Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (2h)  pkgsrc-2024Q1 (2d)  pkgsrc-2023Q4 (76d)  pkgsrc-2023Q2 (109d) 

2024-06-16 14:45:11 UTC Now

2023-08-11 05:26:49 UTC MAIN commitmail json YAML

nodejs18: updated to 18.17.1

Version 18.17.1 'Hydrogen' (LTS)

Notable Changes

The following CVEs are fixed in this release:

* CVE-2023-32002: Policies can be bypassed via Module.\_load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases

(adam)