node-aix-ppc64 18.18.1 → 18.18.2

package/CHANGELOG.md

@@ -9,6 +9,7 @@
 </tr>
 <tr>
 <td>
+<a href="#18.18.2">18.18.2</a><br/>
 <a href="#18.18.1">18.18.1</a><br/>
 <a href="#18.18.0">18.18.0</a><br/>
 <a href="#18.17.1">18.17.1</a><br/>
@@ -61,6 +62,36 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="18.18.2"></a>
+
+## 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSS
+
+This is a security release.
+
+### Notable Changes
+
+The following CVEs are fixed in this release:
+
+* [CVE-2023-44487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487): `nghttp2` Security Release (High)
+* [CVE-2023-45143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45143): `undici` Security Release (High)
+* [CVE-2023-38552](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38552):  Integrity checks according to policies can be circumvented (Medium)
+* [CVE-2023-39333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39333): Code injection via WebAssembly export names (Low)
+
+More detailed information on each of the vulnerabilities can be found in [October 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/october-2023-security-releases/) blog post.
+
+### Commits
+
+* \[[`55028468db`](https://github.com/nodejs/node/commit/55028468db)] - **deps**: update undici to v5.26.3 (Matteo Collina) [#50153](https://github.com/nodejs/node/pull/50153)
+* \[[`a792bbc515`](https://github.com/nodejs/node/commit/a792bbc515)] - **deps**: update nghttp2 to 1.57.0 (James M Snell) [#50121](https://github.com/nodejs/node/pull/50121)
+* \[[`f6444defa4`](https://github.com/nodejs/node/commit/f6444defa4)] - **deps**: update nghttp2 to 1.56.0 (Node.js GitHub Bot) [#49582](https://github.com/nodejs/node/pull/49582)
+* \[[`7e9b08dfd4`](https://github.com/nodejs/node/commit/7e9b08dfd4)] - **deps**: update nghttp2 to 1.55.1 (Node.js GitHub Bot) [#48790](https://github.com/nodejs/node/pull/48790)
+* \[[`85672c153f`](https://github.com/nodejs/node/commit/85672c153f)] - **deps**: update nghttp2 to 1.55.0 (Node.js GitHub Bot) [#48746](https://github.com/nodejs/node/pull/48746)
+* \[[`300a902422`](https://github.com/nodejs/node/commit/300a902422)] - **deps**: update nghttp2 to 1.53.0 (Node.js GitHub Bot) [#47997](https://github.com/nodejs/node/pull/47997)
+* \[[`7d83ed0bf6`](https://github.com/nodejs/node/commit/7d83ed0bf6)] - _**Revert**_ "**deps**: update nghttp2 to 1.55.0" (Richard Lau) [#50151](https://github.com/nodejs/node/pull/50151)
+* \[[`1193ca5fdb`](https://github.com/nodejs/node/commit/1193ca5fdb)] - **lib**: let deps require `node` prefixed modules (Matthew Aitken) [#50047](https://github.com/nodejs/node/pull/50047)
+* \[[`eaf9083cf1`](https://github.com/nodejs/node/commit/eaf9083cf1)] - **module**: fix code injection through export names (Tobias Nießen) [nodejs-private/node-private#461](https://github.com/nodejs-private/node-private/pull/461)
+* \[[`1c538938cc`](https://github.com/nodejs/node/commit/1c538938cc)] - **policy**: use tamper-proof integrity check function (Tobias Nießen) [nodejs-private/node-private#462](https://github.com/nodejs-private/node-private/pull/462)
+
 <a id="18.18.1"></a>
 
