Skip to content

[24.10] node: bump to 20.20.2#29068

Merged
BKPepe merged 1 commit intoopenwrt:openwrt-24.10from
nxhack:2410_node_20202
Apr 5, 2026
Merged

[24.10] node: bump to 20.20.2#29068
BKPepe merged 1 commit intoopenwrt:openwrt-24.10from
nxhack:2410_node_20202

Conversation

@nxhack
Copy link
Copy Markdown
Contributor

@nxhack nxhack commented Apr 4, 2026

📦 Package Details

Maintainer: me @ianchi

Description:
Update to 20.20.2

This is a security release.
Notable Changes

  • (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)

🧪 Run Testing Details

  • OpenWrt Version: 24.10
  • OpenWrt Target/Subtarget: aarch64, arm
  • OpenWrt Device:

✅ Formalities

  • [ x ] I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

This is a security release.
Notable Changes
* (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
* (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
* (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
* (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
* (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
* (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
* (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
@github-actions github-actions bot added the OpenWrt 24.10 Issue/PR on branch 24.10 label Apr 5, 2026
@BKPepe BKPepe merged commit 4f80e67 into openwrt:openwrt-24.10 Apr 5, 2026
10 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OpenWrt 24.10 Issue/PR on branch 24.10

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants