Hirokazu MORIKAWA f12547cf1f node: February 14 2024 Security Releases ...

Update to v18.19.1
This is a security release.

Notable changes
* CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
* CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
* CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
* CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
* undici version 5.28.3
* npm version 10.2.4

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

2024-02-17 13:27:56 +08:00

..

patches

node: bump to v18.19.0

2023-12-03 14:59:49 +08:00

Makefile

node: February 14 2024 Security Releases

2024-02-17 13:27:56 +08:00