Friday, 4 November, 2022 UTC


Summary

Notable changes

The following CVEs are fixed in this release:
  • CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.

Commits

  • [9ffddd7098] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
Windows 32-bit Installer: https://nodejs.org/dist/v16.18.1/node-v16.18.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v16.18.1/node-v16.18.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v16.18.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v16.18.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v16.18.1/node-v16.18.1.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v16.18.1/node-v16.18.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v16.18.1/node-v16.18.1.tar.gz
Other release files: https://nodejs.org/dist/v16.18.1/
Documentation: https://nodejs.org/docs/v16.18.1/api/

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

aeca357b0135f704ec8862727be5601d336024d217b33ae4aa37c87337329be7  node-v16.18.1-aix-ppc64.tar.gz
71720bb0a80cf158d8fdf492def08048befd953ad45e2458b1d095e32c612ba7  node-v16.18.1-darwin-arm64.tar.gz
967619293fab4c57835b24fd4b72b7b71f0cfefbcee62775b2227a2d252195dc  node-v16.18.1-darwin-arm64.tar.xz
c190e106d4ac6177d1db3a5a739d39dd68bd276ba17f3d3c84039a93717e081e  node-v16.18.1-darwin-x64.tar.gz
79ff9ca43ae882051b2d607696cb3e70bfdef8c7b24f8d3effa3d41ff16368ff  node-v16.18.1-darwin-x64.tar.xz
22c88643071a1bb47334f11751e63374e91ac752e83d88c235fcd8e7674b8c65  node-v16.18.1-headers.tar.gz
663e36ccca2cb749b30bc1973b6e34426d4f6b59b348ed1bb9265b9a340e9ab8  node-v16.18.1-headers.tar.xz
d6caa1439e8f3fbf4855b5cc1d09ae3eee31fc54ec29b7170603222ba6f8dfe6  node-v16.18.1-linux-arm64.tar.gz
98d81a2d08f88646541d282b7ccc32429f8706ddcb30943fc3779ef9674ebb93  node-v16.18.1-linux-arm64.tar.xz
97a008ee610ddafa685d6933e02e40adec5ca87961ba1a24943de1fc37723213  node-v16.18.1-linux-armv7l.tar.gz
9fd6d601f18664f6b07d940ab3676f4e0fc12d29ae704ed0d009d79132e8b28d  node-v16.18.1-linux-armv7l.tar.xz
36ddad400b977398eea14a563f39fbc34ce7ed89d6bfdaa733ea55479af1c6cd  node-v16.18.1-linux-ppc64le.tar.gz
25aa3bb52ee6ca29b93dec388c2b5d66265315ffae18be9a8fc2391f656bbe4f  node-v16.18.1-linux-ppc64le.tar.xz
6b24dfef3248e759f2cc034aa4b4e6a808bebd5b29365fc8d4a3186569fbd7af  node-v16.18.1-linux-s390x.tar.gz
509b676199003fed89b1aee384fec3ab8b2906b4540784c032179c1b49b9c3c9  node-v16.18.1-linux-s390x.tar.xz
8949919fc52543efae3bfd057261927c616978614926682ad642915f98fe1981  node-v16.18.1-linux-x64.tar.gz
de2c694e7081c37022817d27a65b02f69ecf4c49699d65585e8e24431b7bc920  node-v16.18.1-linux-x64.tar.xz
15c79730d330c3c6df3c200de82b87a3e0cb5cae0a2fbc80c83c2062f06156a7  node-v16.18.1.pkg
3d24c9c3a953afee43edc44569045eda56cd45cd58b0539922d17da62736189c  node-v16.18.1.tar.gz
1f8051a88f86f42064f4415fe7a980e59b0a502ecc8def583f6303bc4d445238  node-v16.18.1.tar.xz
71b2f8296f95a54c4be39ea3eee9bf063452bf300734cdc5def2cfc94039a3bc  node-v16.18.1-win-x64.7z
db6a81de8e8ca3444495f1bcf04a883c076b4325d0fbaa032a190f88b38b30c5  node-v16.18.1-win-x64.zip
477b520a06a4da850b5ffcfdd1dab440710a034c5f9501da8574bdb5bf85f0f6  node-v16.18.1-win-x86.7z
a7ad85959d9babc9a79c6fb643669bd3a7c9334409866cbf4648e7246da04581  node-v16.18.1-win-x86.zip
18fe8d4c79c0952384df7939e2d3c2d9f6b68442dca5ee2f35b885f44cef8fdc  node-v16.18.1-x64.msi
96652717157cfa0f34cef93fff74cd220d662a3834b1247a35b98f540646d6e6  node-v16.18.1-x86.msi
1beee2cf9442a62c8a7a00a06f7cf428d838e116383d2ada38db6e2e2da19b5d  win-x64/node.exe
d14ef62b2296ba6f9c58ee3372d7fa03ff779d7a9ad5b83c27e940893a80196f  win-x64/node.lib
5a8d714e3023e05e227dc647c01b1604fbee060897adf2e136c26c10ebaf8a44  win-x64/node_pdb.7z
9eee6350167b4b5db7d0aed12798397b1740d313ffc7cf95f37479f8c682b3ef  win-x64/node_pdb.zip
dbc243d950b62c3438c79afb75be212b97fb740ee995ef04dfd2e55a1f00b39d  win-x86/node.exe
061a1774a4ad6e6589989f2e88110c3a5d6e3495d58d45233073114138e81763  win-x86/node.lib
47782a53fbe0fbb9ae7ea07cc1bf8f18a720cf307d228388274ab528a1140e3f  win-x86/node_pdb.7z
eae756a40f496d1ab2c5aa71643dfe5cace7b3b383e9029117f0044f6c6521d6  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAmNlURcACgkQ1wYoSKGr
AFyRIAf/XuB0pkE8t0cG5ZpSDXcBkNBg7F5lLtI3n1l7bhQ7bTklDCS/uu/1oDGM
TvAsbRUqP5n/6E7IwnXaS6trXW622zmhVRGgbpPcLuXXI2m/fwff8YgWefR5sgJ4
leyXwsrGAE7j4Nn1WlOBHsWboA+qsQCRff+t3zVtwVsip9pZfYdCrtOJLhZQFHKQ
+ic+4vWCfTHgPVr5/uF1AljcWOzPMg6XzjP3vurT0ImsjS+aPduQQYfwDzKXFQ19
cfkqEGpGrpxIL+9EKoSdUFJAH+kuo8PkNFcHSomOEvg1mbC1C8EroljEYI0yHsrf
QREhRfqLUgFvbZYN/ogO+cqJwyz0oA==
=7Pyj
-----END PGP SIGNATURE-----