Skip to content

Commit 210e1ba

Browse files
authored
Add CVE-2021-29418 to CHANGELOG.md
1 parent fb14b4f commit 210e1ba

1 file changed

Lines changed: 9 additions & 2 deletions

File tree

CHANGELOG.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,20 @@
11
## v2.0.1 (Mar 29, 2021)
22

3+
### IMPORTANT: Security Fix
4+
5+
> This version contains an important security fix. If you are using netmask `<=2.0.0`, please upgrade to `2.0.1` or above.
6+
7+
* Rewrite byte parsing without using JS `parseInt()`([commit](https://github.com/rs/node-netmask/commit/3f19a056c4eb808ea4a29f234274c67bc5a848f4))
8+
* This is [CVE-2021-29418](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29418).
9+
* See also the [npm advisory](https://www.npmjs.com/advisories/1658)
10+
311
### Bugfixes
412

513
* Add checks on spaces before and after bytes
614
* This will now throw an exception when spaces are present like ' 1.2.3.4' or '1. 2.3.4' or '1.2.3.4 '.
715

816
### Internal Changes
917

10-
* Rewrite byte parsing without using JS `parseInt()`
1118
* Avoid some useless memory allocations
1219
* New Mocha testing suite, thanks @kaoudis [#36](https://github.com/rs/node-netmask/pull/36)
1320

@@ -51,4 +58,4 @@ See [the change](https://github.com/rs/node-netmask/commit/9f9fc38c6db1a682d2328
5158
## v1.0.6 (May 30, 2016)
5259

5360
* Changes before this release are not documented here. Please see [the commit list](https://github.com/rs/node-netmask/commits/master)
54-
or the [compare view](https://github.com/rs/node-netmask/compare/1.0.5...rs:1.0.6).
61+
or the [compare view](https://github.com/rs/node-netmask/compare/1.0.5...rs:1.0.6).

0 commit comments

Comments
 (0)