Hirokazu MORIKAWA 643afd8977 node: January 21, 2025 Security Releases ...

This is a security release.

Notable Changes

    CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

2025-01-24 15:55:15 +08:00

..

patches

node: January 21, 2025 Security Releases

2025-01-24 15:55:15 +08:00

Makefile

node: January 21, 2025 Security Releases

2025-01-24 15:55:15 +08:00