buffer: avoid creating the backing store in the thread (James M Snell) #37052
[7b78c6773d] - child_process: allow promisified exec to be cancel (Carlos Fuentes) #34249
[c4193ba8ae] - crypto: fix encrypted private -> public import (Tobias Nießen) #37056
[cb3b0ec4fc] - crypto: generateKeyPair('ec') should not support NODE-ED* and NODE-X* (Filip Skokan) #37063
[110063d694] - (SEMVER-MINOR) crypto: add generatePrime/checkPrime (James M Snell) #36997
[ab64d74791] - crypto: throw error on invalid object in diffieHellman() (ZiJian Liu) #37016
[53a0bdff47] - (SEMVER-MINOR) crypto: experimental (Ed/X)25519/(Ed/X)448 support (James M Snell) #36879
[4551d14b8e] - deps: upgrade npm to 7.5.1 (Ruy Adorno) #37177
[9d6fd4586f] - deps: update openssl config (James M Snell) #37067
[f74b376596] - Revert "deps: various quic patches from akamai/openssl" (James M Snell) #37067
[6756130c4b] - Revert "deps: re-enable OPENSSL_NO_QUIC guards" (James M Snell) #37067
[52ce1d5f1a] - Revert "deps: update patch and docs for openssl update" (James M Snell) #37067
[03460432af] - deps: upgrade npm to 7.5.0 (Ruy Adorno) #37117
[2c7ad38c75] - (SEMVER-MINOR) dgram: support AbortSignal in createSocket (Nitzan Uziely) #37026
[47bfde00fd] - doc: fix color contrast on elements (Antoine du Hamel) #37185
[3c9077130d] - doc: fix list format in Developer's Certificate of Origin (Akash Negi) #37138
[8cecce3ff4] - doc: fix markup and alphabetization in errors.md (Rich Trott) #37144
[a7780815bf] - doc: clarify ERR_INVALID_REPL_INPUT usage (Rich Trott) #37143
[e7126503e0] - doc: clarify repl exception conditions (Rich Trott) #37142
[e55d3d0953] - doc: add example for test structure (Turner Jabbour) #35046
[9b9a1801ba] - doc: remove TOC summary for pages with no TOC (Rich Trott) #37043
[ae42658be9] - doc: add missing deprecation code (Colin Ihrig) #37147
[b79b82de8e] - doc: update Buffer encoding option count (Dave Cardwell) #37102
[ddee21b587] - doc: update BUILDING.md previous versions links (Richard Lau) #37082
[1710016053] - doc: mention adding Fixes to collaborator onboarding PR (Joyee Cheung) #37097
[b7c3f99f7e] - doc: add Zijian Liu to collaborators (ZiJian Liu) #37075
[7ddfa81612] - doc: add tooltip for light/dark mode toggle (Rich Trott) #37044
[c79688ffe3] - doc: improve AsyncLocalStorage introduction (Romuald Brillout) #36946
[a7b6464097] - doc: EventTarget and Event are available to user code since v15.0.0 (ExE Boss) #37059
[3722c15a75] - doc: add missing comma in tty (Matthew Mario Di Pasquale) #37039
[2cfe7954fc] - doc: list Unsupported Directory Import resolve err (Guy Bedford) #37032
[fef6ac77e5] - doc: add missing ARIA label for button (Rich Trott) #37031
[634bedcd6f] - doc,test: fix prime generation description (Tobias Nießen) #37085
[181719d4c4] - esm: update to correct deprecation code (Colin Ihrig) #37147
[02f1d2fda4] - esm: deprecate legacy main lookup for modules (Guy Bedford) #36918
[69402522fd] - fs: read full size if known in promises.readFile (Anna Henningsen) #37127
[ad12fefcb0] - fs: only use Buffer.concat in promises.readFile when necessary (Anna Henningsen) #37127
[6f54a14cda] - fs: add validatePosition and use in read and readSync (Darshan Sen) #37051
[175f6f0be3] - fs: use throwIfNoEntry option on statSync calls (Antoine du Hamel) #36975
[97fc7d8396] - fs: refactor to remove redundant validation (Darshan Sen) #36984
[0129a79d0a] - fs: add explicit note about undefined path when recursive (Sebastian Silbermann) #37010
[7196ac19c1] - http: refactor to avoid unsafe array iteration (Antoine du Hamel) #37124
[ed58065d1f] - lib: add bound apply variants of varargs primordials (ExE Boss) #37005
[67b58f68c9] - lib: refactor to use validateObject (ZiJian Liu) #37028
[5227c5e6f5] - lib: refactor to use validateFunction (ZiJian Liu) #37045
[34adf7f74b] - lib: refactor to avoid unsafe array iteration (Antoine du Hamel) #37029
[4a1fc42178] - lib: refactor to use optional chaining in internal/options.js (raisinten) #36939
[d76400a264] - lib: refactor to use validateString (ZiJian Liu) #37006
[a29da64b46] - lib: refactor to use validateNumber (ZiJian Liu) #36993
[56377d6cee] - lib: support returning Safe collections from C++ (ExE Boss) #36989
[c4cab1f408] - lib: refactor to use validateBoolean (ZiJian Liu) #36983
[11dd2672cd] - quic: remove quic (James M Snell) #37067
[b533485f32] - quic: remove duplicate checks (ZiJian Liu) #37017
[1714998e2c] - readline: replace _questionCancel with a symbol (Colin Ihrig) #37094
[3d64d2b5ef] - readline: check for null input in question() (Colin Ihrig) #37089
[75124298d5] - (SEMVER-MINOR) readline: add history event and option to set initial history (Mattias Runge-Broberg) #33662
[4e757eab96] - (SEMVER-MINOR) readline: add support for the AbortController to the question method (Mattias Runge-Broberg) #33676
[a26dfb323b] - src: expose BaseObject::kInternalFieldCount in post-mortem metadata (Joyee Cheung) #37111
[9c831c0d8f] - src: fix dead code in RandomPrimeTraits (Tobias Nießen) #37083
[81e9acf242] - src: rename crypto_ecdh.(h|cc) to crypto_ec.(h|cc) (Tobias Nießen) #37048
[1f819ec47d] - test: add tests for bound apply variants of varargs primordials (ExE Boss) #37005
[db38cf27c2] - test: increase inspect coverage (Emil Sivervik) #36755
[10da5c1104] - test: skip tests consistently in parallel.status (Rich Trott) #37035
[da07eb654e] - test: increase read file abort coverage (Moshe vilner) #36716
[55407b826f] - test: update to improve terminology (Michael Dawson) #37011
[ef2b25088d] - test: increase coverage for assert/calltracker (ZiJian Liu) #36728
[074641c2e9] - test: improve assertion message for test-vm-memleak (Rich Trott) #37034
[4086b230b8] - test: increase fs promise coverage (Emil Sivervik) #36813
[94204f7e46] - test: process.nextTick for before exit (ttzztztz) #37012
[2135618052] - test: increase timeout on ASAN Action (Antoine du Hamel) #37007
[de6dca12e8] - test: improve coverage of SourceTextModule getters (Juan José Arboleda) #37013
[36cc8df358] - test: log error in test-fs-realpath-pipe (Joyee Cheung) #36996
[36930e4fe7] - test: test mode passed as an options object in mkdir/mkdirSync (Darshan Sen) #37008
[9c69ca5e54] - test,doc,lib: adjust object literal newlines for lint rule (Rich Trott) #37040
[fe9f4fdba5] - tools: remove commented code from stability.js (Colin Ihrig) #37092
[d2d6121f3e] - tools: enable object-curly-newline in ESLint rules (Rich Trott) #37040
[3187845980] - util: add internal createDeferredPromise() (Colin Ihrig) #37095

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

8a1f2fc0e4aac595f7d82ab9e1a51958aa74bbdfa9bb36090f4a78b5cc776638  node-v15.8.0-aix-ppc64.tar.gz
23f9a8a53d0d63e1d90afe775891088533fc5b277ef83db0cd2fc37951c09595  node-v15.8.0-darwin-x64.tar.gz
8b1012b7c78c27513bf1d3b1db65f505041771683d964f14f67fe1fc243fe038  node-v15.8.0-darwin-x64.tar.xz
1b86dd704a756ad947d9949fb003bd18483fa9934d910d54fb3c975cb995d2c8  node-v15.8.0-headers.tar.gz
dea9fe1e00f2516f01533ee52ac853d91a887d5eadab5103a693805fabaf281b  node-v15.8.0-headers.tar.xz
086149a16cf7a092f1e12fa2a91bb6587ce25914bd52c3bcff78b5b5c6222e30  node-v15.8.0-linux-arm64.tar.gz
792403c345a0af5af3641e193cb1e6c6d819315bfe181a147215f7d39e98729f  node-v15.8.0-linux-arm64.tar.xz
a6f91fd3f668e7d0f987c8ef17223720bf8f19827cf4ce1b5ba65a076eedcabc  node-v15.8.0-linux-armv7l.tar.gz
1b9ee1b6ea540873887636753408927f7b5af05c0d4cdaebf3f457fb787e0e4a  node-v15.8.0-linux-armv7l.tar.xz
52e9bcee4b6432fdb4d3fa770029e9484ceebd168497e22774e374181af37767  node-v15.8.0-linux-ppc64le.tar.gz
988fe0b28ae84b7b6cff906ddac1830595b4614b561740f64dce7cb1de610376  node-v15.8.0-linux-ppc64le.tar.xz
c1cbf037ca1417131dfbdbbf4ddcc29fe46d0348accceafb65747a30b56f3811  node-v15.8.0-linux-s390x.tar.gz
a8732e3a7c51064cdb12caeef9b003741a9cc3a789cf756ee2cd12564353a3b2  node-v15.8.0-linux-s390x.tar.xz
c2b073c4421e62aa71f0cef929e61a3334853ab211119f8ea7601612c43cd71d  node-v15.8.0-linux-x64.tar.gz
cdb80f0810e5a076eb6079297073147d2564b1c2292bb4436b3f9e9e4fe18759  node-v15.8.0-linux-x64.tar.xz
a0e5eea1a606a1be5509a3c49e46ff7b3a89d7e843e9a629e3f2cb3cecf921ca  node-v15.8.0.pkg
e08c8778a6b767cd0d2ab4613946d1616c3d4054dead08b04f705d607c84510f  node-v15.8.0.tar.gz
e23ae2f6181444066cf74e03c3e30e650fbc63764c2b89829928cddf3e4230a9  node-v15.8.0.tar.xz
8cfe90e8a97d9973495498aa5b1a021e901f5859a26440193c3bb9c88cbdbc62  node-v15.8.0-win-x64.7z
edb16def1fecaecaffcccf9352e9f94a029d47203f26ae44dc1d4aa7eef35940  node-v15.8.0-win-x64.zip
53a9964d5637546470d0d343aef2c677615d47a1d96f9c818ff6afe4d04acd5a  node-v15.8.0-win-x86.7z
f339f68c9b21dbaffb9d369c1c2f1d516a7fc25189dad98ae903b09034d97456  node-v15.8.0-win-x86.zip
8bbf0c74bc85e5f8f4360ba600a039fb2750a32a4603a389fd072e1ec639ac19  node-v15.8.0-x64.msi
c02085195b8f0af2d076fa0be68138fddbe939d6dd6bda6dafc122329653a032  node-v15.8.0-x86.msi
22e4bcf147f6424a06472a6a6b94def200c455d753bed80dbb9535db1da92ee7  win-x64/node.exe
74c5baf6049f2f9f6712ad06cbf544c25803f7a01c6f63b8fe18488a68ef4720  win-x64/node.lib
eb3e4f8e71b93e2ec3aa328f223a859ef522ecd76d1ebe7df4020c0a0fdf2eb4  win-x64/node_pdb.7z
e4d2eee8983e58aabe6330df4a6052b2da065a2ede3aa01d29ee052a1fe2abd5  win-x64/node_pdb.zip
b0838991576c255285150d9b93f0ce70fa2a2b775a14ed2de1b6113a0f38e1c4  win-x86/node.exe
bff86968328f105b6d4a491806863ef9f2b51dc55f02580600c0b2ca5faef870  win-x86/node.lib
c796d8d1e1a84e59af9d310555ddde45c7d05acf6f2058fd959434b80da4f221  win-x86/node_pdb.7z
5735cd9b2136ffbf4f366f0d3fe982f4ac81e7b7ace7c7a8a3d60cab592a0035  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEj8yhP+8dDC6RAI4Jdw96mlrhVgAFAmAZvBIACgkQdw96mlrh
VgDMAhAAgO9uGNNlBLZS9CIW43wNgEppIJFN9ycLkyla2OpQ9iAkUcFRl1SrQU2H
2A0tN6GnqnpiCLocre09HbbPZXX/+VOoihPbKaDqOb0EMffY4i9/aRAPzAIKrE8T
P+/5aIdft6STf4QsFMDEREHq5drwOAqa04CeF0AsVpf70+Oe5YCNNXvhDEzVxPlZ
g20LGndVKUbIecFYMFGeBAmMSIrwReMfPo2+LV0Ho1dVuvN0TJcMJPQET5Tw3fy+
KLIjsBnzkylxP5cRX461qX/OkhDQNfIHJEWPfQi6QWMMznByKM3X2XyoWbhesZG+
8bIbUw8abfCVFyufKNq6nx7AWskTYS4lTN1IJNIk1PnaDwHzD6ywUOexhUH8NlOB
uLGIGYXBkK5eBGPdBl9Lk48aIzuIqnUrXvTMZF8GBpeHtcjo09aI9ExkRHfmXG4V
kMIKyid6+zyG465l4sHBNTwoYc/P6mDC4JJTQ3bAMG9IC4trtsB1jk3LuyvYarot
YqARNdV799P1k6zV/UgM33UkTBCm1j0s8VluAMsEm5t/+GJ70pSvWWNl6367bHfz
LtsPGGcNrXbo6oaLupeOvZEedNN/QPMFPkFGsl3v8axprxb91B2zEzGvbOuxyX7/
dY9dOjXPI4XC3HRQiZwur1vPJC7/4KxFQN9qPOYHxoP3c+qeqWM=
=zePj
-----END PGP SIGNATURE-----

