Rafael Gonzaga
2024-04-03, Version 21.7.2 (Current), @RafaelGSS prepared by @marco-ippolito
This is a security release.
Notable changes
- CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
- CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation- (Medium)
- llhttp version 9.2.1
- undici version 6.11.1
Commits
- [
3dfc10c851] - deps: update undici to 6.11.1 (Node.js GitHub Bot) #52328 - [
aceea1c5e7] - deps: update undici to 6.10.2 (Node.js GitHub Bot) #52227 - [
5f0f96b275] - deps: update llhttp to 9.2.0 (Node.js GitHub Bot) #51719 - [
1a65e98e22] - http: do not allow OBS fold in headers by default (Paolo Insogna) nodejs-private/node-private#556 - [
3bd39fb474] - src: ensure to close stream when destroying session (RafaelGSS) nodejs-private/node-private#561
Windows 32-bit Installer: https://nodejs.org/dist/v21.7.2/node-v21.7.2-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v21.7.2/node-v21.7.2-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v21.7.2/node-v21.7.2-arm64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v21.7.2/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v21.7.2/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v21.7.2/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v21.7.2/node-v21.7.2.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v21.7.2/node-v21.7.2-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v21.7.2/node-v21.7.2.tar.gz
Other release files: https://nodejs.org/dist/v21.7.2/
Documentation: https://nodejs.org/docs/v21.7.2/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
6290bc006ee81332da8345b2d254ecf75674de0898a6dd5e348c7685ca0df325 node-v21.7.2-aix-ppc64.tar.gz
92b1d9ecd1e4520a1ac82963719dd7fd80b3f250751e34d67a8a7553fd149720 node-v21.7.2-arm64.msi
d00a2b5002db121d798f1c9556342abb6ec6a4fac9d6197bc86c922a796812ae node-v21.7.2-darwin-arm64.tar.gz
47784735ff348e9ca6eed5a1482d58582949f0ace7d74ba5d510ab763d5e1327 node-v21.7.2-darwin-arm64.tar.xz
6211829236013582fb654b4b9f8c6528dcb07620f6f82878ef514fae1b30685e node-v21.7.2-darwin-x64.tar.gz
309457de4a2e87db456b5656383be8590d8a69aacd1e161015d98a88697a206f node-v21.7.2-darwin-x64.tar.xz
32bc006ce485d8726e72c666feb08de567098d881b8e79ee37fc9aa9854329c6 node-v21.7.2-headers.tar.gz
66fa0952f5b207c1e1771492d04285a2199bf0dc756e392fe03d3be54ca3733d node-v21.7.2-headers.tar.xz
5cf1cb89feb40404adad999307659754dd17fc9afa6c086aaff690ecbf8af66c node-v21.7.2-linux-arm64.tar.gz
0a07d44da8324ad0514ccd4d588d5aa8d749d76b01b69d55343c2132d1efbe3b node-v21.7.2-linux-arm64.tar.xz
73df605f0aaa18c4a8e9789206d18045b277f4233f50837b1563f9b3dd50f696 node-v21.7.2-linux-armv7l.tar.gz
8c23b9f1d6a9022b04cda94c85bbfd329a178d7710c1bbd25587a668078d9915 node-v21.7.2-linux-armv7l.tar.xz
4ece271c97fc434c34328081245e406e23a23fed32868f90fe901f1a232a27bd node-v21.7.2-linux-ppc64le.tar.gz
11750d12cec45b7f7451b18dcd98ddcdce07afbb68db57bb0dc89e883b78ab6b node-v21.7.2-linux-ppc64le.tar.xz
9df7a1c8c9be7a7f4a62b822c3cbbc0f4c66ad185b7383c6bfb021e99a9441b0 node-v21.7.2-linux-s390x.tar.gz
ba8e598921c29e2ff5efd6f42a3e11c765a77339ac7ef7e1b55c6aba95f3bf8b node-v21.7.2-linux-s390x.tar.xz
06b891c82c9b19b8d8553222de5de8afd43a38c1b898f9ca323e1d2e22da9075 node-v21.7.2-linux-x64.tar.gz
9d55843dd4b2400fe4034de3281003de718dbd0c6f61ce6b53e94e987b16c9dc node-v21.7.2-linux-x64.tar.xz
f9e642aa9e729842b289c0314be8c7d468aca2994b1b8d8a8c2143382f1c4136 node-v21.7.2-win-arm64.7z
a9a62973ac69adb98d62f5aa6d3a7ca668fb7b1a5c84833e93ff330eef1d972b node-v21.7.2-win-arm64.zip
a532dd8dae519c78100497f398621574431757afa933ab32d39b1ba3fcf44d9b node-v21.7.2-win-x64.7z
99102e5964c6cd3c3ba5562243dbfda8e1f265e7fff2489aa1d806074893d88a node-v21.7.2-win-x64.zip
9987f8a12d2cb0439a9def11b449793b372d4ff96acceb9321a736f5c57e5f41 node-v21.7.2-win-x86.7z
ce346bb8e5d2722d653d8f6cee81fdcc80fb88c51ca945763ff12c7e4f659bbb node-v21.7.2-win-x86.zip
b936d30bbd0927157165fb09d2eaff2d939d1f13136bbddc50e64c31aa86b4ac node-v21.7.2-x64.msi
83b30683316bb2f8115d58af23b8bb154de9615632cf491fec6c365aff3b74f5 node-v21.7.2-x86.msi
f75990a446cd3512c80598d815243592776a99ac7f4e5f2cbccc5cf1369b7cfe node-v21.7.2.pkg
dc1b18771e7ed3da051fc2242806bfde5ae02b63fe7205e80156e92de8f8fa3d node-v21.7.2.tar.gz
b4b1e2a07e96f85f6ce34a2fbfea348691aefe5cb219aa6951e23ccc991f9e2f node-v21.7.2.tar.xz
80541446e8ef8a2d26d73e4517afbb560717d47e4ed0d122fdddd90f8662da53 win-arm64/node.exe
298d58a6fed36728a8d1b07f6fe3678c5a6faf4c77bdcd7288e155c117404eea win-arm64/node.lib
1881ceeab304bc003ed87c03a1206f9f9e7deb861a44af68361e493a23a5aec1 win-arm64/node_pdb.7z
c7824ff2aea7a565d81d3ba0e2992497fd7a0f776f39179681f326d9b6eab75b win-arm64/node_pdb.zip
64b5a1e9101e6281f072b385691affbe45b2cb93ba84a592f1a9941d994e621f win-x64/node.exe
473d2b087bfa76b2746542c6c4bd019b0527545849e04cbc3d0872ebd9335f0a win-x64/node.lib
93d79e521d9f3513eee1cb9ad98f38c7b62b3845be285333ad3731cd50c983ab win-x64/node_pdb.7z
e8f7a31dae7239154e53f57e3b1545102b6905419c1545ffeed721509f95426c win-x64/node_pdb.zip
f16257e0cdae9de68cc3bff533ddac2bbfe42f3b7cba16a2a8fc1b40a98e3d3c win-x86/node.exe
8ecea23973c4e82d13c18f78f4e23beebac5b70f1d54c100d08d41f52ade421e win-x86/node.lib
6ddf27e2fcc6528a95fd5db9046a5629698714aeae43ff4e21d6b99904bb8cde win-x86/node_pdb.7z
91af5f3e3bb0e838a2c2e5c6a2d96331309fe52bb0897072774954eddc1976c4 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=W6mj
-----END PGP SIGNATURE-----