Rafael Gonzaga
2024-04-10, Version 21.7.3 (Current), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-27980 - Command injection via args parameter of
child_process.spawnwithout shell option enabled on Windows
Commits
- [
9095c914ed] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#562
Windows 32-bit Installer: https://nodejs.org/dist/v21.7.3/node-v21.7.3-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v21.7.3/node-v21.7.3-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v21.7.3/node-v21.7.3-arm64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v21.7.3/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v21.7.3/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v21.7.3/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v21.7.3/node-v21.7.3.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v21.7.3/node-v21.7.3-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v21.7.3/node-v21.7.3.tar.gz
Other release files: https://nodejs.org/dist/v21.7.3/
Documentation: https://nodejs.org/docs/v21.7.3/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
3ae059cab0a4f18ce79676bbc37112cd428b2f22ba66277bf12873ef9eb34143 node-v21.7.3-aix-ppc64.tar.gz
e0f70657ad7ee7dac2b2b6e137b319a9967da95676567451f92d7a9f39e4cd65 node-v21.7.3-arm64.msi
165d3ba3500cfc8708f85d3815aaaa21ce418164c933d5419c30825ccad3a99c node-v21.7.3-darwin-arm64.tar.gz
6725de89be5852b403456bba2892e3ef2f12cd533e129705d9f4ffcdfe763e05 node-v21.7.3-darwin-arm64.tar.xz
58d0212e169764c3424d2d5bec73e8a098d34b4e82fca6e1dd54083ea3049c5f node-v21.7.3-darwin-x64.tar.gz
ab6efddd4a83be1be705ae519740d837582acb743bab53a361e5ba804a97a97d node-v21.7.3-darwin-x64.tar.xz
3211b00464b626e3a5890461edbae75488d5f02665834455eb2c019e54488588 node-v21.7.3-headers.tar.gz
bb6a3602b2a2a7f6baaabb2c7a33be15a25cc3c85d1095f8d13c2e9795b894b6 node-v21.7.3-headers.tar.xz
15390ba8509b71c0051e61f75a6fdb0a2eb38318c03a01bf60c93d33d414d138 node-v21.7.3-linux-arm64.tar.gz
d48a76d02c5940a6dc0738bc0af22551d15cb58b30a5ddddb54fe6e00021f3c1 node-v21.7.3-linux-arm64.tar.xz
89e430a705d0855b044ba42d3b48f052cffbd4530cc12029ed2965d299167151 node-v21.7.3-linux-armv7l.tar.gz
5cceefa6803781a3f3fbb52e5e28e99b9bbaf3c7eac26950ea031a8f7c77c5fc node-v21.7.3-linux-armv7l.tar.xz
7421c811185c8b4e349af9eefb7c0d54b6451f82c0935e5207da334f8d00a133 node-v21.7.3-linux-ppc64le.tar.gz
abdca8b36e378cbd7500fa3e839259cfa103db42d2b747948d69e70c28853f91 node-v21.7.3-linux-ppc64le.tar.xz
837b88c7a1bf030ea210cafaa62d378ba464f5849ada47ad7afba9d95c225aec node-v21.7.3-linux-s390x.tar.gz
d4975ba2c87ece52d6d10aee8117b90a2d35412672997645be1b4e4594e9904b node-v21.7.3-linux-s390x.tar.xz
a64cbb12282cb60d35743ef4f51561f8d89946a5f0a484f99168f4de602d7c3d node-v21.7.3-linux-x64.tar.gz
19e17a77e59044de169cd19be3f3bccae686982fba022f9634421b44724ee90c node-v21.7.3-linux-x64.tar.xz
3de6fe25a494ed982adc81a585c88b62147a37d8ca74b26a184ff5959ebd771a node-v21.7.3-win-arm64.7z
686a1ed8ec076ec25e198b0e6e31fdd4198aaabbeb384ff137c1e3bf57664bc3 node-v21.7.3-win-arm64.zip
22e771e992119ef5e6e1553601a301c6fe796a1485dae605ce10a5388834fea2 node-v21.7.3-win-x64.7z
d2314f496782b53ad2fe5fa82fca6ff7f39f07fe59dd007116404ad92179c78e node-v21.7.3-win-x64.zip
17c50f9aaba6fe07f6468888614e36261a5b232333cd31478a6e33f243cddd49 node-v21.7.3-win-x86.7z
e96df935994addbbb51228f1724e8411ea685cb60fa26d84cc7c5d74806c38da node-v21.7.3-win-x86.zip
de33d68e92e8948b96515bafee206d0b5c1f5440eb2e07aa15d6ce2f6493f53b node-v21.7.3-x64.msi
b152d667112572c7293408a6968429f20db117aef2f01d6ca652c0dcae9423b0 node-v21.7.3-x86.msi
b8bccb2ec100c6db213d54deaa5aa064a254ec2f4730ca2810262caf425a9173 node-v21.7.3.pkg
ce1f61347671ef219d9c2925313d629d3fef98fc8d7f5ef38dd4656f7d0f58e7 node-v21.7.3.tar.gz
668b26fb1bfc1cff60622bbcf3d715843e16f50c8f30e9f64fb4141814d79a21 node-v21.7.3.tar.xz
509c04ca7909d2bb715cab80e72da1b19f033eea0e0a84ea5de9145b6d3e75b9 win-arm64/node.exe
0e271f1dff6290e15709869e78160b34277427f905f71afe621e6b22c06c0359 win-arm64/node.lib
cff87c002f27b5d72722539749bc584192bc0f8c01d0d24e11501ee0df1c9e18 win-arm64/node_pdb.7z
e826fdee0df83477d20aa73dbb930dfac03f43d9138b51940a1042cc43e833de win-arm64/node_pdb.zip
37901cb69f7de95891b5e5cead529393a18dc8886a7bb4c6c36e35ac955c70fa win-x64/node.exe
473d2b087bfa76b2746542c6c4bd019b0527545849e04cbc3d0872ebd9335f0a win-x64/node.lib
40f3e3f2bc1885ed318a70ffb4cae58358f09e4bc6da82227251d0133a015ce7 win-x64/node_pdb.7z
2e39aa4be528bdc6182c1629d6ad7ebc57e7188a77963050df988b9116a7a7bc win-x64/node_pdb.zip
823764a39291d2693867c9d3cb953c660995b22f3ae4e5c1d164aa68c67c6609 win-x86/node.exe
3b5733c6ef1ab0e6bc303eb01300c93d7671cb58e5991293bd9da732268b364b win-x86/node.lib
4f72d3d4448c66d71b5d016428ba385462d6e7ddac963c0b5ebb4e41ed0c2ca7 win-x86/node_pdb.7z
a6c2907f9b3d5e6be1c06d8e98cdf20cd87de4481e3c68c71a50c225ecb05692 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=eha0
-----END PGP SIGNATURE-----