Node v10.23.2 (LTS)

Richard Lau — Tue, 26 Jan 2021 17:21:41 GMT

Notable changes

Release keys have been synchronized with the main branch.

deps:
- upgrade npm to 6.14.11 (Darcy Clarke) #36838

Commits

[cc6b69557a] - deps: upgrade npm to 6.14.11 (Darcy Clarke) #36838
[aefb66528a] - doc: update contact information for @BethGriggs (Beth Griggs) #35451
[08931481d8] - doc: update contact information for richardlau (Richard Lau) #35450
[bc0617f4ea] - doc: update release key for Danielle Adams (Danielle Adams) #36793
[d7c09fcfd3] - doc: add release key for Danielle Adams (Danielle Adams) #35545
[ac49d415b0] - doc: add release key for Ruy Adorno (Ruy Adorno) #34628
[b8426ae3ce] - doc: add release key for Richard Lau (Richard Lau) #34397

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

a0b595a3c0da4e8cd8cf30786f505241d339b58e24de9de2e37114b519236b59  node-v10.23.2-aix-ppc64.tar.gz
27f714657720b566690e5612cd7faffba63a5c0c9ba47834997e2658c8f533d9  node-v10.23.2-darwin-x64.tar.gz
03f8529327f5f13801622c2984b9006ff88ee458eda32169984a8a66a5754e63  node-v10.23.2-darwin-x64.tar.xz
36b49e027f263239cb1fc2eec3fb8fa242e9cff015d3ac71ef2fccaef54eb834  node-v10.23.2-headers.tar.gz
7c5d093c3f4d4bdbed290881e9899399f015a7e37c4e2713824e3a3bc4c2b89b  node-v10.23.2-headers.tar.xz
83a15dc442916c55fc033c4395fb72d27d27c16fdea05fc23f952cba88023d81  node-v10.23.2-linux-arm64.tar.gz
0ba21980889bd360db8b8a9d398417d7a8c0a989fed93ab300021742cc0845e5  node-v10.23.2-linux-arm64.tar.xz
35607ec9ef1d34d34b08bdfe7fef160fe3e5daf94e9e7273747f2e8729db1875  node-v10.23.2-linux-armv6l.tar.gz
41f106b8de4f2e78df4ec47fada4311f0672fba4de65c9d88d449cd401aa4076  node-v10.23.2-linux-armv6l.tar.xz
72475d7107f092313c20f37db05e22f224cb9548378f2ecff5fccba622825253  node-v10.23.2-linux-armv7l.tar.gz
4c618608b5f1c2dee20c860b1c3e6734d2a41f46230292733cda1872b5f51347  node-v10.23.2-linux-armv7l.tar.xz
4d710bc6c03ef25cda74b9018acdc4a3d5e534854b0e2bf5c638b0c9a1150ad9  node-v10.23.2-linux-ppc64le.tar.gz
c904f092fcdc248921bb10c872e604b1648849f229b4e336e78234dea9fb2b01  node-v10.23.2-linux-ppc64le.tar.xz
13ed689cebc63a79fbf3196870fd24521dda8c75fed36c376969746f1a69c968  node-v10.23.2-linux-s390x.tar.gz
cf3f032541844ec8a3ecea72fc8883695583496026e562caeee0c1e3b42b6fb9  node-v10.23.2-linux-s390x.tar.xz
d9fe68f0c36daf97df53c7be7d3395caec0f95b09d135aad8a45f12106ba5759  node-v10.23.2-linux-x64.tar.gz
9a0552d8b62d60500175ff06055bebce97df3b64a5245f6727572987b4aea8e5  node-v10.23.2-linux-x64.tar.xz
b2c2c6edf88eec83a73868cd77531bcaf9de2c2ec6a20e2ea57cb3748aed5b6e  node-v10.23.2.pkg
17af68b8109968e7ba1e87ed4a88146986e1a9817f1a9412eb738ffecdcc13c8  node-v10.23.2-sunos-x64.tar.gz
c12b63fabbda053abacfe4d36b70b360ff79ca61def97ed1b97ee667b2d0cddf  node-v10.23.2-sunos-x64.tar.xz
b94af8e98b01e1113dd4dc9e2cf8d39446ef7045503552d02f65c58e645ef1b0  node-v10.23.2.tar.gz
05a5e00e5e4342840f73ea40176416161ce9eeab6a4e936fc57bffd24dd1dbc7  node-v10.23.2.tar.xz
8427557bb40d374c9062f5bc798579f694ab62a68160f0ed9a5281c1e94999b9  node-v10.23.2-win-x64.7z
95de51e0f47ba35f49654295cb95ccd9d991d8c208e92769eb8f581d9f0c9825  node-v10.23.2-win-x64.zip
e26f7646aae07336a87ca6388fda6da3491d86e2a87ab99e5de840a02ffbeb17  node-v10.23.2-win-x86.7z
f2fb3012566749f95308ebf8560b2abfffc8429807a6b66ca6bd0579f8ae43b2  node-v10.23.2-win-x86.zip
202e160532b3ef44822db8c8bd9bd5c7da455c3b42e1a53f7283ed50f620eaa3  node-v10.23.2-x64.msi
cf49b9bb95061c7cc6a1088c0b522515aff3e1df56d13540b1eb95733d5a060d  node-v10.23.2-x86.msi
2f80595913b8e22c9d564c4ff305a90d3957361f14b5d04bc5354692215f8ddb  win-x64/node.exe
fe8c3392fafc6a09f59f9d9a2c6dbf922fcde9d072e1abb52df3b0eb09dd27c9  win-x64/node.lib
8f8d59bc8b5735c54291a320a373ffea1179180b65f0aa953e06bfc392e15520  win-x64/node_pdb.7z
5ca9227bf4c7304359abc8e5fdd662b0e6ab1b34502b763e05e74e29f0d8febc  win-x64/node_pdb.zip
2ccfc7ddf406ba28d920bfc503c7df38a46b8f1b7e82ee3f7fb0dff30468502f  win-x86/node.exe
2cd7d4a696cd539b4592af0a245db1a8235f2c20e30ae0fa2921d8a130933d8a  win-x86/node.lib
712ea737c0aa9d8ba3c748226728d178157e096a87ce4a4c94b4e24a656e4579  win-x86/node_pdb.7z
bb33d38d6a3ce9c9cf9d47cf4855d18ee79501e8f778c2b4abca5a0f4987b21e  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=ehzs
-----END PGP SIGNATURE-----

Node v15.7.0 (Current)

Ruy Adorno — Tue, 26 Jan 2021 16:19:24 GMT

Notable changes

buffer:
- introduce Blob (James M Snell) #36811
- add base64url encoding option (Filip Skokan) #36952
doc:
- add @iansu to collaborators (Ian Sutherland) #36951
- add @RaisinTen to collaborators (Darshan Sen) #36998
- add @miladfarca to collaborators (Milad Fa) #36934
fs:
- allow position parameter to be a BigInt in read and readSync (raisinten) #36190
http:
- attach request as res.req (Ian Storm Taylor) #36505
- expose urlToHttpOptions utility (Yongsheng Zhang) #35960

