Path to this page:
Subject: CVS commit: pkgsrc/lang/nodejs16
From: Adam Ciarcinski
Date: 2022-09-27 09:57:29
Message id: 20220927075729.CDAAFFA90@cvs.NetBSD.org
Log Message:
nodejs16: updated to 16.17.1
Version 16.17.1 'Gallium' (LTS)
This is a security release.
Notable changes
The following CVEs are fixed in this release:
CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
CVE-2022-32213: bypass via obs-fold mechanic (Medium)
CVE-2022-35255: Weak randomness in WebCrypto keygen
CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)
Files: