News from 2020
-
Node v12.19.1 (LTS)
This is a security release.
Vulnerabilities fixed:
- CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.
-
Node v14.15.1 (LTS)
This is a security release.
Vulnerabilities fixed:
- CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.
-
Node v15.2.1 (Current)
This is a security release.
Vulnerabilities fixed:
- CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of service by getting the application to resolve a DNS record with a larger number of responses.
-
November 2020 Security Releases
Updates are now available for v12.x, v14.x and v15.x Node.js release lines for the following issues.
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of service by getting the application to resolve a DNS record with a larger number of responses.
- Node v15.2.0 (Current)
- Node v15.1.0 (Current)
-
Node v14.15.0 (LTS)
This release marks the transition of Node.js 14.x into Long Term Support (LTS) with the codename 'Fermium'. The 14.x release line now moves into "Active LTS" and will remain so until October 2021. After that time, it will move into "Maintenance" until end of life in April 2023.
- Node v10.23.0 (LTS)
-
Node v15.0.1 (Current)
- crypto: fix regression on randomFillSync (James M Snell) #35723
- This fixes issue https://github.com/nodejs/node/issues/35722.
- deps: upgrade npm to 7.0.3 (Ruy Adorno) #35724
- doc: add release key for Danielle Adams (Danielle Adams) #35545
- crypto: fix regression on randomFillSync (James M Snell) #35723
-
Node v15.0.0 (Current)
Deprecations and Removals
- [
a11788736a
] - (SEMVER-MAJOR) build: remove --build-v8-with-gn configure option (Yang Guo) #27576 - [
89428c7a2d
] - (SEMVER-MAJOR) build: drop support for VS2017 (Michaël Zasso) #33694 - [
c25cf34ac1
] - (SEMVER-MAJOR) doc: move DEP0018 to End-of-Life (Rich Trott) #35316 - [
2002d90abd
] - (SEMVER-MAJOR) fs: deprecation warning on recursive rmdir (Ian Sutherland) #35562 - [
eee522ac29
] - (SEMVER-MAJOR) lib: add EventTarget-related browser globals (Anna Henningsen) #35496 - [
41796ebd30
] - (SEMVER-MAJOR) net: remove long deprecated server.connections property (James M Snell) #33647 - [
a416692e93
] - (SEMVER-MAJOR) repl: remove deprecated repl.memory function (Ruben Bridgewater) #33286 - [
f217b2dfb0
] - (SEMVER-MAJOR) repl: remove deprecated repl.turnOffEditorMode() function (Ruben Bridgewater) #33286 - [
a1bcad8dc0
] - (SEMVER-MAJOR) repl: remove deprecated repl.parseREPLKeyword() function (Ruben Bridgewater) #33286 - [
4ace010b53
] - (SEMVER-MAJOR) repl: remove deprecated bufferedCommand property (Ruben Bridgewater) #33286 - [
37524307fe
] - (SEMVER-MAJOR) repl: remove deprecated .rli (Ruben Bridgewater) #33286 - [
a85ce885bd
] - (SEMVER-MAJOR) src: remove deprecated node debug command (James M Snell) #33648 - [
a8904e8eee
] - (SEMVER-MAJOR) timers: introduce timers/promises (James M Snell) #33950 - [
1211b9a72f
] - (SEMVER-MAJOR) util: change default value ofmaxStringLength
to 10000 (unknown) #32744 - [
ca8f3ef2e5
] - (SEMVER-MAJOR) wasi: drop --experimental-wasm-bigint requirement (Colin Ihrig) #35415
- [
- Node v14.14.0 (Current)
- Node v14.13.1 (Current)
- Node v12.19.0 (LTS)
- Node v14.13.0 (Current)
- Node v14.12.0 (Current)
- September 2020 Security Releases
- Node v12.18.4 (LTS)
- Node v14.11.0 (Current)
- Node v10.22.1 (LTS)
- Node v14.10.1 (Current)
- Node v14.10.0 (Current)
- Node v14.9.0 (Current)
- Node v14.8.0 (Current)
- Node v14.7.0 (Current)
- Node v12.18.3 (LTS)
- Node v14.6.0 (Current)
- Node v10.22.0 (LTS)
- Node v14.5.0 (Current)
- Node v12.18.2 (LTS)
- Node v12.18.1 (LTS)
- Node v10.21.0 (LTS)
- Node v12.18.0 (LTS)
- Node v14.4.0 (Current)
- June 2020 Security Releases
- Node v12.17.0 (LTS)
- Node v14.3.0 (Current)
- Node v14.2.0 (Current)
- Node v13.14.0 (Current)
- Node v14.1.0 (Current)
- Node v12.16.3 (LTS)
- Node v14.0.0 (Current)
- OpenSSL security releases do not require Node.js security releases
- Node v13.13.0 (Current)
- Node v10.20.1 (LTS)
- Node v12.16.2 (LTS)
- Node v10.20.0 (LTS)
- Changes to Release Schedule
- Node v13.12.0 (Current)
- Node v13.11.0 (Current)
- Node v13.10.1 (Current)
- Node v13.10.0 (Current)
- Node v13.9.0 (Current)
- Node v12.16.1 (LTS)
- Node v12.16.0 (LTS)
- February 2020 Security Releases
- Node v13.8.0 (Current)
- Node v12.15.0 (LTS)
- Node v10.19.0 (LTS)
- Node v13.7.0 (Current)
- Node v10.18.1 (LTS)
- Node v13.6.0 (Current)
- Node v12.14.1 (LTS)