Commits

[775b34b822] - (SEMVER-MINOR) buffer: introduce Blob (James M Snell) #36811
[832cd015d5] - (SEMVER-MINOR) buffer: add base64url encoding option (Filip Skokan) #36952
[7ce7404f79] - build: fix compiling against openssl with no-psk (Caleb ツ Everett) #36881
[b7d8e61ef1] - crypto: fix randomInt bias (Tobias Nießen) #36894
[1149af6265] - (SEMVER-MINOR) crypto: add keyObject.asymmetricKeyDetails for asymmetric keys (Filip Skokan) #36188
[0398167b35] - crypto: fix WebCrypto import of RSA-PSS keys (Tobias Nießen) #36877
[e52e860172] - deps: upgrade npm to 7.4.3 (Ruy Adorno) #37018
[ef3a5f6958] - deps: update ICU to 68.2 (Michaël Zasso) #36980
[ca479b9e9d] - deps: V8: cherry-pick fe191e8d05cc (Benjamin Coe) #36956
[6f773fbe84] - deps: upgrade npm to 7.4.2 (Ruy Adorno) #36953
[4b952d8d3e] - doc: fix maintaining ICU guide (Michaël Zasso) #36980
[a2559b9044] - doc: add @RaisinTen to collaborators (Darshan Sen) #36998
[4d5273b156] - doc: fix typo in http.server.requestTimout docs (alexbs) #36987
[93fc295b75] - doc: add performance notes for fs.readFile (James M Snell) #36880
[7ea374b159] - doc: clarify maxSockets option of http.Agent (Pooja D P) #36941
[f3637d5328] - doc: remove pull-requests.md preamble (Rich Trott) #36960
[d2d9ad7477] - doc: fix module.isPreloading documentation (Antoine du Hamel) #36944
[48b6781151] - doc: fix crypto.generateKeySync aes allowed length list (Filip Skokan) #36928
[120db2c169] - doc: fix grammar and link to QUIC in changelog (Dan Dascalescu) #36959
[af0f0a0f65] - doc: fix percentile range in perf_hooks.md (raisinten) #36938
[8cf280d9ab] - doc: improve perf_hooks docs (Juan José Arboleda) #36909
[3ea37c2d67] - doc: fix invalid HTML in doc template (Rich Trott) #36930
[eaf378aa46] - doc: remove issue template duplication from contributing docs (Rich Trott) #36908
[7a794417f3] - doc: remove resolving-a-bug-report from contributing docs (Rich Trott) #36905
[707b97307d] - doc: use ESM syntax for WASI example (Antoine du Hamel) #36848
[5a9a07e7cd] - doc: add iansu to collaborators (Ian Sutherland) #36951
[aa3bc74cd6] - doc: fixup typo in metadata entry (James M Snell) #36947
[22e29ccfa3] - doc: add alternative version links to the packages page (Filip Skokan) #36915
[80c84a1136] - doc: add miladfarca to collaborators (Milad Fa) #36934
[e73b1072f3] - doc: update tls test to use better terminology (Michael Dawson) #36851
[5cbf638c06] - doc: remove unnecessary contributing.md section (Rich Trott) #36891
[f99b38fedd] - doc: wrap TOC in a
tag (Mattia Pontonio) #36896
[82eccddf1e] - doc: update fs.l/statSync API history for throwIfNoEntry (Andrew Casey) #36882
[70cd43c32e] - doc: change "it's" to "its" where necessary (Tobias Nießen) #36913
[02a8f52040] - doc: fix indentation on http2 doc entry (Rich Trott) #36869
[dc596d0607] - events: remove error listener on signal abort (ZiJian Liu) #36969
[c4cdf1d830] - (SEMVER-MINOR) fs: allow position parameter to be a BigInt in read and readSync (raisinten) #36190
[70ee7dce62] - (SEMVER-MINOR) http: attach request as res.req (Ian Storm Taylor) #36505
[f07e1c9d03] - http: abortIncoming only on socket close (Robert Nagy) #36821
[aa7243e3d4] - http: refactor ClientRequest destroy (Robert Nagy) #36863
[80051abfcb] - http: cleanup ClientRequest oncreate (Robert Nagy) #36862
[f5b8e7b068] - http2: refactor to avoid unsafe array iteration (Antoine du Hamel) #36700
[8aeba3cb92] - lib: refactor to use validateArray (ZiJian Liu) #36982
[743dd8f89d] - lib: remove non used getter in lib/perf\_hooks.js (Juan José Arboleda) #36907
[f2ac4bb8e2] - lib: expose primordials object (Antoine du Hamel) #36872
[850d3578b6] - lib: refactor primordials.makeSafe to use more primordials (ExE Boss) #36865
[b86c48cc91] - lib: refactor source_map to use more primordials (Antoine du Hamel) #36733
[1ef92f61fa] - lib: refactor source_map to avoid unsafe array iteration (Antoine du Hamel) #36734
[5290d63e7f] - module: simplify tryStatSync with throwIfNoEntry option (Antoine du Hamel) #36971
[89a7941425] - os: performance improvement in vector allocation (Yash Ladha) #36748
[3f75a60b51] - perf_hooks: throw ERR_INVALID_ARG_VALUE if histogram.percentile param is NaN (ZiJian Liu) #36937
[9951daefbd] - repl: refactor to avoid unsafe array iteration (raisinten) #36663
[868d3b2ff6] - src: use BaseObject::kInteralFieldCount in Blob (Joyee Cheung) #36991
[a5ffdaee1c] - src: replace push_back with emplace_back in debug_utils (raisinten) #36897
[d54998538e] - src: use BaseObject::kInternalFieldCount in X509Certificate constructor (Joyee Cheung) #36892
[7acea78493] - test: mark flaky tests on IBM i (Richard Lau) #36986
[e69c4a941d] - (SEMVER-MINOR) test: add wpt tests for Blob (Michaël Zasso) #36811
[2f1f1dadaa] - test: increase buffer list coverage (Emil Sivervik) #36688
[8d49ce9d75] - test: fix warning in test_environment.cc (raisinten) #36846
[98369aaf7b] - test: remove unused ecdhPeerKey (Daniel Bevenius) #36942
[ba87be0b0e] - test: improve coverage for Module getters (Juan José Arboleda) #36950
[c7dd9c8c69] - test: skip internet for test-npm-install (Ruy Adorno) #36933
[3bbe9a5588] - test: improve coverage on worker threads (Juan José Arboleda) #36910
[f589bb2052] - test: improve coverage at lib/internal/vm/module.js (Juan José Arboleda) #36898
[8a8241529e] - Revert "test: mark test-cluster-bind-privileged-port flaky on arm" (Rod Vagg) #36884
[99c15909ad] - test: fixup flaky test-crypto-x509 on windows (James M Snell) #36966
[c2ec15aff6] - test: check mustCall errors in test-fs-read-type (Tobias Nießen) #36914
[30b2aac98a] - test: fix variable name for non-RSA keys (Tobias Nießen) #36912
[fada6b0087] - test,benchmark: stop requiring URL and URLSearchParams (raisinten) #36927
[864b97b24d] - tls: use recently added matching SecureContext in default SNICallback (Mateusz Krawczuk) #36072
[6ef54bb9ca] - tools: cleanup old ICU version-specific fixes (Michaël Zasso) #36980
[8e02b53b09] - tools: update ESLint to 7.18.0 (Colin Ihrig) #36955
[8dc8adc782] - tools: add support for top-level await syntax in linter (Antoine du Hamel) #36911
[17bdcd9d18] - tools,doc: list the stability status of each API (Zijian Liu) #36223
[889654d36c] - url: align url format behavior with browsers (ZiJian Liu) #36903
[64fed319ef] - (SEMVER-MINOR) url: expose urlToHttpOptions utility (Yongsheng Zhang) #35960
[f2704170a3] - util: prefer Reflect.ownKeys(…) (ExE Boss) #36740
[0d719476e0] - vm: refactor to avoid unsafe array iteration (Antoine du Hamel) #36752
[bf695ebdb1] - worker: refactor to avoid unsafe array iteration (Antoine du Hamel) #36735
[403b595ef5] - zlib: refactor to avoid unsafe array iteration (Antoine du Hamel) #36722

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b091732d90fe6882850dc5d0973a774030c4d6c32fb303a49f7e7be1918d168e  node-v15.7.0-aix-ppc64.tar.gz
b0f7728bbf428cdd8343e1fae910882d19a3889a04d09afc722c653cf8ab3ef2  node-v15.7.0-darwin-x64.tar.gz
67c134ad7e319a283852a410336a67e679b7c15031e2d5f2956ad8a105dd2252  node-v15.7.0-darwin-x64.tar.xz
d1d223ed8bbb12ad96587ac2b6566482958508e081f43c2ad615bf116ff179bd  node-v15.7.0-headers.tar.gz
2b4648c2b5aac304d99c15740d033be3550fcb501dddb3c069bb04d1bdbb4b51  node-v15.7.0-headers.tar.xz
72853eb858a93d53b0758b86eea0d466296ab275fbb73f2f4d40fad6cd1a0ff9  node-v15.7.0-linux-arm64.tar.gz
14a3d219ff2341327ec45319c6b29cd74ffa347b3f538fa36b0009bf7939b01c  node-v15.7.0-linux-arm64.tar.xz
aa65f287bfe060321ee5e0b4f7134bd17690abb911c6fc1173ddbedddbf2c060  node-v15.7.0-linux-armv7l.tar.gz
86b0b286342713d07ffd64e7417022fea7cf33de3082d4b83a5e16e8aa2365f0  node-v15.7.0-linux-armv7l.tar.xz
78c8a4e9ed8a51cac421d2017f9eec61a318cc30b6e4af96cb28200816a4d49a  node-v15.7.0-linux-ppc64le.tar.gz
626519a223990e34e154da0161372f2787ea1a9f707e1db9ddb897c1c7a65f03  node-v15.7.0-linux-ppc64le.tar.xz
c497139882e4cc569df7fa5c305fafcd5c1f33485c7b44615fad976f622e8410  node-v15.7.0-linux-s390x.tar.gz
bc9d3125deb7ede2603cd3975c68abeaa3402a819d8d510d86120cbb3f71398b  node-v15.7.0-linux-s390x.tar.xz
8081794dc8a6a1dd46045ce5a921e227407dcf7c17ee9d1ad39e354b37526f5c  node-v15.7.0-linux-x64.tar.gz
8bcbc3a47ea8563519ab8c447412e941d160a79531c959b5f9c2306611a95223  node-v15.7.0-linux-x64.tar.xz
2dbfa3cc5f4cfc78b9ffe492b9debe85219c154f50ec4a7aee2a00ef10f9ed37  node-v15.7.0.pkg
cda67d79fe69b7a977a5b7fcb64721a68daca1fc6890368813525c8b5d349ddb  node-v15.7.0.tar.gz
ef5eceabed802356859e3340d42f88ca3ded7d39fb7da1c18575887bc628dbda  node-v15.7.0.tar.xz
52f49f158f7ed2ece2bc28b30b205af1bb212c867a3172e885e3ad63e4d7a4f9  node-v15.7.0-win-x64.7z
737701d33bfef3140482b7f94f119b1a33ebb871a4039382178c72bbedcf9b32  node-v15.7.0-win-x64.zip
a8d65db87ddb046e2fd335acd6d8f9d52ae5469e70c8f56c074c4630c43a6c25  node-v15.7.0-win-x86.7z
cd2553a6355a48194e19bee1b09d57b69698f40de243c9aa5025cccc6bd8d9d3  node-v15.7.0-win-x86.zip
98420c4d3559ea5400056c4c85925eaa4402dc061c80b458f2e9f066ed69e828  node-v15.7.0-x64.msi
b361f89b49b252c9d2df1085c73f19676bed445b1b3df661c590018c1828fb2a  node-v15.7.0-x86.msi
cf32e3c1c39762d4b14669ec593af7961b78b64a517e8a9dbbe970cb32729cd6  win-x64/node.exe
74c5baf6049f2f9f6712ad06cbf544c25803f7a01c6f63b8fe18488a68ef4720  win-x64/node.lib
31a12b8a3062e35f6b1a33431df1b3ddfba9b3b504e2adeddbb84e94696d2e0c  win-x64/node_pdb.7z
ceceb6f268fe358e02bd4f24a8e183c0933b3e76c5f7005fc9f8679bff06e12b  win-x64/node_pdb.zip
9f5f782bf1f4a50b318efd702482ac9b2cd887e4a4faf065cb8376db1a6075d6  win-x86/node.exe
bff86968328f105b6d4a491806863ef9f2b51dc55f02580600c0b2ca5faef870  win-x86/node.lib
07eb162255e52d246afce11b5a7c0015483adadf26a3e2869fa6c52a434a4507  win-x86/node_pdb.7z
67a5be6d772ab890a9529e5649b794e6b44e85f651a7375c62104ce37ca80847  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEEI9StI21e7DMQ5spl7AUGb2S+AoFAmAQP+kACgkQl7AUGb2S
+Ar+Dw/8C4Ea3pD/e6gyxJxfKxKkEE37VEvmwUKSXZAiqQGECGngVF3yPVJ2+tDr
ezj2bPmNp3joUs+QLpYltJiCWb3I9fyv3Vu+DhgZlldOEIvO3GyGd3pFuttPIak+
jQnxCwH2dW9AbgrZFIjazFTMmHuom9LCaxW2BeQM/gE9jxz/gKwQnA84beQG5Fo+
FII3I51QuGxvVsH6rYh22WgfU9MkICLu+v/OMnpZEYQ/Z3ytP5/MI36YG2GQ7hQ+
/EdgnQbFwnOlqUMz6yUnDKuPX9cvkxOXQLTFmShbQYvLHyTjU2OrQ27k7NOKFio7
RimVhUVf94BB6iuLUdYVdminzdoQ3FU1c8AsTC6jJj2suzu/Ta88l7WMvcw5MKLs
YC1ah5l3OllAaWtLQEBttcJ2la5PcunDewz0bVHJ1bwLz1U+JpOJaF8LM86qrSfo
wzN9IUV4ppOy9yjdz5XpY5iDc/ZegTLbjHA9gUZn3XqHyT3qXQVOQB/nEBTyZLVd
+l+PkL6jMgQ5JidDX0eNEPvUllefuTafH56EEChKYohp1a7xLtnIeHSI9jT4F7tS
8w2HX0WA5StNZKrcEmC+RrH+ovanGHdx00VBqOP1o8K6VCo1xk7aL9bZ+eTOsPe4
LCxqAMHPRAGL5FIPbZAEsz7BDKUN+ssNOxHV2wSBumjqIVD2tcw=
=DNgP
-----END PGP SIGNATURE-----

