archive/node
1
0
Fork 0
mirror of https://github.com/nodejs/node.git synced 2025-08-15 13:48:44 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

2025-07-15, Version 24.4.1 (Current)

Browse source 
This is a security release.

Notable changes:

deps:
  * (CVE-2025-27209) V8: revert rapidhash commits
lib:
  * (CVE-2025-27210) handle all windows reserved driver name

PR-URL: https://github.com/nodejs-private/node-private/pull/725
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
This commit is contained in:
RafaelGSS 2025-07-10 11:41:24 -03:00
parent 56f9db2aaa
commit cf6b5c2512
No known key found for this signature in database
GPG key ID: 8BEAB4DFCF555EF4
3 changed files with 20 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -40,7 +40,8 @@ release.
</tr>
<tr>
<td valign="top">
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.4.0">24.4.0</a></b><br/>
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.4.1">24.4.1</a></b><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.4.0">24.4.0</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.3.0">24.3.0</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.2.0">24.2.0</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.1.0">24.1.0</a><br/>

17
doc/changelogs/CHANGELOG_V24.md
View file

@ -8,6 +8,7 @@
</tr>
<tr>
<td>
<a href="#24.4.1">24.4.1</a><br/>
<a href="#24.4.0">24.4.0</a><br/>
<a href="#24.3.0">24.3.0</a><br/>
<a href="#24.2.0">24.2.0</a><br/>
@ -45,6 +46,22 @@
* [io.js](CHANGELOG_IOJS.md)
* [Archive](CHANGELOG_ARCHIVE.md)
<a id="24.4.1"></a>
## 2025-07-15, Version 24.4.1 (Current), @RafaelGSS
This is a security release.
### Notable Changes
* (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
* (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
### Commits
* \[[`c33223f1a5`](https://github.com/nodejs/node/commit/c33223f1a5)] - **(CVE-2025-27209)** **deps**: V8: revert rapidhash commits (Michaël Zasso) [nodejs-private/node-private#713](https://github.com/nodejs-private/node-private/pull/713)
* \[[`56f9db2aaa`](https://github.com/nodejs/node/commit/56f9db2aaa)] - **(CVE-2025-27210)** **lib**: handle all windows reserved driver name (RafaelGSS) [nodejs-private/node-private#721](https://github.com/nodejs-private/node-private/pull/721)
<a id="24.4.0"></a>
## 2025-07-09, Version 24.4.0 (Current), @RafaelGSS

2
src/node_version.h
View file

@ -29,7 +29,7 @@
#define NODE_VERSION_IS_LTS 0
#define NODE_VERSION_LTS_CODENAME ""
#define NODE_VERSION_IS_RELEASE 0
#define NODE_VERSION_IS_RELEASE 1
#ifndef NODE_STRINGIFY
#define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)