You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is a security release.
Notable changes:
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP
address (Medium)
PR-URL: nodejs-private/node-private#362
Copy file name to clipboardExpand all lines: doc/changelogs/CHANGELOG_V14.md
+19Lines changed: 19 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -11,6 +11,7 @@
11
11
</tr>
12
12
<tr>
13
13
<td valign="top">
14
+
<a href="#14.21.1">14.21.1</a><br/>
14
15
<a href="#14.21.0">14.21.0</a><br/>
15
16
<a href="#14.20.1">14.20.1</a><br/>
16
17
<a href="#14.20.0">14.20.0</a><br/>
@@ -76,6 +77,24 @@
76
77
* [io.js](CHANGELOG_IOJS.md)
77
78
* [Archive](CHANGELOG_ARCHIVE.md)
78
79
80
+
<a id="14.21.1"></a>
81
+
82
+
## 2022-11-04, Version 14.21.1 'Fermium' (LTS), @BethGriggs
83
+
84
+
This is a security release.
85
+
86
+
### Notable changes
87
+
88
+
The following CVEs are fixed in this release:
89
+
90
+
* **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium)
91
+
92
+
More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post.
93
+
94
+
### Commits
95
+
96
+
* \[[`2b433af094`](https://github.com/nodejs/node/commit/2b433af094)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#354](https://github.com/nodejs-private/node-private/pull/354)
97
+
79
98
<a id="14.21.0"></a>
80
99
81
100
## 2022-11-01, Version 14.21.0 'Fermium' (LTS), @danielleadams
0 commit comments