Node v15.6.0 (Current)

Danielle Adams — Fri, 15 Jan 2021 01:08:39 GMT

Notable Changes

child_process:
- add 'overlapped' stdio flag (Thiago Padilha) #29412
- support AbortSignal in fork (Benjamin Gruenbaum) #36603
crypto:
- implement basic secure heap support (James M Snell) #36779
- fixup bug in keygen error handling (James M Snell) #36779
- introduce X509Certificate API (James M Snell) #36804
- implement randomuuid (James M Snell) #36729
doc:
- update release key for Danielle Adams (Danielle Adams) #36793
- add dnlup to collaborators (Daniele Belardi) #36849
- add panva to collaborators (Filip Skokan) #36802
- add yashLadha to collaborator (Yash Ladha) #36666
http:
- set lifo as the default scheduling strategy in Agent (Matteo Collina) #36685
net:
- support abortSignal in server.listen (Nitzan Uziely) #36623
process:
- add direct access to rss without iterating pages (Adrien Maret) #34291
v8:
- fix native serdes constructors (ExE Boss) #36549

Commits

[3ca7a786c5] - benchmark: fix http2 benchmarks (Rich Trott) #36871
[4601886d7c] - benchmark: fix http/headers.js with test-double (Rich Trott) #36794
[7aedda9dcd] - benchmark: add simple https benchmark (Andrey Pechkurov) #36612
[822ac48272] - buffer: make FastBuffer safe to construct (Antoine du Hamel) #36587
[21f329532f] - build: refactor Makefile (raisinten) #36759
[857b98eed9] - build: fix unknown warning option (raisinten) #36629
[ffaa8c1735] - build: do not "exit" a script meant to be "source"d (François-Denis Gonthier) #35520
[9bc2cec848] - (SEMVER-MINOR) child_process: add 'overlapped' stdio flag (Thiago Padilha) #29412
[b98cc51be2] - child_process: reduce abort handler code duplication (Rich Trott) #36644
[78d4d91e54] - child_process: treat already-aborted controller as aborting (Rich Trott) #36644
[a8a427f646] - (SEMVER-MINOR) child_process: support AbortSignal in fork (Benjamin Gruenbaum) #36603
[7134d49e56] - child_process: clean event listener correctly (Benjamin Gruenbaum) #36424
[54bd4ab855] - cluster: fix edge cases that throw ERR_INTERNAL_ASSERTION (Ouyang Yadong) #36764
[0c11a17d82] - console: refactor to avoid unsafe array iteration (Antoine du Hamel) #36753
[53cf996270] - (SEMVER-MINOR) crypto: implement basic secure heap support (James M Snell) #36779
[42aca13953] - (SEMVER-MINOR) crypto: fixup bug in keygen error handling (James M Snell) #36779
[c4ad50e0ff] - (SEMVER-MINOR) crypto: introduce X509Certificate API (James M Snell) #36804
[4e4deca90d] - (SEMVER-MINOR) crypto: implement randomuuid (James M Snell) #36729
[1c9ec2529e] - deps: upgrade npm to 7.4.0 (Ruy Adorno) #36829
[ff5bd04900] - deps: update nghttp2 to 1.42.0 (Michaël Zasso) #36842
[578fa0fedf] - deps: V8: cherry-pick dfcdf7837e23 (Benjamin Coe) #36573
[05f34c6963] - doc: define "browser", "production", "development" (Guy Bedford) #36856
[e8bb1f7350] - doc: clarify event.isTrusted text (Rich Trott) #36827
[153be6c80e] - doc: fix module syncBuiltinESMExports example (Bruce A. MacNaughton) #34284
[3b64b38142] - doc: os.uptime() temporary bug notice (Nicholas Schamberg) #36503
[da49624a46] - doc: update release key for Danielle Adams (Danielle Adams) #36793
[2d8423da3c] - doc: clarify child_process.exec inherits cwd (ugultopu) #36809
[1a4d34ebd0] - doc: clarify descriptions of _writev chunks argument (James M Snell) #36822
[7c7180a6f7] - doc: document buffer's "Uint" aliases clearly (Michaël Zasso) #36796
[ff6edbc6b2] - doc: add dnlup to collaborators (Daniele Belardi) #36849
[835bdf0e50] - doc: improve crypto.randomUUID() text (Rich Trott) #36830
[d4bcb3689d] - doc: clarify subprocess.stdout/in/err/io properties (James M Snell) #36784
[a956fb3fdd] - doc: add dark mode (Ajay Poshak) #36313
[757b9664cd] - doc: revise method text in async_hooks.md (Rich Trott) #36736
[b4091ea59b] - doc: clarify when messageerror is emitted (James M Snell) #36780
[61b039365c] - doc: avoid memory leak warning in async_hooks example (James M Snell) #36783
[a7bb4da55e] - doc: clarify that --require only supports cjs (James M Snell) #36806
[c6eb2b4fec] - doc: clarify Buffer.from when using ArrayBuffer (James M Snell) #36785
[ad1d8fba9f] - doc: fix broken link for ChildProcess (James M Snell) #36788
[ef628891f7] - doc: revise exit() and run() text in async_hooks.md (Rich Trott) #36738
[ff39464559] - doc: add OpenSSL CVE fix to notable changes in v15.5.0 (Beth Griggs) #36798
[6db465a99f] - doc: clarify that N-API addons are context-aware (Alba Mendez) #36640
[fad07d5439] - doc: fix typo in esm documentation (Mohamed Kamagate) #36800
[67dd48ed05] - doc: add panva to collaborators (Filip Skokan) #36802
[b2c1aeb694] - doc: revise process.memoryUsage() text (Rich Trott) #36757
[8f672ebbd6] - doc: add YAML metadata for process.memoryUsage.rss (Gerhard Stoebich) #36781
[fa54f012b8] - doc: reduce abbreviations in async_hooks.md (Rich Trott) #36737
[56c00d7b2f] - doc: simplify pull request template (Rich Trott) #36739
[214dbac8ff] - doc: clarify undocumented stream properties (James M Snell) #36715
[242ce19346] - doc: document common warning types (James M Snell) #36713
[d3dc124575] - doc: update emitClose default for fs streams (Kevin Locke) #36653
[181bd0510f] - doc: improve ALS.enterWith and exit descriptions (Andrey Pechkurov) #36705
[edf8c6de5a] - doc: add note about uncloneable objects (James M Snell) #36534
[651e7d27b7] - doc: document http.IncomingMessage behaviour change (Dr) #36641
[72b0ab0739] - doc: add yashLadha to collaborator (Yash Ladha) #36666
[8a0cdb3b4e] - doc: alphabetize http response properties (Rich Trott) #36631
[ff4674b033] - doc: correct callback parameter type for createPushResponse() (Rich Trott) #36631
[f623d5d377] - doc: use _code name_ rather than _codename_ (Rich Trott) #36611
[1ed517c176] - doc: document return value of https.request (Michael Chen) #36370
[5645b21e23] - doc: document "http: lazy create IncomingMessage.headers" (ExE Boss) #36601
[3ee4cfc7d7] - doc: fix bugs in _construct() example (Maksym Baranovskyi) #36509
[93237c5999] - doc: remove replication of GitHub template (Rich Trott) #36590
[538f226f6d] - doc: remove "Related Issues" from pull request template (Rich Trott) #36590
[dcc93d3dce] - doc: expand openssl instructions (Michael Dawson) #36554
[41e278bf61] - docs: add references to punycode.md (Isaac Levy) #36761
[9b9b6d5fc5] - domain: make node resilient to Array prototype tempering (Antoine du Hamel) #36676
[f0a9c53bec] - errors: refactor to use more primordials (Antoine du Hamel) #36651
[c844d22b72] - errors: eliminate all overhead for hidden calls (Momtchil Momtchev) #35644
[3fa470a3c9] - events: refactor to use optional chaining (ZiJian Liu) #36763
[82393aefff] - events: refactor to use more primordials (Antoine du Hamel) #36304
[e3a091d9f3] - fs: refactor to avoid unsafe array iteration (Antoine du Hamel) #36699
[d5e1b82125] - fs: accept non-32-bit length in writeBuffer (raisinten) #36667
[d858c9576a] - http: remove dead code from internal/http.js (ZiJian Liu) #36630
[7e3ad1be32] - Revert "http: remove dead code from internal/http.js" (ZiJian Liu) #36890
[a9a2dd32e3] - http: don't cork noop .end() (Robert Nagy) #36633
