Node.js v15.10.0, v14.16.0 and v12.21.0 released!

[NewsBot]

Node.js v15.10.0, v14.16.0 and v12.21.0 has been released.

This is a security release.

Notable changes

Vulnerabilities fixed:

• CVE-2021-22883: HTTP2 ‘unknownProtocol’ cause Denial of Service by resource exhaustion
  • Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an ‘unknownProtocol’ are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the proces…

Link: Release 2021-02-23, Version 15.10.0 (Current), @BethGriggs · nodejs/node · GitHub

This is a security release.

Notable changes

Vulnerabilities fixed:

• CVE-2021-22883: HTTP2 ‘unknownProtocol’ cause Denial of Service by resource exhaustion
  • Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an ‘unknownProtocol’ are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the proces…

Link: Release 2021-02-23, Version 14.16.0 'Fermium' (LTS), @BethGriggs · nodejs/node · GitHub

This is a security release.

Notable changes

Vulnerabilities fixed:

• CVE-2021-22883: HTTP2 ‘unknownProtocol’ cause Denial of Service by resource exhaustion
  • Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an ‘unknownProtocol’ are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the proces…

Link: Release 2021-02-23, Version 12.21.0 'Erbium' (LTS), @richardlau · nodejs/node · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk (dev_talk)

Share link for this tweet.