Path to this page:
Subject: CVS commit: pkgsrc/lang/nodejs14
From: Adam Ciarcinski
Date: 2023-02-17 13:01:51
Message id: 20230217120151.594F8FA90@cvs.NetBSD.org
Log Message:
nodejs14: updated to 14.21.3
Version 14.21.3 'Fermium' (LTS)
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-23918: Node.js Permissions policies can be bypassed via \
process.mainModule (High)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU\_DATA \
environment variable (Low)
Files: