Update node Docker tag to v18.19.1
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
node | patch |
18.19.0-slim -> 18.19.1-slim
|
|
node | ironbank-docker | patch |
18.19.0-alpine3.18 -> 18.19.1-alpine3.18
|
node | stage | patch |
18.19.0-alpine3.18 -> 18.19.1-alpine3.18
|
⚠ WarningSome dependencies could not be looked up. Check the warning logs for more information.
Release Notes
nodejs/node (node)
v18.19.1
: 2024-02-14, Version 18.19.1 'Hydrogen' (LTS), @RafaelGSS prepared by @marco-ippolito
Notable changes
This is a security release.
Notable changes
- CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
- CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
- CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
- CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
- undici version 5.28.3
- npm version 10.2.4
Commits
- [
69e0a1dba8
] - crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot) #50805 - [
d3d357ab09
] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525 - [
3d27175c42
] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #51614 - [
331558b8ab
] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614 - [
99b77dfb9c
] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614 - [
6cdc71bff1
] - deps: upgrade npm to 10.2.4 (npm team) #50751 - [
911cb33cda
] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#520 - [
f48b89689d
] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#536 - [
e6b4c105e0
] - src: fix HasOnly(capability) in node::credentials (Tobias Nießen) nodejs-private/node-private#505 - [
97c49076cd
] - test: skip test-child-process-stdio-reuse-readable-stdio on Windows (Joyee Cheung) #49621 - [
60affdde8e
] - tools: add macOS notarization verification step (Ulises Gascón) #50833 - [
ccc676a327
] - tools: use macOS keychain to notarize the releases (Ulises Gascón) #50715 - [
31f1ceb380
] - tools: remove unused file (Ulises Gascon) #50622 - [
bd5f6fb92a
] - tools: add macOS notarization stapler (Ulises Gascón) #50625 - [
4168c4f71b
] - tools: improve macOS notarization process output readability (Ulises Gascón) #50389 - [
4622f775aa
] - tools: remove unusedversion
function (Ulises Gascón) #50390 - [
b90804b1e7
] - win,tools: upgrade Windows signing to smctl (Stefan Stojanovic) #50956 - [
f31d47e135
] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#542
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.