Friday, 4 November, 2022 UTC
Summary
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [
2b433af094] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
Windows 32-bit Installer: https://nodejs.org/dist/v14.21.1/node-v14.21.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v14.21.1/node-v14.21.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v14.21.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v14.21.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v14.21.1/node-v14.21.1.pkg
macOS Intel 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v14.21.1/node-v14.21.1.tar.gz
Other release files: https://nodejs.org/dist/v14.21.1/
Documentation: https://nodejs.org/docs/v14.21.1/api/
Windows 64-bit Installer: https://nodejs.org/dist/v14.21.1/node-v14.21.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v14.21.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v14.21.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v14.21.1/node-v14.21.1.pkg
macOS Intel 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v14.21.1/node-v14.21.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v14.21.1/node-v14.21.1.tar.gz
Other release files: https://nodejs.org/dist/v14.21.1/
Documentation: https://nodejs.org/docs/v14.21.1/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
d2c027a4eec38ab0d8a30256832270690c57794173d3f7dc8dd2016b3218e59d node-v14.21.1-aix-ppc64.tar.gz
8eec964057d0d413f55deb42e00fca0d555de530e42d9d5cbb4ff62914dc79a8 node-v14.21.1-darwin-x64.tar.gz
0d4123965984cc3ab4cc9307621e1ae0c7351d3d314cf08d50c1e9b3e4cdea06 node-v14.21.1-darwin-x64.tar.xz
337eb33a5334e3eecf115f46c7bdb3790fb021084aaf1424da8d13af65f2090d node-v14.21.1-headers.tar.gz
f2bd7292d9518e3c0c5c0affa8b006b103b809fe79b038a1d051654eff1b26e7 node-v14.21.1-headers.tar.xz
f3e6fb4a833c084863e7dfa3a50ac29f53b421ad070748ff9c9a81291284faf8 node-v14.21.1-linux-arm64.tar.gz
4b6021af9c006816612bc6cd98d308c9c65e80ac317c998bc1181739591871cd node-v14.21.1-linux-arm64.tar.xz
ff8f5c79a6155e9cb72f63ec11a578ea5399889cf224e155810e24cae34b47f7 node-v14.21.1-linux-armv7l.tar.gz
1b2ab01c2c9a0d4a8f6cabac857e30ce27fd5437bf249f15b437e8558a8ee2ad node-v14.21.1-linux-armv7l.tar.xz
0424ff7e8068fcd4f8b4ac4349c930f49f51eb39aa4361f6a920670e6de69d36 node-v14.21.1-linux-ppc64le.tar.gz
1d407220e4a1fc4c62d5804ad2d07db091a7fb6637b0e7f37e5424c49789388d node-v14.21.1-linux-ppc64le.tar.xz
c8f2bff87e7983967c189f3b7d0190c5ae832669b72c614036cee0b2bddd270d node-v14.21.1-linux-s390x.tar.gz
37d685b8b1e5054ddf58e739e19503d5fbd4ab4fe49a3d61b05fb042b5cda652 node-v14.21.1-linux-s390x.tar.xz
8ae854dac7fa5e7dfd5dae8fe8e001c0599821705f650b32c4819149cfda1d0e node-v14.21.1-linux-x64.tar.gz
bee17ec1387048537db6404be7af96655f358012a46d152323ee510f892fbb53 node-v14.21.1-linux-x64.tar.xz
a505d563e5781a589d613c627313772710916e8156a3c2ff78a4bf7537d0b8bf node-v14.21.1.pkg
76ba961536dc11e4dfd9b198c61ff3399e655eca959ae4b66d926f29bfcce9d3 node-v14.21.1.tar.gz
3db95d6ca728957bf090b6301a7a9d2d80714b2a06d898a1db65c6e42b1da7ac node-v14.21.1.tar.xz
c54cbc09d2ece18b3117c8d32f4cb0e9fac394749ae04925b279512238381c2f node-v14.21.1-win-x64.7z
d9c868ad27ad0fee1d62d70cab56e779efe68a706393177fd282012773d79a7c node-v14.21.1-win-x64.zip
3f809e0a0f437b4f7c8b429ba76a89223620d0696d5177af6af4e47325b22fa4 node-v14.21.1-win-x86.7z
61f082a461f7eb536403d843f74103bb85895d4a6cda472dbff51207243dc0f1 node-v14.21.1-win-x86.zip
f8c310be8ce7b38119415f5112524fcdd84b85ff631a5ed82d20f13e0bff6102 node-v14.21.1-x64.msi
6b89d0f95ba6cb521edeb3bc91180d9827361fc137fd2c4020f8e3736ecd5c28 node-v14.21.1-x86.msi
9ffcf286de4206eb9c4bfb16b9cfaf605735aab08a644db09a087f87e27be58a win-x64/node.exe
dea0607a3fca01c7bce5dbe6e275f149bbe1076811d156c6e34e1910028365e7 win-x64/node.lib
b20f8433f70189fa002d59bf96ef4288ca28241bfa289cd325bc1b3c07727f9e win-x64/node_pdb.7z
fa72a9b6065ab1023a9bbbc741a96cc23ae96f70e49a9c1b6050dc26f9373587 win-x64/node_pdb.zip
e885078e06ece19d343961f334271161dd21e8adeb2de021efb57c6051dccfd0 win-x86/node.exe
b7ede8c768bc23de8d155724fcfdc828e7b90a2c5831ae95f0d619ea335b3eb0 win-x86/node.lib
7666c3867742e262ef98385ef3a868503f5681f3c0405c62efce34b2999bb88d win-x86/node_pdb.7z
43d36119bb8e0e02c3c509aeb4d8441f8cc64f2520f0ecf52d439aa9bfc66a0d win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAmNlUPgACgkQ1wYoSKGr
AFwzcggAqo7/KGnwQm7LluiKYKaFdcolYrCrLOIGe+xgxZZdOkw41Mya0nlvipVM
aWyBJx3YY/K8rbg6XoMYCzreA8QqxBL60ZXQUW5d+27rqGXm6sCN38g6QAowkOHR
qux9d0+oH9W72Uk3jP3GkAZ+Z7TMt4qDuCswVXGuOJkrfnqn9ZsuuEvQc3XvwVhe
+HAu5hitta/SFyQ1aCUPKUT69VfRLJ4d01qsiaSS7dYNHUxY6XgrAerZHH/3biGy
1Hq2eKXrDunhX3ZBc82yNDHVRtS68ZL17WI2RpNy1keqHSaIjQb7ilIIKNqrLgfY
lWQGdP7ftpWobI95UmFU5S3cJ7Z6Ig==
=JeuO
-----END PGP SIGNATURE-----