یہ پرانا ورژن ہے۔ موجودہ ورژن 18.20.8 ہے۔ Node.js 18 18.20.8 · تاریخِ اجرا:
انسٹالر فائلیں 18.19.1
| آرکیٹیکچر | قسم | دائرہ | فائل کا سائز | ڈاؤن لوڈ | SHA256 |
|---|---|---|---|---|---|
| 64 بٹ | MSI | تمام صارفین | — | nodejs.org | VirusTotal |
| 64 بٹ | ZIP → پورٹیبل | — | — | nodejs.org | VirusTotal |
| 32 بٹ | MSI | تمام صارفین | — | nodejs.org | VirusTotal |
| 32 بٹ | ZIP → پورٹیبل | — | — | nodejs.org | VirusTotal |
لنک اور SHA256 Windows Package Manager کے کمیونٹی مینی فیسٹ سے لیے گئے ہیں۔ ڈاؤن لوڈ شدہ فائل چلانے سے پہلے اس کا ہیش ملا لیں۔
ریلیز نوٹس
Notable changes
This is a security release.
Notable changes
- CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
- CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
- CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
- CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
- undici version 5.28.3
- npm version 10.2.4
Commits
- [69e0a1dba8] - crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot) #50805
- [d3d357ab09] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525
- [3d27175c42] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #51614
- [331558b8ab] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614
- [99b77dfb9c] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614
- [6cdc71bff1] - deps: upgrade npm to 10.2.4 (npm team) #50751
- [911cb33cda] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#520
- [f48b89689d] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#536
- [e6b4c105e0] - src: fix HasOnly(capability) in node::credentials (Tobias Nießen) nodejs-private/node-private#505
- [97c49076cd] - test: skip test-child-process-stdio-reuse-readable-stdio on Windows (Joyee Cheung) #49621
- [60affdde8e] - tools: add macOS notarization verification step (Ulises Gascón) #50833
- [ccc676a327] - tools: use macOS keychain to notarize the releases (Ulises Gascón) #50715
- [31f1ceb380] - tools: remove unused file (Ulises Gascon) #50622
- [bd5f6fb92a] - tools: add macOS notarization stapler (Ulises Gascón) #50625
- [4168c4f71b] - tools: improve macOS notarization process output readability (Ulises Gascón) #50389
- [4622f775aa] - tools: remove unused version function (Ulises Gascón) #50390
- [b90804b1e7] - win,tools: upgrade Windows signing to smctl (Stefan Stojanovic) #50956
- [f31d47e135] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#542
