Node.js 19: alte Versionen herunterladen

Notable Changes
This release contains a single revert of a change that was introduced in v19.8.0
and introduced application crashes.
Fixes: https://github.com/nodejs/node/issues/47096
Commits
- [f7c8aa4cf1] - Revert "vm: fix leak in vm.compileFunction when importModuleDynamically is used" (Michaël Zasso) #47101

This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-23919: OpenSSL errors not cleared in error stack (Medium)
- CVE-2023-23918: Experimental Policies bypass via process.mainModule.require(High)
- CVE-2023-23920: Insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory and undici security update.
Commits
- [97d9d55d2f] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374
- [8ac90e6372] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#368
- [10a4c47e3a] - deps: update undici to 5.19.1 (Node.js GitHub Bot) #46634
- [b10fc75e4a] - deps: update undici to 5.18.0 (Node.js GitHub Bot) #46502
- [e9b64ea8b9] - deps: update undici to 5.17.1 (Node.js GitHub Bot) #46502
- [66a24cec47] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46573
- [d8559aa6f5] - deps: update archs files for quictls/openssl-3.0.8+quic (RafaelGSS) #46573
- [dc477f547d] - deps: upgrade openssl sources to quictls/openssl-3.0.8+quic (RafaelGSS) #46573
- [2aae197670] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358
- [6d17b693ec] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358

Notable changes
ESM: Leverage loaders when resolving subsequent loaders
Loaders now apply to subsequent loaders, for example: --experimental-loader ts-node --experimental-loader loader-written-in-typescript.
Upgrade npm to 9.4.0
Added --install-strategy=linked option for installations similar to pnpm.
Other notable changes
- [a7c9daa497] - (SEMVER-MINOR) fs: add statfs() functions (Colin Ihrig) #46358
- [34d70ce615] - (SEMVER-MINOR) vm: expose cachedDataRejected for vm.compileFunction (Anna Henningsen) #46320
- [b4ac794923] - (SEMVER-MINOR) v8: support gc profile (theanarkh) #46255
- [d52f60009a] - (SEMVER-MINOR) src,lib: add constrainedMemory API for process (theanarkh) #46218
- [5ad6c2088e] - (SEMVER-MINOR) buffer: add isAscii method (Yagiz Nizipli) #46046
- [fbdc3f7316] - (SEMVER-MINOR) test_runner: add reporters (Moshe Atlow) #45712
Commits
- [524eec70e2] - benchmark: add trailing commas (Antoine du Hamel) #46370
- [f318a85408] - benchmark: remove buffer benchmarks redundancy (Brian White) #45735
- [6186b3ea14] - benchmark: introduce benchmark combination filtering (Brian White) #45735
- [5ad6c2088e] - (SEMVER-MINOR) buffer: add isAscii method (Yagiz Nizipli) #46046
- [8c6c4338a6] - build: export more OpenSSL symbols on Windows (Mohamed Akram) #45486
- [d795d93901] - build: fix MSVC 2022 Release compilation (Vladimir Morozov (REDMOND)) #46228
- [8e363cf8e8] - crypto: include hmac.h in crypto_util.h (Adam Langley) #46279
- [c1f3e13c65] - deps: update acorn to 8.8.2 (Node.js GitHub Bot) #46363
- [813b160bd7] - deps: upgrade npm to 9.4.0 (npm team) #46353
- [9c2f3cea70] - deps: update undici to 5.15.0 (Node.js GitHub Bot) #46213
- [312e10c1e3] - deps: update to uvwasi 0.0.15 (Colin Ihrig) #46253
- [c7024eec16] - doc: correct the sed command for macOS in release process docs (Juan José) #46397
- [996bac044b] - doc: include webstreams in finished() and Duplex.from() parameters (Debadree Chatterjee) #46312
- [891d18d55c] - doc: pass string to textEncoder.encode as input (Deokjin Kim) #46421
- [968db213f8] - doc: add tip for session.post function (theanarkh) #46354
- [a64d7f4e31] - doc: add documentation for socket.destroySoon() (Luigi Pinca) #46337
- [975788899f] - doc: fix commit message using test instead of deps (Tony Gorez) #46313
- [1d44017f52] - doc: add v8 fast api contribution guidelines (Yagiz Nizipli) #46199
- [e2698c05fb] - doc: fix small typo error (0xflotus) #46186
- [f39fb8c001] - doc: mark some parameters as optional in webstreams (Deokjin Kim) #46269
- [7a9af38128] - doc: update output of example in events.getEventListeners (Deokjin Kim) #46268
- [729642f30b] - esm: delete preload mock test (Geoffrey Booth) #46402
- [7aac21e90a] - esm: leverage loaders when resolving subsequent loaders (Maël Nison) #43772
- [a7c9daa497] - (SEMVER-MINOR) fs: add statfs() functions (Colin Ihrig) #46358
- [1ec6270efa] - http: res.setHeaders first implementation (Marco Ippolito) #46109
- [d4370259e9] - inspector: allow opening inspector when NODE_V8_COVERAGE is set (Moshe Atlow) #46113
- [b966ef9a42] - lib: remove unnecessary ObjectGetValueSafe (Chengzhong Wu) #46335
- [2b06d66289] - lib: cache parsed source maps to reduce memory footprint (Chengzhong Wu) #46225
- [c38673df91] - meta: update AUTHORS (Node.js GitHub Bot) #46399
- [c10e602547] - meta: update AUTHORS (Node.js GitHub Bot) #46303
- [9dc026b14a] - meta: add .mailmap entry (Rich Trott) #46303
- [7c514574f7] - meta: move evanlucas to emeritus (Evan Lucas) #46274
- [3a3a6d87f1] - module: move test reporter loading (Geoffrey Booth) #45923
- [4ae2492a33] - readline: fix detection of carriage return (Antoine du Hamel) #46306
- [43cad78b7a] - src: stop tracing agent before shutting down libuv (Santiago Gimeno) #46380
- [360a3f3094] - src: get rid of fp arithmetic in ParseIPv4Host (Tobias Nießen) #46326
- [e7b507a8cf] - src: use UNREACHABLE instead of CHECK(falsy) (Tobias Nießen) #46317
- [4c59b60ee8] - src: add support for ETW stack walking (José Dapena Paz) #46203
- [640d111f95]

