Skip to content

Commit cf6b5c2

Browse files
committed
2025-07-15, Version 24.4.1 (Current)
This is a security release. Notable changes: deps: * (CVE-2025-27209) V8: revert rapidhash commits lib: * (CVE-2025-27210) handle all windows reserved driver name PR-URL: nodejs-private/node-private#725 Signed-off-by: RafaelGSS <[email protected]>
1 parent 56f9db2 commit cf6b5c2

File tree

3 files changed

+20
-2
lines changed

3 files changed

+20
-2
lines changed

CHANGELOG.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,8 @@ release.
4040
</tr>
4141
<tr>
4242
<td valign="top">
43-
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.4.0">24.4.0</a></b><br/>
43+
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.4.1">24.4.1</a></b><br/>
44+
<a href="doc/changelogs/CHANGELOG_V24.md#24.4.0">24.4.0</a><br/>
4445
<a href="doc/changelogs/CHANGELOG_V24.md#24.3.0">24.3.0</a><br/>
4546
<a href="doc/changelogs/CHANGELOG_V24.md#24.2.0">24.2.0</a><br/>
4647
<a href="doc/changelogs/CHANGELOG_V24.md#24.1.0">24.1.0</a><br/>

doc/changelogs/CHANGELOG_V24.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
</tr>
99
<tr>
1010
<td>
11+
<a href="#24.4.1">24.4.1</a><br/>
1112
<a href="#24.4.0">24.4.0</a><br/>
1213
<a href="#24.3.0">24.3.0</a><br/>
1314
<a href="#24.2.0">24.2.0</a><br/>
@@ -45,6 +46,22 @@
4546
* [io.js](CHANGELOG_IOJS.md)
4647
* [Archive](CHANGELOG_ARCHIVE.md)
4748

49+
<a id="24.4.1"></a>
50+
51+
## 2025-07-15, Version 24.4.1 (Current), @RafaelGSS
52+
53+
This is a security release.
54+
55+
### Notable Changes
56+
57+
* (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
58+
* (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
59+
60+
### Commits
61+
62+
* \[[`c33223f1a5`](https://github.com/nodejs/node/commit/c33223f1a5)] - **(CVE-2025-27209)** **deps**: V8: revert rapidhash commits (Michaël Zasso) [nodejs-private/node-private#713](https://github.com/nodejs-private/node-private/pull/713)
63+
* \[[`56f9db2aaa`](https://github.com/nodejs/node/commit/56f9db2aaa)] - **(CVE-2025-27210)** **lib**: handle all windows reserved driver name (RafaelGSS) [nodejs-private/node-private#721](https://github.com/nodejs-private/node-private/pull/721)
64+
4865
<a id="24.4.0"></a>
4966

5067
## 2025-07-09, Version 24.4.0 (Current), @RafaelGSS

src/node_version.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
#define NODE_VERSION_IS_LTS 0
3030
#define NODE_VERSION_LTS_CODENAME ""
3131

32-
#define NODE_VERSION_IS_RELEASE 0
32+
#define NODE_VERSION_IS_RELEASE 1
3333

3434
#ifndef NODE_STRINGIFY
3535
#define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)

0 commit comments

Comments
 (0)