./lang/nodejs18, V8 JavaScript for clients and servers

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 18.20.6, Package name: nodejs-18.20.6, Maintainer: pkgsrc-users

Node.js is an evented I/O framework for the V8 JavaScript engine. It is
intended for writing scalable network programs such as web servers.

This package holds the 18.x LTS release.



Package options: openssl

Master sites:

Filesize: 39489.211 KB

Version history: (Expand)

CVS history: (Expand)


   2025-01-22 11:59:34 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nodejs18: updated to 18.20.6

Version 18.20.6 'Hydrogen' (LTS)

Notable Changes

CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
   2024-11-23 12:03:33 by Adam Ciarcinski | Files touched by this commit (5) | Package updated
Log message:
nodejs18: updated to 18.20.5

Version 18.20.5 'Hydrogen' (LTS)

Notable Changes

- esm: mark import attributes and JSON module as stable
   2024-11-15 11:58:31 by Adam Ciarcinski | Files touched by this commit (7) 
Log message:
nodejsNN: fix building with ICU 76
   2024-11-14 23:22:33 by Thomas Klausner | Files touched by this commit (2429) 
Log message:
*: recursive bump for icu 76 shlib major version bump
   2024-11-01 13:55:19 by Thomas Klausner | Files touched by this commit (2426) 
Log message:
*: revbump for icu downgrade
   2024-11-01 01:54:33 by Thomas Klausner | Files touched by this commit (2427) 
Log message:
*: recursive bump for icu 76.1 shlib bump
   2024-08-13 10:55:18 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nodejs18: updated to 18.20.4

Version 18.20.4 'Hydrogen' (LTS)

This is a security release.
Notable Changes
CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
   2024-05-31 07:42:29 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
nodejs18: updated to 18.20.3

Version 18.20.3 'Hydrogen' (LTS)

Notable Changes
This release fixes a regression introduced in Node.js 18.19.0 where \ 
http.server.close() was incorrectly closing idle connections.
A fix has also been included for compiling Node.js from source with newer \ 
versions of Clang.
The list of keys used to sign releases has been synchronized with the current \ 
list from the main branch.