mirror of
https://github.com/nodejs/node.git
synced 2026-10-29 02:35:20 +08:00
RafaelGSS
b43171c6f6
This is a security release. Notable changes: crypto: * disable PKCS#1 padding for privateDecrypt (Michael Dawson) https://github.com/nodejs-private/node-private/pull/525 deps: * upgrade libuv to 1.48.0 (Santiago Gimeno) https://github.com/nodejs/node/pull/51698 * disable io_uring support in libuv by default (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/528 fs: * protect against modified Buffer internals in possiblyTransformPath (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/497 http: * add maximum chunk extension size (Paolo Insogna) https://github.com/nodejs-private/node-private/pull/518 lib: * update undici to v5.28.3 (Matteo Collina) https://github.com/nodejs-private/node-private/pull/538 * use cache fs internals against path traversal (RafaelGSS) https://github.com/nodejs-private/node-private/pull/516 src: * fix HasOnly(capability) in node::credentials (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/505 src,deps: * disable setuid() etc if io_uring enabled (Tobias Nießen) https://github.com/nodejs-private/node-private/pull/528 test,doc: * clarify wildcard usage (RafaelGSS) https://github.com/nodejs-private/node-private/pull/517 zlib: * pause stream if outgoing buffer is full (Matteo Collina) https://github.com/nodejs-private/node-private/pull/540 PR-URL: https://github.com/nodejs-private/node-private/pull/543