[dfc962f67a] - http: add test case for req-res close ordering (Daniele Belardi) #36645
[cc28d2f541] - (SEMVER-MINOR) http: set lifo as the default scheduling strategy in Agent (Matteo Collina) #36685
[954a36947d] - http: make HEAD method to work with keep-alive (Joseph Hackman) #34231
[9156f430b5] - http: remove dead code from internal/http.js (ZiJian Liu) #36630
[5e499c490e] - http: refactor to use more primordials (Antoine du Hamel) #36194
[c784f15588] - Revert "http: use autoDestroy: true in incoming message" (Daniele Belardi) #36647
[a38ad0709c] - http2: refactor to use primordials instead of .indexOf (Rohan Chougule) #36679
[e85fbb778d] - http2: fix typos in core.js (Pranshu Jethmalani) #36719
[a4d64f967a] - https: refactor to use more primordials (Antoine du Hamel) #36195
[1db3772c95] - lib: simplify primordials.uncurryThis (ExE Boss) #36866
[95219eac08] - lib: refactor to use mapping in cluster master (Yash Ladha) #36250
[b764269437] - lib: remove v8_prof_polyfill from eslint ignore list (Antoine du Hamel) #36537
[eb6b38639a] - lib: remove unused code (Brian White) #36632
[7fe1b5ef5a] - lib: refactor to use validateCallback (ZiJian Liu) #36609
[bb4f8c8732] - lib: use more primordials in shared validators (Pooja D P) #36552
[181bad58d3] - lib: add primordials.SafeArrayIterator (Antoine du Hamel) #36532
[6e338dac3c] - lib: refactor to use more primordials in internal/encoding.js (raisinten) #36480
[ec3e841f59] - lib: refactor to use primordials in internal/priority_queue.js (ZiJian Liu) #36560
[8ac2016229] - lib: add primordials.SafeStringIterator (Antoine du Hamel) #36526
[56af1250fe] - lib: make safe primordials safe to construct (Antoine du Hamel) #36428
[d20235b6cb] - lib: fix diagnostics_channel hasSubscribers error (ZiJian Liu) #36599
[63091f8440] - lib: refactor to use more primordials in internal/histogram.js (raisinten) #36455
[eca2df0909] - meta: notify slack when someone force pushes (Mary Marchini) #35131
[01213c71b9] - module: fix Windows folder exports deprecation warning (Guy Bedford) #36859
[302be57be4] - module: refactor to avoid unsafe array iteration (Antoine du Hamel) #36680
[24246a29d7] - net: throw ERR_OUT_OF_RANGE if blockList.addSubnet prefix is NaN (ZiJian Liu) #36732
[02dbcc4317] - (SEMVER-MINOR) net: support abortSignal in server.listen (Nitzan Uziely) #36623
[a258bc9b70] - perf_hooks: refactor to avoid unsafe array iteration (Antoine du Hamel) #36723
[94afc3e712] - process: passing -1 to setuid/setgid should not abort (James M Snell) #36786
[92af50327e] - (SEMVER-MINOR) process: add direct access to rss without iterating pages (Adrien Maret) #34291
[8b7336b072] - quic,timers: refactor to use validateAbortSignal (ZiJian Liu) #36604
[b17130a55a] - readline: fix behaviour of Interface plugged to a non-terminal output (Antoine du Hamel) #36774
[d70824f567] - src: fix typo in crypto_aes.cc (Ikko Ashimine) #36717
[8b43388903] - src: reduce duplicated boilerplate with new env utility fn (James M Snell) #36536
[a53997e6c0] - src: fix leading backslash bug in URL (raisinten) #36613
[abae61e230] - stream: finished waits for 'close' on OutgoingMessage (Robert Nagy) #36648
[4c819d65f9] - stream: fix .end() error propagation (Robert Nagy) #36817
[cb0b53edb1] - stream: lazy read ReadStream (Momtchil Momtchev) #36823
[b996e3b4b5] - stream: do not use _stream_* anymore (Matteo Collina) #36684
[190ddced46] - stream: only use legacy close listeners if not willEmitClose (Robert Nagy) #36649
[1fc30a84ac] - stream,zlib: do not use _stream_* anymore (Matteo Collina) #36618
[d2b9e7cb01] - string_decoder: throw ERR_STRING_TOO_LONG for UTF-8 (Michaël Zasso) #36661
[abc2ff47c2] - test: disable test-crypto-secure-heap with asan (James M Snell) #36900
[17a52337c4] - test: http complete response after socket double end (Dimitris Halatsis) #36633
[cc37ff24dc] - test: use faster variant for rss in test-crypto-dh-leak (Pooja D P) #36766
[daad0ab1cc] - test: use faster variant for rss in test-vm-memleak.js (Pooja D P) #36769
[9d25d25cfd] - test: mark test-cluster-bind-privileged-port flaky on arm (James M Snell) #36850
[c64db20fdd] - test: use faster variant for rss test-memoryusage-emfile (Pooja D P) #36768
[d48e00e5a3] - test: fix test-memory-usage.js for IBMi (Rich Trott) #36758
[9b7d2c2523] - test: guard large string decoder allocation (Michaël Zasso) #36795
[5bc130bd9e] - test: increase coverage for events (ZiJian Liu) #36668
[9f7fbcc64d] - test: add coverage for breakLength one-column array (Rich Trott) #36657
[9eff709c23] - test: update wpt interfaces (Daijiro Wachi) #36659
[a7f743f5cc] - test: update wpt resources (Daijiro Wachi) #36659
[4acc2732f9] - test: update wpt encoding (Daijiro Wachi) #36659
[986d5aca44] - test: update wpt url (Daijiro Wachi) #36659
[833e614682] - test: increase coverage for diagnostics_channel (ZiJian Liu) #36602
[f0dfe57bd1] - test: add already-aborted-controller test for spawn() (Rich Trott) #36644
[d5d56ec3d4] - test: add test for reused AbortController with execfile() (Rich Trott) #36644
[f81556563a] - test: increase coverage for internal/error_serdes.js (ZiJian Liu) #36628
[34d1d791e5] - test: improve coverage for util.inspect() with classes (Rich Trott) #36625
[1f3bc5ed73] - test: increase runInAsyncScope() coverage (Rich Trott) #36624
[863bfc44d2] - test: redirect stderr EnvironmentWithNoESMLoader (Daniel Bevenius) #36548
[8e8b16ff7e] - timers: refactor to use optional chaining (ZiJian Liu) #36767
[c23cca2de9] - tls: refactor to avoid unsafe array iteration (Antoine du Hamel) #36772
[37becfda8c] - tools: update all lint-md rollup dependencies (Michaël Zasso) #36843
[cfdbb79ccf] - tools: update doc tool dependencies (Michaël Zasso) #36844
[1f2a198c32] - tools: fix md5 hash for ICU 68.1 src (Richard Lau) #36777
[4e0995bc60] - tools: update ESLint to 7.17.0 (Colin Ihrig) #36726
[8ad3455ae3] - tools: revise install.py for minor improvements (Rich Trott) #36626
[b367d5a61d] - tools: update gyp-next to v0.7.0 (Michaël Zasso) #36580
[10f1c893c8] - tools: correct usage message for genv8constants.py (Rich Trott) #36606
[37b39a2d6b] - tools: call close() explicitly in genv8constants.py (Rich Trott) #36606
[7664f3678c] - tools: use is None consistently in Python (Rich Trott) #36606
[cb7f73c9d4] - tools: revise line in configure.py for clarity (Rich Trott) #36551
[258aa50986] - tty: refactor to avoid unsafe array iteration (Antoine du Hamel) #36771
[5cb8b16452] - url: fix url.format with ipv6 hostname (ZiJian Liu) #36665
[b1c6a44caf] - url: refactor to use more primordials (Antoine du Hamel) #36316
[baa8064bd0] - util: refactor inspect.js to use more primodials (Rohan Chougule) #36730
[bff201a66d] - util: remove unreachable defensive coding (Rich Trott) #36744
[64bf2f229e] - util: refactor to use more primordials (Antoine du Hamel) #36265
[2dd2ec3836] - v8: refactor to use more primordials (Antoine du Hamel) #36527
[3170636a8e] - (SEMVER-MINOR) v8: fix native serdes constructors (ExE Boss) #36549
[d5a9799e76] - wasi: refactor to avoid unsafe array iteration (Antoine du Hamel) #36724
[b6f74b0b09] - zlib: refactor to use primordial instead of .startsWith (Rohan Chougule) #36718

