node-linux-arm64 18.18.1 → 18.18.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +31 -0
- package/bin/node +0 -0
- package/include/node/node_version.h +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -9,6 +9,7 @@
|
|
|
9
9
|
</tr>
|
|
10
10
|
<tr>
|
|
11
11
|
<td>
|
|
12
|
+
<a href="#18.18.2">18.18.2</a><br/>
|
|
12
13
|
<a href="#18.18.1">18.18.1</a><br/>
|
|
13
14
|
<a href="#18.18.0">18.18.0</a><br/>
|
|
14
15
|
<a href="#18.17.1">18.17.1</a><br/>
|
|
@@ -61,6 +62,36 @@
|
|
|
61
62
|
* [io.js](CHANGELOG_IOJS.md)
|
|
62
63
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
63
64
|
|
|
65
|
+
<a id="18.18.2"></a>
|
|
66
|
+
|
|
67
|
+
## 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSS
|
|
68
|
+
|
|
69
|
+
This is a security release.
|
|
70
|
+
|
|
71
|
+
### Notable Changes
|
|
72
|
+
|
|
73
|
+
The following CVEs are fixed in this release:
|
|
74
|
+
|
|
75
|
+
* [CVE-2023-44487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487): `nghttp2` Security Release (High)
|
|
76
|
+
* [CVE-2023-45143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45143): `undici` Security Release (High)
|
|
77
|
+
* [CVE-2023-38552](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38552): Integrity checks according to policies can be circumvented (Medium)
|
|
78
|
+
* [CVE-2023-39333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39333): Code injection via WebAssembly export names (Low)
|
|
79
|
+
|
|
80
|
+
More detailed information on each of the vulnerabilities can be found in [October 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/october-2023-security-releases/) blog post.
|
|
81
|
+
|
|
82
|
+
### Commits
|
|
83
|
+
|
|
84
|
+
* \[[`55028468db`](https://github.com/nodejs/node/commit/55028468db)] - **deps**: update undici to v5.26.3 (Matteo Collina) [#50153](https://github.com/nodejs/node/pull/50153)
|
|
85
|
+
* \[[`a792bbc515`](https://github.com/nodejs/node/commit/a792bbc515)] - **deps**: update nghttp2 to 1.57.0 (James M Snell) [#50121](https://github.com/nodejs/node/pull/50121)
|
|
86
|
+
* \[[`f6444defa4`](https://github.com/nodejs/node/commit/f6444defa4)] - **deps**: update nghttp2 to 1.56.0 (Node.js GitHub Bot) [#49582](https://github.com/nodejs/node/pull/49582)
|
|
87
|
+
* \[[`7e9b08dfd4`](https://github.com/nodejs/node/commit/7e9b08dfd4)] - **deps**: update nghttp2 to 1.55.1 (Node.js GitHub Bot) [#48790](https://github.com/nodejs/node/pull/48790)
|
|
88
|
+
* \[[`85672c153f`](https://github.com/nodejs/node/commit/85672c153f)] - **deps**: update nghttp2 to 1.55.0 (Node.js GitHub Bot) [#48746](https://github.com/nodejs/node/pull/48746)
|
|
89
|
+
* \[[`300a902422`](https://github.com/nodejs/node/commit/300a902422)] - **deps**: update nghttp2 to 1.53.0 (Node.js GitHub Bot) [#47997](https://github.com/nodejs/node/pull/47997)
|
|
90
|
+
* \[[`7d83ed0bf6`](https://github.com/nodejs/node/commit/7d83ed0bf6)] - _**Revert**_ "**deps**: update nghttp2 to 1.55.0" (Richard Lau) [#50151](https://github.com/nodejs/node/pull/50151)
|
|
91
|
+
* \[[`1193ca5fdb`](https://github.com/nodejs/node/commit/1193ca5fdb)] - **lib**: let deps require `node` prefixed modules (Matthew Aitken) [#50047](https://github.com/nodejs/node/pull/50047)
|
|
92
|
+
* \[[`eaf9083cf1`](https://github.com/nodejs/node/commit/eaf9083cf1)] - **module**: fix code injection through export names (Tobias Nießen) [nodejs-private/node-private#461](https://github.com/nodejs-private/node-private/pull/461)
|
|
93
|
+
* \[[`1c538938cc`](https://github.com/nodejs/node/commit/1c538938cc)] - **policy**: use tamper-proof integrity check function (Tobias Nießen) [nodejs-private/node-private#462](https://github.com/nodejs-private/node-private/pull/462)
|
|
94
|
+
|
|
64
95
|
<a id="18.18.1"></a>
|
|
65
96
|
|
|
66
97
|
## 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlau
|
package/bin/node
CHANGED
|
Binary file
|