From d645152b994741d6521c25d9c8bfd85da8c0eb52 Mon Sep 17 00:00:00 2001 From: Marco Ippolito Date: Tue, 13 Jan 2026 15:54:02 +0100 Subject: [PATCH 1/4] doc: fix v20 changelog after security release --- doc/changelogs/CHANGELOG_V20.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/doc/changelogs/CHANGELOG_V20.md b/doc/changelogs/CHANGELOG_V20.md index c25c70b830c072..366d1c4e3c8c1f 100644 --- a/doc/changelogs/CHANGELOG_V20.md +++ b/doc/changelogs/CHANGELOG_V20.md @@ -89,17 +89,11 @@ This is a security release. ### Notable Changes -lib: - * (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) * (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) - lib,permission: * (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) - src: * (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) - src,lib: * (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) - tls: * (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) ### Commits From 45221d8ee4edfc016cee8154dae3b088ffe19a0d Mon Sep 17 00:00:00 2001 From: Marco Ippolito Date: Tue, 13 Jan 2026 15:54:21 +0100 Subject: [PATCH 2/4] doc: fix v22 changelog after security release --- doc/changelogs/CHANGELOG_V22.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/doc/changelogs/CHANGELOG_V22.md b/doc/changelogs/CHANGELOG_V22.md index 042ed5e8daffa5..17311bbd1df77a 100644 --- a/doc/changelogs/CHANGELOG_V22.md +++ b/doc/changelogs/CHANGELOG_V22.md @@ -79,17 +79,11 @@ This is a security release. ### Notable Changes -lib: - * (CVE-2025-59465) add TLSSocket default error handler * (CVE-2025-55132) disable futimes when permission model is enabled - lib,permission: * (CVE-2025-55130) require full read and write to symlink APIs - src: * (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks - src,lib: * (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle - tls: * (CVE-2026-21637) route callback exceptions through error handlers ### Commits From 9d646a85ddadf4139bfa99ae2e9e1356847dfb17 Mon Sep 17 00:00:00 2001 From: Marco Ippolito Date: Tue, 13 Jan 2026 15:54:43 +0100 Subject: [PATCH 3/4] doc: fix v24 changelog after security release --- doc/changelogs/CHANGELOG_V24.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/doc/changelogs/CHANGELOG_V24.md b/doc/changelogs/CHANGELOG_V24.md index bd0dd62352d0b3..d72707281ee547 100644 --- a/doc/changelogs/CHANGELOG_V24.md +++ b/doc/changelogs/CHANGELOG_V24.md @@ -68,17 +68,11 @@ This is a security release. ### Notable Changes -lib: - * (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) * (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) - lib,permission: * (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) - src: * (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) - src,lib: * (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) - tls: * (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) ### Commits From 2a81e607895ac1e68befcd4a82ea0db942ef5c90 Mon Sep 17 00:00:00 2001 From: Marco Ippolito Date: Tue, 13 Jan 2026 15:55:04 +0100 Subject: [PATCH 4/4] doc: fix v25 changelog after security release --- doc/changelogs/CHANGELOG_V25.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/doc/changelogs/CHANGELOG_V25.md b/doc/changelogs/CHANGELOG_V25.md index 53c4393f434dd8..44e0d369601ed5 100644 --- a/doc/changelogs/CHANGELOG_V25.md +++ b/doc/changelogs/CHANGELOG_V25.md @@ -52,18 +52,12 @@ This is a security release. ### Notable Changes -lib: - * (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) - permission: * (CVE-2026-21636) add network check on pipe\_wrap connect (RafaelGSS) * (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) * (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) - src: * (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) - src,lib: * (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) - tls: * (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) ### Commits