 ## 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlau

package/include/node/node.exp

@@ -5959,17 +5959,17 @@ _GLOBAL__F__ZN2v88internal6torque4TypeC2ERKS2_
 _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeEEE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xbad9c8e9bad5990
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_FE345EE0_0xd5adf43b74ecb618
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0x738ea41cc947be0b
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_FE345EE0_0xde3252999c98fbd2
 _GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0xbe978448f927611f
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x1703a4331ca1b1b3
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x51b5fb8e5bda0960
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x8ecb5008e6ddbfc5
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x2fc6b23370b5c587
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x2473dabe824b17de
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x3186fd096294aec7
 _GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_3723FE55_0x984b3b6f175bbceb
 _GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_FE345EE0_0x8a0ee3a87f1ed026
 _GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0x60a7a390e679ca36
 _GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_3723FE55_0x94855163f84020e6
-_GLOBAL__I_65535_0_.._deps_v8_src_strings_string_case.cc_DFF67DD7_0xf45d9b5983d9f946
+_GLOBAL__I_65535_0_.._deps_v8_src_strings_string_case.cc_DFF67DD7_0x5c87d0aefb756201
 _GLOBAL__I_65535_0_.._src_connection_wrap.cc_FE345EE0_0x39641f3e3203af31
 _GLOBAL__I_65535_0_OPENSSL_ppccap_P
 _GLOBAL__I_65535_0__Z16_register_configv
@@ -7007,8 +7007,8 @@ _GLOBAL__I_65535_0__ZNK4node10BaseObject15GetTransferModeEv
 _GLOBAL__I_65535_0__ZNK4node3url11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _GLOBAL__I_65535_0__ZNK7simdutf14implementation27supported_by_runtime_systemEv
 _GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_FE345EE0_0xe49f1792e2879148
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0x41f6f9f4d974dc7c
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_FE345EE0_0x72a079c370643747
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0x5a11d13d1c54b2f2
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_FE345EE0_0xdfd50b03456cf2e8
 _GLOBAL__I_65535_0_nodedbg_const_ContextEmbedderIndex__kEnvironment__int
 _GLOBAL__I_65535_0_v8dbg_frametype_EntryFrame
 _HZData_73
@@ -48467,6 +48467,7 @@ _ZN4node6crypto22FindDiffieHellmanGroupEPKc
 _ZN4node6crypto22GetValidationErrorCodeEPNS_11EnvironmentEi
 _ZN4node6crypto23GetCurrentCipherVersionEPNS_11EnvironmentERKSt10unique_ptrI6ssl_stNS_15FunctionDeleterIS4_XadL_Z8SSL_freeEEEEE
 _ZN4node6crypto23GetSubjectAltNameStringEPNS_11EnvironmentEP7x509_stRKSt10unique_ptrI6bio_stNS_15FunctionDeleterIS6_XadL_Z12BIO_free_allEEEEE
+_ZN4node6crypto23InternalVerifyIntegrityERKN2v820FunctionCallbackInfoINS1_5ValueEEE
 _ZN4node6crypto23SafeX509InfoAccessPrintERKSt10unique_ptrI6bio_stNS_15FunctionDeleterIS2_XadL_Z12BIO_free_allEEEEEP17X509_extension_st
 _ZN4node6crypto24GetClientHelloServerNameERKSt10unique_ptrI6ssl_stNS_15FunctionDeleterIS2_XadL_Z8SSL_freeEEEEE
 _ZN4node6crypto24GetValidationErrorReasonEPNS_11EnvironmentEi
@@ -74134,6 +74135,7 @@ nghttp2_option_set_no_recv_client_magic
 nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation
 nghttp2_option_set_peer_max_concurrent_streams
 nghttp2_option_set_server_fallback_rfc7540_priorities
+nghttp2_option_set_stream_reset_rate_limit
 nghttp2_option_set_user_recv_extension_type
 nghttp2_outbound_item_free
 nghttp2_outbound_item_init
@@ -74164,6 +74166,9 @@ nghttp2_queue_front
 nghttp2_queue_init
 nghttp2_queue_pop
 nghttp2_queue_push
+nghttp2_ratelim_drain
+nghttp2_ratelim_init
+nghttp2_ratelim_update
 nghttp2_rcbuf_decref
 nghttp2_rcbuf_del
 nghttp2_rcbuf_get_buf
@@ -74289,8 +74294,6 @@ nghttp2_session_upgrade2
 nghttp2_session_want_read
 nghttp2_session_want_write
 nghttp2_set_debug_vprintf_callback
-nghttp2_sf_parse_inner_list
-nghttp2_sf_parse_item
 nghttp2_should_send_window_update
 nghttp2_stream_attach_item
 nghttp2_stream_change_weight
@@ -74342,6 +74345,7 @@ nghttp2_submit_settings
 nghttp2_submit_shutdown_notice
 nghttp2_submit_trailer
 nghttp2_submit_window_update
+nghttp2_time_now_sec
 nghttp2_version
 nghttp3_balloc_clear
 nghttp3_balloc_free
@@ -77162,6 +77166,14 @@ s2i_ASN1_INTEGER
 s2i_ASN1_OCTET_STRING
 s2i_ASN1_UTF8STRING
 send_certificate_request
+sf_base64decode
+sf_parser_dict
+sf_parser_init
+sf_parser_inner_list
+sf_parser_item
+sf_parser_list
+sf_parser_param
+sf_unescape
 sha256_block_data_order
 sha512_224_init
 sha512_256_init

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 18
 #define NODE_MINOR_VERSION 18
-#define NODE_PATCH_VERSION 1
+#define NODE_PATCH_VERSION 2
 
 #define NODE_VERSION_IS_LTS 1
 #define NODE_VERSION_LTS_CODENAME "Hydrogen"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-aix-ppc64",
-  "version": "v18.18.1",
+  "version": "v18.18.2",
   "description": "node",
   "bin": {
     "node": "bin/node"