Questa è una versione precedente. La versione attuale è la 18.20.8. Node.js 18 18.20.8 · Data di rilascio:
File di installazione 18.12.1
| Architettura | Tipo | Ambito | Dimensione | Scarica | SHA256 |
|---|---|---|---|---|---|
| 64 bit | MSI | Tutti gli utenti | — | nodejs.org | VirusTotal |
| 64 bit | ZIP → Portable | — | — | nodejs.org | VirusTotal |
| 32 bit | MSI | Tutti gli utenti | — | nodejs.org | VirusTotal |
| 32 bit | ZIP → Portable | — | — | nodejs.org | VirusTotal |
Link e hash SHA256 provengono dal manifest della community di Gestione pacchetti Windows. Prima di eseguire il file scaricato conviene confrontarne l’hash.
Note di rilascio
This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)
- CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [39f8a672e3] - deps: update archs files for quictls/openssl-3.0.7+quic nodejs/node#45286
- [80218127c8] - deps: upgrade openssl sources to quictls/openssl-3.0.7+quic nodejs/node#45286
- [165342beac] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