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

166985455aaf6a16c570045c3381bc7d88a1dfa3f98cf4bb67a699b7240c6bed  node-v15.6.0-aix-ppc64.tar.gz
e79baddd344fd19c68104591964263b14ddc57fb98051bebb744151f21a83667  node-v15.6.0-darwin-x64.tar.gz
489f1072dbded246c8f3727844409ee7d835a46479f354e39b080ad5a8416cc0  node-v15.6.0-darwin-x64.tar.xz
73687e7b2afa53dc35bc331534dcdca25137a5b1a543cd7c8c35b74ef53f4ddf  node-v15.6.0-headers.tar.gz
4883ecad8ef4d6c3028252b2dae014e2a9f5a09b44cdf2609b497be8839a1ccc  node-v15.6.0-headers.tar.xz
b0660398fe590f8588431a787e9b032c7271a2fa88306c7a26e751571df998e4  node-v15.6.0-linux-arm64.tar.gz
533a5cbda0dc4f42f0cd2967db3f40a5186e64806ee981b791e7c37bb2780fc3  node-v15.6.0-linux-arm64.tar.xz
234871415c54174f91764f332a72631519a6af7b1a87797ad7c729855182f9cd  node-v15.6.0-linux-armv7l.tar.gz
76f9e0c89da946a834a0711855b75c84e64c5440cf78f4b81b7d27e2791b1710  node-v15.6.0-linux-armv7l.tar.xz
7c45fa66e8c5f3c8d6bf82785717776cb3b2bc4e78c2d5846123dfcded06bba3  node-v15.6.0-linux-ppc64le.tar.gz
f6dd89aad601c3cfdaa75f3673b03a37314b2b6cf50b51e61c039d0c8c1ddd64  node-v15.6.0-linux-ppc64le.tar.xz
f9c28fec6a4215ca65cb42c3a317e13e4b81f88609a49507d810d52334f85ffe  node-v15.6.0-linux-s390x.tar.gz
94a350a4cbd1b46789b9425610e25dffd560b78d4e711708df06565b361df3fa  node-v15.6.0-linux-s390x.tar.xz
a8b42f6f174f857b9369858b63ff136ed5b9072336e6df9f0208eddde13897dc  node-v15.6.0-linux-x64.tar.gz
e8ae7a715c1886c1ca4ec401c401bc832c8fac586c7aa0e7cc1db9bda4e785a8  node-v15.6.0-linux-x64.tar.xz
948ff411a76eb7adc317cd18c6fe75e8d10009937771786ac25b68364feadb04  node-v15.6.0.pkg
1dd3681e85bb9c8205a331bfac5121050893defb5ad9d04698239aeef4e736b3  node-v15.6.0.tar.gz
39df81ddcd9ca0b99b179aeb61d1b01257a1579e257764a93b0386ff029c38d2  node-v15.6.0.tar.xz
e913e4e4597374da71e649c94b7273a834c365cb996bde1755ed18c45764147c  node-v15.6.0-win-x64.7z
83d1aafbe869c8e7064b8ad97894ce8428d8d66b8fa38f6d5364dc3e9ffb3813  node-v15.6.0-win-x64.zip
ac25fc5e7e195f2c743d0d2d7fef73d24d9ee02df867049d51f8ab6a92d749d1  node-v15.6.0-win-x86.7z
f0d5efd49afe4e418edbb415f9d9df11bf052d4eae0915a8a808b8506415c64a  node-v15.6.0-win-x86.zip
3936fc5c9e7b8e5a9824ea2f1dfefad7a4b0bc94db94ef9efeb5b38cb24691d5  node-v15.6.0-x64.msi
ecb4c5a259b161504736193ffb6121c76cf71d77e4151432104ad79c3540c900  node-v15.6.0-x86.msi
1ba33091e6edf2636e1f5088d8753ef765217cdab2233fd82874a87d968e18f8  win-x64/node.exe
c0f8428d8179b9d99ddc564f722ad7022075e72823305edbe48ec5366fad40b2  win-x64/node.lib
9e3fd87f4c19a84cc1f3dc7260bbcf12749fd561f771e7596d87dfde15f8c6b4  win-x64/node_pdb.7z
8aa9f8db544b49ab6abb3c6fda822c703f17d4a3ac51f87d35ad2e9cb395ab8a  win-x64/node_pdb.zip
acea7cb81f2078d74fa506bd32d8ffbea0ebc80abd4e7fbbd0199526098456b3  win-x86/node.exe
f2144ca5323061754edfdf630af6c3495b0a87d23303c18438527dfa1356d730  win-x86/node.lib
c6acd5a72660389899aedd935ba6fb4dbf246bcfd4ae9a5ef2cd28c3544fbb5a  win-x86/node_pdb.7z
4bc9524beb622c589c53823eef47daf6f98d73cf784f6ec73a581f577645c7fa  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEdPEmArbxxOkT+qN606iWE2Q7YgEFAmAA6XIACgkQ06iWE2Q7
YgEhXg//Yo/MLY9+sVtbNn3yiZa/KXI/MYKMqO6ZdyAYiVX9/XF5C2/cCN0H2BbB
i4tSMx2gO7zjuEJ+mMu0m3Mjf6sIzgs9RhhGJfTW5gyLHfZtcMy+ozZmEzTE23oQ
HMlr2jbyd9UUhfcMv4wAJF+tFgQ9nys1nEng/j8hvdf8Jj1wSbzFh280nDa34h97
YAOlIS83neX9rQWpcPMf1KKYyo4WxFr3nJEDCdd3rB0VandfNVg2F79kQDYgJrLT
I3nK/3kSYkW+m3p8JwLfWFjhx6A/9nHyH0x2JuF/Or0lBGs6sCs8GtPw++dNr9NZ
p62u6anbVz3J+R7W68ETdrcBvFifmsEhOpYMpGTGYVAEgEGbReqlFj/Dn5f3t+Y0
8H+Ua3q8ISitWZmtvJKWoUscbPJc3G+PZKwqE7lDIRlCuj+csttlMkZFJoLiAEiO
eD6whkmcuDznSbFOmmfvwTf6lI7gj5NqXBczlsw6DDWzO9SHTesDU90sX9ooeWr/
YHImDZD1kE21FD2xuULah6aHrtGvtj0p9cB+JtHWzGdszdKsroMun2VI2uCGzfSH
I8xDU9Kp3RJV63bVpEulJM4TIkuITeBgWAmhkgv4xNdzXaRM3Gei4XA0cwGQgqQj
Qa3WI2loQqEc/Xn/m1GrcvJqfQ7xzFKNdf8IShkrYt6QvUNR+wI=
=t9Po
-----END PGP SIGNATURE-----

January 2021 Security Releases

Michael Dawson — Mon, 04 Jan 2021 19:30:00 GMT

(Update 4-Jan-2021) Security releases available

Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues.

In addition to the vulnerabilities listed below, these releases also include an update to npm in order to resolve an issue that was reported against npm by security scanners even though it was not vulnerable.

use-after-free in TLSWrap (High) (CVE-2020-8265)

Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.

Impacts:

All versions of the 15.x, 14.x, 12.x and 10.x releases lines

Thank you to Felix Wilhelm from Google Project Zero for reporting this vulnerability.

HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)

Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).

Impacts:

All versions of the 15.x, 14.x, 12.x and 10.x releases lines

Thank you to niubl who works at TSRC(Tencent Security Response Center) for reporting this vulnerability

OpenSSL - EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt

Impacts:

All versions of the 14.x, 12.x and 10.x release lines
Versions of the 15.x line before 15.5.0 which included an update to the latest OpenSSL.

Downloads and release details

Summary

The Node.js project will release new versions of all supported release lines on or shortly after Monday January 4th, 2021. These releases will fix:

Two high severity issues
One low severity issue

Impact

The 15.x release line of Node.js is vulnerable to two high severity issues and one low severity issue.

The 14.x release line of Node.js is vulnerable to two high severity issues and one low severity issue.

The 12.x release line of Node.js is vulnerable to two high severity issues and one low severity issue.

The 10.x release line of Node.js is vulnerable to two high severity issues and one low severity issue.

Release timing

Releases will be available at, or shortly after, Monday January 4th, 2021

Contact and future updates

The current Node.js security policy can be found at https://nodejs.org/en/security/. Please follow the process outlined in https://github.com/nodejs/node/blob/master/SECURITY.md if you wish to report a vulnerability in Node.js.

Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.

Node v12.20.1 (LTS)

Richard Lau — Mon, 04 Jan 2021 18:23:08 GMT

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8265: use-after-free in TLSWrap (High) Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits
CVE-2020-8287: HTTP Request Smuggling in nodejs Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).
CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High) This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt

Commits

[5de5354918] - deps: update http-parser to http-parser@ec8b5ee63f (Richard Lau) nodejs-private/node-private#236
[2eacfbec68] - deps: upgrade npm to 6.14.10 (Ruy Adorno) #36571
[96ec482d90] - deps: update archs files for OpenSSL-1.1.1i (Myles Borins) #36521
[7ec0eb408b] - deps: upgrade openssl sources to 1.1.1i (Myles Borins) #36521
[76ea9c5a7a] - deps: upgrade npm to 6.14.9 (Myles Borins) #36450
[420244e4d9] - http: unset F_CHUNKED on new Transfer-Encoding (Matteo Collina) nodejs-private/node-private#236
[4a30ac8c75] - http: add test for http transfer encoding smuggling (Richard Lau) nodejs-private/node-private#236
[92d430917a] - http: unset F_CHUNKED on new Transfer-Encoding (Fedor Indutny) nodejs-private/node-private#236
[5b00de7d67] - src: retain pointers to WriteWrap/ShutdownWrap (James M Snell) nodejs-private/node-private#230

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

85d6b2fb4517fdc2540eba89a70a6256541f89cb9970aa5176c10294c2d595ee  node-v12.20.1-aix-ppc64.tar.gz
da5d32de2e0f3e82b4bc4a33754a9ceedb3c031f8804e984de89d82074897795  node-v12.20.1-darwin-x64.tar.gz
9be4e4aefc1a9373d1472c335c0b85fa2c307e9a11e5df2901e12d8babd797b7  node-v12.20.1-darwin-x64.tar.xz
3e92fed328aca66d651160bf8e258a9c1ace2ae7a3ae61e63e66b8c1b061daa2  node-v12.20.1-headers.tar.gz
3b88ca1472bd7acbd5bafaa763dee0cc9641ba634dfdb1d4589e72928f80e8c9  node-v12.20.1-headers.tar.xz
3154628c02f2c920fed77e8dce1a8ae32333260666ebaaa7a3cd230f45d13e42  node-v12.20.1-linux-arm64.tar.gz
3c1dff2a7070214fa3947f8b7331c592e2d7c7347693da927b56cfd51ed70917  node-v12.20.1-linux-arm64.tar.xz
7283ced5d7c0cc036a35bc2e64b23e7d4b348848170567880edabcf5279f4f8a  node-v12.20.1-linux-armv7l.tar.gz
d4b34dc939b34e0a888d69e01713c5ba42b5718bccf72e816eb4bd644cf6240e  node-v12.20.1-linux-armv7l.tar.xz
0722467ef8361fa0a7562154b8907c4769a7ba96a6631e5a5212d9b0ca3edba9  node-v12.20.1-linux-ppc64le.tar.gz
c557bc21fd7b5e2150a946c9821462d70f86b62ce5d8e8f22fbc9951c0b51dca  node-v12.20.1-linux-ppc64le.tar.xz
68ded9db9837ea819881fb5b232c226a9924477e2fa901edecd32d3af2cfeb54  node-v12.20.1-linux-s390x.tar.gz
409e7b1b99ceca82c3fa36785de38bac80acf40189a6052e4226299b690113a6  node-v12.20.1-linux-s390x.tar.xz
c4d45bf46d4ef4b6a72384dfb0ab6c07aed5750bcd1c2fc9f29c0aaccc6a4363  node-v12.20.1-linux-x64.tar.gz
313014c7e0abe808ec8453d78f7892c430e1b282a6d3faf9904fcb72c79e8db6  node-v12.20.1-linux-x64.tar.xz
5d1a4c117ee3ac7aa98818d304a4a2b39427ce588147cf437a7c5beb7b45de21  node-v12.20.1.pkg
a166ccbfd282ab3caf99f10f5c8a91d4696c0ad163622ec81bbcef5e9f8c9092  node-v12.20.1-sunos-x64.tar.gz
e927caa2208b7f491d80edb2a051951d37770992c1de605df4392e55b052418d  node-v12.20.1-sunos-x64.tar.xz
5318a5db1484050430371b77dece281a5b078a14e6962e105aa5790bdb3c3bed  node-v12.20.1.tar.gz
e00eee325d705b2bfa9929b7d061eb2315402d7e8548945eac9870bf84321853  node-v12.20.1.tar.xz
90c9f86fc50f5320572562483f6f9e6d303f8c3bae26f14870c92b750d1d20b3  node-v12.20.1-win-x64.7z
63cb0ccb17d6071e5418661b9755dc6a47f89db6e0945cb92dafbd000d9cc654  node-v12.20.1-win-x64.zip
d9ed3fd1ef7787545e8132ac592278e9895c7e817d6545d1dac2d37e509e56bf  node-v12.20.1-win-x86.7z
6dc79f89cc7d0e2d6f12532bcb010fcedf32604d0f0d718f9c88d28696a98a13  node-v12.20.1-win-x86.zip
48c7e37bcee7847549ef186e4762b924ede44bb34bfcb77c4aa5eadaea31a7fa  node-v12.20.1-x64.msi
ded3789cef6bf338e472187c17c28fcd14ead36e2cc440981616228e78ad780a  node-v12.20.1-x86.msi
45d3ccc859462d16ef29e6a007df43fb94524a3deac3e8539920089b4a7a5895  win-x64/node.exe
2662b79e36ee678661554d290a3b8277c4c92cc74dffcda37a9f8f8e83287c73  win-x64/node.lib
b5e11e03d047f9a13e8d247eb15f75fb1df8a60f34464ac3bad828a2830d2f0a  win-x64/node_pdb.7z
a0047d62b0dc5ed2eca5a6125485d7778b60a2017ceaeffa12abab34fd7c0b0d  win-x64/node_pdb.zip
8dc5ce44c3d2e91b22ac8a081cae13df7c331615f0db3db4f076ee590a28ebfc  win-x86/node.exe
794dd4c597af2483d162426a37c99746d319aaa358219ace7bb179140f16d5f2  win-x86/node.lib
73f6208141f666286de13746322d88940fd126fdf97833948728f6829846339d  win-x86/node_pdb.7z
8fd3ce5355a9d6004bf3e99b9ac9fd0c33fa853ad4c0d243afc1cfe4c6642c40  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=Ji2U
-----END PGP SIGNATURE-----

