Skip to content

doc: fix changelog after security release #61371

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
marco-ippolito wants to merge 4 commits into from
Closed

doc: fix changelog after security release #61371

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d645152
doc: fix v20 changelog after security release
marco-ippolito Jan 13, 2026
45221d8
doc: fix v22 changelog after security release
marco-ippolito Jan 13, 2026
9d646a8
doc: fix v24 changelog after security release
marco-ippolito Jan 13, 2026
2a81e60
doc: fix v25 changelog after security release
marco-ippolito Jan 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
doc: fix v20 changelog after security release
  • Loading branch information
@marco-ippolito
marco-ippolito committed Jan 13, 2026
commit d645152b994741d6521c25d9c8bfd85da8c0eb52
6 changes: 0 additions & 6 deletions doc/changelogs/CHANGELOG_V20.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,17 +89,11 @@ This is a security release.

### Notable Changes

lib:

* (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/802>
* (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797>
lib,permission:
* (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
src:
* (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
* (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
* (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

@aduh95 aduh95 Jan 13, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Don't we want to keep the subsystem? It's harder to understand what the change is about without it

Suggested change
* (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>
* **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

@marco-ippolito marco-ippolito Jan 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking at previous security releases we dont iirc


### Commits
Expand Down