node/doc/changelogs
Richard Lau edd64fe5ba
2023-02-16, Version 14.21.3 'Fermium' (LTS)
This is a security release.

Notable changes:

The following CVEs are fixed in this release:

* CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

* OpenSSL 1.1.1t
* npm 6.14.18

PR-URL: https://github.com/nodejs-private/node-private/pull/389
Refs: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases
2023-02-15 13:51:28 +00:00
..
CHANGELOG_ARCHIVE.md doc: fix CHANGELOG_ARCHIVE table of contents 2021-05-01 12:25:05 +02:00
CHANGELOG_IOJS.md doc: replace http to https of link urls 2020-07-16 17:09:04 -04:00
CHANGELOG_V4.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V5.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V6.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V7.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V8.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V9.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V010.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V10.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V11.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V012.md doc: fix malformed changelog entries 2021-09-04 15:14:54 +02:00
CHANGELOG_V12.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V13.md doc: ignore no-literal-urls in changelogs 2020-04-28 16:28:28 +01:00
CHANGELOG_V14.md 2023-02-16, Version 14.21.3 'Fermium' (LTS) 2023-02-15 13:51:28 +00:00