From f95d7152cb9f56b3d6ca8e107a01c199b235c0df Mon Sep 17 00:00:00 2001 From: Beth Griggs Date: Sat, 14 Nov 2020 15:56:08 +0000 Subject: [PATCH] 2020-11-16, Version 12.19.1 'Erbium' (LTS) This is a security release. Notable changes: Vulnerabilities fixed: * CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses. PR-URL: https://github.com/nodejs-private/node-private/pull/233 --- CHANGELOG.md | 3 ++- doc/changelogs/CHANGELOG_V12.md | 16 ++++++++++++++++ src/node_version.h | 2 +- 3 files changed, 19 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1d2f42fd6e03e1..95c551796947e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -28,7 +28,8 @@ release. -12.19.0
+12.19.1
+12.19.0
12.18.4
12.18.3
12.18.2
diff --git a/doc/changelogs/CHANGELOG_V12.md b/doc/changelogs/CHANGELOG_V12.md index c5a9a3c52de995..4c4acc1c4e0954 100644 --- a/doc/changelogs/CHANGELOG_V12.md +++ b/doc/changelogs/CHANGELOG_V12.md @@ -11,6 +11,7 @@ +12.19.1
12.19.0
12.18.4
12.18.3
@@ -64,6 +65,21 @@ * [io.js](CHANGELOG_IOJS.md) * [Archive](CHANGELOG_ARCHIVE.md) + +## 2020-11-16, Version 12.19.1 'Erbium' (LTS), @BethGriggs + +### Notable changes + +This is a security release. + +Vulnerabilities fixed: + +* **CVE-2020-8277**: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses. + +### Commits + +* [[`022899e1d5`](https://github.com/nodejs/node/commit/022899e1d5)] - **deps**: cherry-pick 0d252eb from upstream c-ares (Michael Dawson) [nodejs-private/node-private#231](https://github.com/nodejs-private/node-private/pull/231) + ## 2020-10-06, Version 12.19.0 'Erbium' (LTS), @codebytere diff --git a/src/node_version.h b/src/node_version.h index 9746ce4ae54f3b..a11364809e8da3 100644 --- a/src/node_version.h +++ b/src/node_version.h @@ -29,7 +29,7 @@ #define NODE_VERSION_IS_LTS 1 #define NODE_VERSION_LTS_CODENAME "Erbium" -#define NODE_VERSION_IS_RELEASE 0 +#define NODE_VERSION_IS_RELEASE 1 #ifndef NODE_STRINGIFY #define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)