Node v10.23.1 (LTS)

Richard Lau — Mon, 04 Jan 2021 18:20:48 GMT

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8265: use-after-free in TLSWrap (High) Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits
CVE-2020-8287: HTTP Request Smuggling in nodejs Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).
CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High) This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt

Commits

[bd44b0ee7f] - build,win: accept Python 3 if 2 is not available (João Reis) #29236
[d5c9b09bdc] - build,win: find Python in paths with spaces (João Reis) #29236
[323a6f114a] - deps: update http-parser to http-parser@ec8b5ee63f (Richard Lau) nodejs-private/node-private#235
[f08d0fef64] - deps: upgrade npm to 6.14.10 (Ruy Adorno) #36571
[b0608b574a] - deps: update archs files for OpenSSL-1.1.1i (Richard Lau) #36541
[d936e1833f] - deps: upgrade openssl sources to 1.1.1i (Myles Borins) #36541
[9c4970715c] - deps: upgrade npm to 6.14.9 (Myles Borins) #36450
[aa6b97fb99] - http: add test for http transfer encoding smuggling (Richard Lau) nodejs-private/node-private#235
[fc70ce08f5] - http: unset F_CHUNKED on new Transfer-Encoding (Fedor Indutny) nodejs-private/node-private#235
[7f178663eb] - src: use unique_ptr for WriteWrap (Daniel Bevenius) nodejs-private/node-private#238
[357e2857c8] - test: add test-tls-use-after-free-regression (Daniel Bevenius) nodejs-private/node-private#238

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

33bf67ad4a5843b0c1a5a9f3800ccbe1f30b068889177049bd6faca4a843c64a  node-v10.23.1-aix-ppc64.tar.gz
07da39e4c122d1cee744f3a3ace904edf23c3256879adedafcca6a1da4ca4681  node-v10.23.1-darwin-x64.tar.gz
febfdabd98ab5b8f8fdff32ab8c111d834083805bf042ab65c923cc22609c99d  node-v10.23.1-darwin-x64.tar.xz
a877aa44822994b21312a054e05db8a7784391acffd1c1fc85291a014e129c76  node-v10.23.1-headers.tar.gz
d2492742a95a74f2bada841203e9390831c37bfec7580cf0605cab3f521f7bae  node-v10.23.1-headers.tar.xz
e7d0476b1e9add7b21297698517356bb7c7d7f10e75f5abad6ab5806518a6cd6  node-v10.23.1-linux-arm64.tar.gz
9b923a161d80d2802241538c8f2099705163fc7f0dcd886d2274d8d6adf4f58f  node-v10.23.1-linux-arm64.tar.xz
75f04c8c26b83afe40eb1de97a04efca1adf1dd2ad1b887bed297888d7760aaf  node-v10.23.1-linux-armv6l.tar.gz
5f77882103c03e6a486bd11a7218ef6ae9a720172f9369a4a3fa4c5fa21d653b  node-v10.23.1-linux-armv6l.tar.xz
8f965f2757efcf3077d655bfcea36f7a29c58958355e0eb23cfb725740c3ccbe  node-v10.23.1-linux-armv7l.tar.gz
a26aa4d9b2ac37c49d3f7c6198502faee3806f6386559aeabc8ac1bf02f99b59  node-v10.23.1-linux-armv7l.tar.xz
46e590ecef7bfa76e2de1f57e0a1b0b0df2bd0142a25e2329ccfbd9fc33e7cc8  node-v10.23.1-linux-ppc64le.tar.gz
4390158e7230be4968dafe94524a8c7fb65b7c622753146d4238306a5733340d  node-v10.23.1-linux-ppc64le.tar.xz
7b51c8bc1d15fac73245685437079ca6952c38560d94732630645a61303d6b47  node-v10.23.1-linux-s390x.tar.gz
615962749dfe497d455426bc3097978b0504e0988e8bd198c0d202896056c245  node-v10.23.1-linux-s390x.tar.xz
2a5f9d862468a4c677630923531e52339526cfd075cc6df30da4636782eb7bda  node-v10.23.1-linux-x64.tar.gz
207e5ec77ca655ba6fcde922d6b329acbb09898b0bd793ccfcce6c27a36fdff0  node-v10.23.1-linux-x64.tar.xz
8e963dd9cba374d610c33609faa36f37589e315e97b855c6aeccf02844d194f8  node-v10.23.1.pkg
5c6e8f40b3d36d59035d998bbcaffbd9a326efa57c15c32941c23529f1a2da6c  node-v10.23.1-sunos-x64.tar.gz
776c17af00d8a758f0fd41b00cd1f173a1f8787e5f850d1c7fe0a515655dfffc  node-v10.23.1-sunos-x64.tar.xz
a5348b5dfdbe32e0be2837576e66ac285a59907e11e5439fbcda25e70f52550d  node-v10.23.1.tar.gz
88aa16f5af79615b183ca55ed81393763169e75d1fb96013cf1831895c6cedfa  node-v10.23.1.tar.xz
b4808da108c43de909bc704ce6ef4bba6b9c1f054879253b9810d078c6e70764  node-v10.23.1-win-x64.7z
497996aa1037b6f7f492c1d275bb90140269223939525286b4e95babad16f0de  node-v10.23.1-win-x64.zip
9d4c520003d3aa151a53b43289a51bfb2f7af93b7f011dadccd9a1619b3e2510  node-v10.23.1-win-x86.7z
c3be0fd50c218cc52e85377c9e22d7d2110d72de95bdbc9447145b246330f818  node-v10.23.1-win-x86.zip
4495bdc0646cc535f5d5ad5ca52bb18302cda8d4da950bdecf3043f7d28d7cef  node-v10.23.1-x64.msi
ddc19192781e1b3aebfaee894ccba624c923b2691509b1883bb2a54d0bc396f1  node-v10.23.1-x86.msi
82e2bab0e8c9d16324de69e5f1cfcd46ab1b2db272c6d204fe09d2f5509a9c08  win-x64/node.exe
fe8c3392fafc6a09f59f9d9a2c6dbf922fcde9d072e1abb52df3b0eb09dd27c9  win-x64/node.lib
50cff21434ccb4628e53033167e822021fd0c5fe42d98e1322405179708f8508  win-x64/node_pdb.7z
8ff935da1e63c3a3137f7ff80c67cb8395e42d5c8c1b6209e6c5ce0e7b076409  win-x64/node_pdb.zip
5d2f4b8c34fdc1398b1cda50db5b518e4c42616b9ffc9b05d985e5fabb1f47eb  win-x86/node.exe
2cd7d4a696cd539b4592af0a245db1a8235f2c20e30ae0fa2921d8a130933d8a  win-x86/node.lib
8db9406024e50a833fe31e2805e31834183a18bcded7637721d559b444434779  win-x86/node_pdb.7z
5025c6f535d025d5fde0e64b55199c924300e78da7b665030cdd6948d522e4c1  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEyC+jrhy+3Gvka5NgxDzsRcF6uTwFAl/zWpUACgkQxDzsRcF6
uTwdTw//XCxqbJH/uzqUGNkl09ZpNbAXPBksX+UifPvtAxdN0S5N710Mxmo584MZ
Go7k/EgH6zdoO6s6nehtfQNnjuq2sfUuYD7T6ZzQWfwe7VZt43rkTRHq0Wj+VveX
MulN9R8J4T6dHb0KvaqHAdiWs3HkOH9XkdjhOoRLVEJ1aOn7JNztmg0LA+mCdbSP
A0JW+M0WY1Q3qyjGesSTj9YJ+jts0AgAzSbMUBFNETPXqIHjljN0nX2+SCq/CXeM
lcje2mbxe+DeKZ0s4fMHAvmsLXKq+hntqWxhtJ2Rp79wVWZGKV7XrTQPhtShfruK
K+v/mywfNLTxUjI419q7Pn/iXUbPb3UnAhEhoj1m9OEJU3tfw9up4DF3Fzupxc2w
y68TfG6JQXPq3X4LTMUwa4Hj0HRWMdE2fYAzHQFWgAfI+jLD+7IdBSkoyANccG40
tHqajytGJIMAbYU0m+B23aySjSkfai7Dy3GjThqaWvy+jmPLpFtSJ/74hyc/Wp2f
/aYuzbKb6cPCAg0OSLaScQpo0HqjsE8Kbsbt/RFHEEAcXBnTMaa98SgbjTDJgjaa
NipIayFSBALUJEWQNYcNIltMgBnpV2Rzh2U2imXuxZLjk+P1Do5/zXTED4E+lU6Q
KvSBzQPrbaXH0rgfSwcl7p7S6ntzZ+jUPXd7HAQrSvDMlZ0xelo=
=TVIl
-----END PGP SIGNATURE-----

Node v14.15.4 (LTS)

Bethany Nicolle Griggs — Mon, 04 Jan 2021 18:17:46 GMT

Notable Changes

Vulnerabilities fixed:

CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt
CVE-2020-8265: use-after-free in TLSWrap (High)
- Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.
CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)
- Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).