Notable Changes
- http:
- (SEMVER-MINOR) join authorization headers (Marco Ippolito) #45982
- lib::
- add webstreams to Duplex.from() (Debadree Chatterjee) #46190
- stream:
- implement finished() for ReadableStream and WritableStream (Debadree Chatterjee) #46205
Commits
- [def36946da] - assert: remove assert.snapshot (Moshe Atlow) #46112
- [e1c56ec3fd] - benchmark,tools: use os.availableParallelism() (Deokjin Kim) #46003
- [370f621d4d] - build: add extra semi check (Jiawen Geng) #46194
- [476c6f892d] - crypto: avoid hang when no algorithm available (Richard Lau) #46237
- [8b22310940] - (SEMVER-MINOR) crypto: add CryptoKey Symbol.toStringTag (Filip Skokan) #46042
- [78be87b9f9] - crypto: add cipher update/final methods encoding validation (vitpavlenko) #45990
- [dc0cdaa101] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #46185
- [1146f02dc5] - crypto: return correct bit length in KeyObject's asymmetricKeyDetails (Filip Skokan) #46106
- [961710bb72] - (SEMVER-MINOR) crypto: add KeyObject Symbol.toStringTag (Filip Skokan) #46043
- [9cfdac6c82] - deps: V8: cherry-pick e39af94dd18e (Lu Yahan) #46142
- [26cde8efb7] - deps: update simdutf to 3.1.0 (Node.js GitHub Bot) #46257
- [3f9fb37130] - deps: cherrypick simdutf patch (Jiawen Geng) #46194
- [4ff2822836] - deps: bump googletest to 2023.01.13 (Jiawen Geng) #46198
- [49556247d2] - deps: add /deps/**/.github/ to .gitignore (Luigi Pinca) #46091
- [0c4df83e0d] - deps: add simdutf version to metadata (Mike Roth) #46145
- [69aafc3ddd] - deps: update simdutf to 2.1.0 (Node.js GitHub Bot) #46128
- [a266daccb5] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #46037
- [6cd70573eb] - deps: upgrade npm to 9.3.1 (npm team) #46242
- [679aae2da8] - deps: upgrade npm to 9.3.0 (npm team) #46193
- [38dd5061f2] - dgram: sync the old handle state to new handle (theanarkh) #46041
- [e36af49b35] - doc: fix mismatched arguments of NodeEventTarget (Deokjin Kim) #45678
- [58b836f7c4] - doc: update events API example to have runnable code (Deokjin Kim) #45760
- [5c350298b4] - doc: add note to tls docs about secureContext availability (Tim Gerk) #46224
- [90924ce198] - doc: add text around collaborative expectations (Michael Dawson) #46121
- [2d328355d4] - doc: update to match changed --dns-result-order default (Mordy Tikotzky) #46148
- [1015a606b7] - doc: add Node-API media link (Kevin Eady) #46189
- [6e355efcff] - doc: update http.setMaxIdleHTTPParsers arguments (Debadree Chatterjee) #46168
- [f18ab9405a] - doc: use "file system" instead of "filesystem" (Rich Trott) #46178
- [1b45713b00] - doc: https update default request timeout (Marco Ippolito) #46184
- [4c88721e2f] - doc: make options of readableStream.pipeTo as optional (Deokjin Kim) #46180
- [538c53f010] - doc: add PerformanceObserver.supportedEntryTypes to doc (theanarkh) #45962
- [eef7489d24] - doc: duplex and readable from uncaught execption warning (Marco Ippolito) #46135
- [686fe585b5] - doc: remove outdated sections from maintaining-v8 (Antoine du Hamel) #46137
- [2e826ad528] - doc: fix (EC)DHE remark in TLS docs (Tobias Nießen) #46114
- [2e22b29add] - doc: fix ERR_TLS_RENEGOTIATION_DISABLED text (Tobias Nießen) #46122
- [e222a2f1d1] - doc: fix spelling in SECURITY.md (Vaishno Chaitanya) #46124
- [7718e82f0d] - doc: abort controller emits error in child process (Debadree Chatterjee) #46072
- [76408bc1ed] - doc: fix event.cancelBubble documentation (Deokjin Kim) #45986
- [82023f2570] - doc: update output of example in inspector (Deokjin Kim) #46073
- [a42fc512b6] - doc: add personal pronouns option (Filip Skokan) #46118
- [fafae5955d] - doc: mention how to run ncu-ci citgm (Rafael Gonzaga) #46090
- [e1fd2f24d9] - doc: include updating release optional step (Rafael Gonzaga) #46089
- [1996e610fd] - doc: describe argument of Symbol.for (Deokjin Kim) #46019
- [b002330216] - doc,crypto: fix WebCryptoAPI import keyData and export return (Filip Skokan) #46076
- [fa3e0c86c7] - esm: mark importAssertions as required (Antoine d

This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)
- CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [e58e8d70a8] - deps: update archs files for quictls/openssl-3.0.7+quic (RafaelGSS) #45286
- [85f4548d57] - deps: upgrade openssl sources to quictls/openssl-3.0.7+quic (RafaelGSS) #45286
- [43403f56f7] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354