diff --git a/CHANGELOG.md b/CHANGELOG.md index 6cb9179a9a0936..41cdb8ac4b1054 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -86,7 +86,8 @@ release. 16.0.0
-14.21.0
+14.21.1
+14.21.0
14.20.1
14.20.0
14.19.3
diff --git a/doc/changelogs/CHANGELOG_V14.md b/doc/changelogs/CHANGELOG_V14.md index eb7e9c8518db57..e06a10165f4db0 100644 --- a/doc/changelogs/CHANGELOG_V14.md +++ b/doc/changelogs/CHANGELOG_V14.md @@ -9,6 +9,7 @@ +14.21.1
14.21.0
14.20.1
14.20.0
@@ -79,6 +80,24 @@ * [io.js](CHANGELOG_IOJS.md) * [Archive](CHANGELOG_ARCHIVE.md) + + +## 2022-11-04, Version 14.21.1 'Fermium' (LTS), @BethGriggs + +This is a security release. + +### Notable changes + +The following CVEs are fixed in this release: + +* **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium) + +More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post. + +### Commits + +* \[[`2b433af094`](https://github.com/nodejs/node/commit/2b433af094)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#354](https://github.com/nodejs-private/node-private/pull/354) + ## 2022-11-01, Version 14.21.0 'Fermium' (LTS), @danielleadams