Commits

[305c0f4977] - deps: upgrade npm to 6.14.10 (Ruy Adorno) #36571
[d62c650f75] - deps: update archs files for OpenSSL-1.1.1i (Myles Borins) #36521
[2de2672eb5] - deps: upgrade openssl sources to 1.1.1i (Myles Borins) #36521
[7ecac8143f] - http: add test for http transfer encoding smuggling (Matteo Collina) nodejs-private/node-private#228
[641f786bb1] - http: unset F_CHUNKED on new Transfer-Encoding (Matteo Collina) nodejs-private/node-private#228
[4f8772f9b7] - src: retain pointers to WriteWrap/ShutdownWrap (James M Snell) nodejs-private/node-private#23

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

03ac3f7d33f17b762d676988b725c58140b5f9a131c849f9b78cbe7f7f84c234  node-v14.15.4-aix-ppc64.tar.gz
6b0e19e5c2601ef97510f7eb4f52cc8ee261ba14cb05f31eb1a41a5043b0304e  node-v14.15.4-darwin-x64.tar.gz
3078556d474a3e3cd6845d79577ca78c14a3c0ef78d569ae3644834584235e88  node-v14.15.4-darwin-x64.tar.xz
3eb7d4ec4964b10a48987c35c37b3e7720735cf3b9806fe40a805fa1d49a9c7d  node-v14.15.4-headers.tar.gz
048e5486c86c8e9396a5b765744fad85b9a3ae5ba99f7dd472b41fee16446233  node-v14.15.4-headers.tar.xz
b681bda8eaa1ed2ac85e0ed2c2041a0408963c2198a24da183dc3ab60d93d975  node-v14.15.4-linux-arm64.tar.gz
b990bd99679158c3164c55a20c2a6677c3d9e9ffdfa0d4a40afe9c9b5e97a96f  node-v14.15.4-linux-arm64.tar.xz
ffce90b07675434491361dfc74eee230f9ffc65c6c08efb88a18781bcb931871  node-v14.15.4-linux-armv7l.tar.gz
bafe4bfb22b046cdda3475d23cd6999c5ea85180c180c4bbb94014920aa7231b  node-v14.15.4-linux-armv7l.tar.xz
d8b92d3826b7a04b886da92275a64978431fde1b47cc92de48f5fb16131bebb2  node-v14.15.4-linux-ppc64le.tar.gz
b2456aa4fbfeeea2aae2a0b969c0fc45c12cd218ca48461c6031f590c2ee8495  node-v14.15.4-linux-ppc64le.tar.xz
c13f16657074437fd66f888736260af486df89a7d77d8b323655cee6408a8084  node-v14.15.4-linux-s390x.tar.gz
29f794d492eccaf0b08e6492f91162447ad95cfefc213fc580a72e29e11501a9  node-v14.15.4-linux-s390x.tar.xz
b51c033d40246cd26e52978125a3687df5cd02ee532e8614feff0ba6c13a774f  node-v14.15.4-linux-x64.tar.gz
ed01043751f86bb534d8c70b16ab64c956af88fd35a9506b7e4a68f5b8243d8a  node-v14.15.4-linux-x64.tar.xz
86e42bb639ea69165a1527a8af5bcf8908633750645198b1c373be6c6ea9db31  node-v14.15.4.pkg
8610d81b2d4afc3a79afbe6209d510125131c45cae22cac63bb767dcfec1cbf0  node-v14.15.4.tar.gz
adb7ecf66c74b52a14a08cc22bb0f9aedc157cac1ac93240f7f455e8c8edec9c  node-v14.15.4.tar.xz
1da86f92f158e53ee79469daf5e6a3e3f2e6e7c233bbf4b91ab12e1ca9503444  node-v14.15.4-win-x64.7z
b2a0765240f8fbd3ba90a050b8c87069d81db36c9f3745aff7516e833e4d2ed6  node-v14.15.4-win-x64.zip
e631956bbf65cb046c7d38d0f0a4633755e86df1ff5f37c3610d55f706c1f0c0  node-v14.15.4-win-x86.7z
49b2ee6106192894809ce14a2932dca41a6bcf5602ce19413fcb3a477f8613b2  node-v14.15.4-win-x86.zip
346a053dcd7508f1e5fbb2da0e34cbb3da206ab2439c4bab5a219c3b75e62475  node-v14.15.4-x64.msi
2e91ec4aca9bccf105d920bf46b4fbe219aa9dd5439e006f65dc426273cbbdfa  node-v14.15.4-x86.msi
dc105951e62ca3be85b6d42ce1db5dc0fce6adac90c76861d9e62302a43ac6b6  win-x64/node.exe
632ef6fd3d8e23c8b333e0dde5a802c80e5bb08e572ac184d9c8ebf47db2be96  win-x64/node.lib
79aaa8027f4e98bfc3448d2282dde4678bbb345c1639eae2380ffc9d81ee4581  win-x64/node_pdb.7z
54ab0ed636dffac1335b7ac29e045ace732f6eef513fa2c549f6a00e367ecdcc  win-x64/node_pdb.zip
89ceec9ba49002797ab4f0e9753f4eae9f415d773aaf65b41b15640a4313d407  win-x86/node.exe
a6670b0a10985f58d1a66467041926060c16cc6932d3ba490a020f4cb3fd6280  win-x86/node.lib
ed7d37ade431e53738d6ef1481a05ad1cfcbea1aaa20289a134a43b01cdcc5b5  win-x86/node_pdb.7z
81f8634988510fd63fb85eb8ade339c252ce35d8b0a5620b6046e29061b00f87  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAl/zWvQACgkQ1wYoSKGr
AFwWTwgAtMV70O16Du5ZGlsQau42xBvMeAN8AvpkkUE7wX/r87cU90gScFKrVTvJ
URYmSu7AI7+nS3euqHU0AFqWEHOWSRXZ/1c83Bb0imLpfYlt6nTE8EZdVI8ul2T5
dyQZe95f/TR+NhjnoC+1Acqstf37BZ96aDSMkEcNWrjNA/jwFgK0ut8juRTefZaZ
3jUMBL3apZosxmw3CR5sbtDJM2c0LX1/5dRajmNnfnSHVvTor2YgRWI++DVrgMz3
bFiwwabKKrFs7ICFOpEzZVADOO84pE/G6wiSP4SkKTjxO6E2JPJNE2bXoPVK3VB3
cuDMZNhKfyg2HxVvy4R6aGwCnF9Big==
=YV6/
-----END PGP SIGNATURE-----

Node v15.5.1 (Current)

Bethany Nicolle Griggs — Mon, 04 Jan 2021 18:15:24 GMT

Notable changes

Vulnerabilities fixed:

CVE-2020-8265: use-after-free in TLSWrap (High)
- Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.
CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)
- Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).

Commits

[c5dbe831b7] - http: add test for http transfer encoding smuggling (Matteo Collina) nodejs-private/node-private#228
[e0c9a2285c] - http: unset F_CHUNKED on new Transfer-Encoding (Matteo Collina) nodejs-private/node-private#228
[9834ef85a0] - src: retain pointers to WriteWrap/ShutdownWrap (James M Snell) nodejs-private/node-private#23

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

1b56c38c36efb3d23c37fd7b2a46660ca06963d47dfd9160befb80e508169a48  node-v15.5.1-aix-ppc64.tar.gz
4507dab0481b0b5374b5758b1eba7d105c8cbcb173548119b04d9ef7d9f1d40f  node-v15.5.1-darwin-x64.tar.gz
756a2e96714580150e95bffccfff44e0797b634693291660d7320a280639169a  node-v15.5.1-darwin-x64.tar.xz
5c3d3f1ccc494cbdeace332301d94e60b667fe9982c6c0140faa5e836140a463  node-v15.5.1-headers.tar.gz
c8fed73644c3550665e2a02b348b624ff91e67013e8797de8b7cdf4f70df7989  node-v15.5.1-headers.tar.xz
a2d14db86c6f8a070f227940ea44a3409966f6bed14df0ec6f676fe2e2f601c9  node-v15.5.1-linux-arm64.tar.gz
b431a81ba4729233d686c922690b2d355381b1dd83b1fc486c4a27683ac15649  node-v15.5.1-linux-arm64.tar.xz
9c660bcf3143e07a0c192d89c0dcf8dbd1a4b90088bdf04d37dfa71b480866ca  node-v15.5.1-linux-armv7l.tar.gz
cc2084f85eab8c6bf8db8a96ab443886b6461ad1b8fba170d71c17eefc210507  node-v15.5.1-linux-armv7l.tar.xz
6c6dc15f4701bba28062cbec852a297f266e5068249911dda3c59199cd58de32  node-v15.5.1-linux-ppc64le.tar.gz
301ac66d16f692ee2cd2bb4d18b8fb5f8eb25aa474d67b5be5a84472f19af246  node-v15.5.1-linux-ppc64le.tar.xz
e05f949ea11e2aafc08a7972c0f41a11a3628762e857d44965e0605d3bcd143f  node-v15.5.1-linux-s390x.tar.gz
fa77245208b8f6fe1f40cc1b067bf08c1e33f857a328e78ededdc6ba1f016bae  node-v15.5.1-linux-s390x.tar.xz
8dd81dbd63082b24c9a1f16baf4ce743c0c8dff1e589b634119d6ebfca54457e  node-v15.5.1-linux-x64.tar.gz
dbc41a611d99aedf2cfd3d0acc50759a6b9084c7447862e990f51958d4a7aa41  node-v15.5.1-linux-x64.tar.xz
a8548daf881b81f08151fecbe059f49d1fbd8437da53f74a18fb071df23642e3  node-v15.5.1.pkg
9730d3099c051bd8733b3e6d62c54ba9b2d82ec40e6c65ee966ba3f346ff4157  node-v15.5.1.tar.gz
2c229acc2d4d47a872f0401c1dc4fa92d72317ca867609a3402a78fd78236b61  node-v15.5.1.tar.xz
ac0aa1f4dc266327bf133453d2e1c3f453d320e98134d690624c6d9931db86d8  node-v15.5.1-win-x64.7z
e1f826f9647fc7058b48c669991956a427fe4b6ccefa415a18b41715483f958d  node-v15.5.1-win-x64.zip
7ffa9b4e9c123905768c9ac19ef2746c41faf80e9ad75045a1cb963eac8db75e  node-v15.5.1-win-x86.7z
863aee4a2e3b675c7730f5946ffda20040b21afe2e0f5f0f873792e79d601adf  node-v15.5.1-win-x86.zip
aa745e356417c1ef1394ee583779f8dbb7e052d22349cb211bc692b562988873  node-v15.5.1-x64.msi
3b02fa7ef25bcc1b109e31fc2ce7c4afa95e084562ca3f66b299705b032cfe60  node-v15.5.1-x86.msi
f6f7093d3d1bdd231cd1580f1c4865f61bc1487d454852efe20fceba107aa1fb  win-x64/node.exe
e5082525203684fd34553f9a26c12d722a1a06ffeac8def760b5fea6227d167e  win-x64/node.lib
b17fc6d85709a269c5f869001b5d8a2ea1bba99dd4d99b1b77971555c30c3357  win-x64/node_pdb.7z
089ac9e1d64daaf8ffa1cec95a9dac00655a93a78754e9fad9ea16d89bf818d3  win-x64/node_pdb.zip
61cdbb7e974d3e903db9dc319010e8d1c0a2c0de84143929ede0a896c3209d80  win-x86/node.exe
844ed42e7cacc6443224b880400c7f884bd058e07dc44e52d871ac5ea736e979  win-x86/node.lib
b1d293f5ecca1d7faabf26051a0722a0e058dc25d058cc2864e8e40717bee499  win-x86/node_pdb.7z
1bc218b4321322771ce28d7a8d365b6b950cc3de3fe9f71820f560fd7c0e78e4  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAl/zWtIACgkQ1wYoSKGr
AFzIIggAqw43M7hp8Yo1m7wtumKbG0kU0OFP6oOAV7MLNNtRI6vAYtSl+ZwYa8GH
6cPHbLN9YY5XVOaO4HWKtIfUT/TWQlFFQv8Sn80qIy3+qykV813h3LGUyU/cPI+H
jjC5LUd7Vt2CbEkb0uVeV83W71yF/+4dff9dIAWhTw2+O9hpQLNh8TJ9xGZ+2JLG
kcC2zyGF9Ot5PdMnU6/2J1JSrBOjKz0ShlSCqboUvsEkCoaYTn2dI2m8sMfUbM4G
HOejqww+tHGyqBYyZvlIcQP0beTNXy8XiyOl4kF2TGrkML78oxm34BgtCOyuDdDZ
ZAjAgeX/lCVPTMLifAYETaCWeRJPeA==
=KtB7
-----END PGP SIGNATURE-----