Notable changes
The following CVEs are fixed in this release:
- CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)
- CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [
e58e8d70a8
] - deps: update archs files for quictls/openssl-3.0.7+quic (RafaelGSS) #45286
- [
85f4548d57
] - deps: upgrade openssl sources to quictls/openssl-3.0.7+quic (RafaelGSS) #45286
- [
43403f56f7
] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
Windows 32-bit Installer: https://nodejs.org/dist/v19.0.1/node-v19.0.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v19.0.1/node-v19.0.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v19.0.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v19.0.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v19.0.1/node-v19.0.1.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v19.0.1/node-v19.0.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v19.0.1/node-v19.0.1.tar.gz
Other release files: https://nodejs.org/dist/v19.0.1/
Documentation: https://nodejs.org/docs/v19.0.1/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
479408f8ee19ae11aa49ad36b0f95ccea4e27000c84f743101c88b1f6b4e9493 node-v19.0.1-aix-ppc64.tar.gz
96bcdf51e92320a79ada8ef9f97ab6eda8426e84fb2aad4b290719d8d749f4de node-v19.0.1-darwin-arm64.tar.gz
87406e19bb4a6ab77ab80379a27b477e8b270dd9c21a5cbf9d271ba4fd13142f node-v19.0.1-darwin-arm64.tar.xz
55dffff4ef8e82c6e241d89fd124c7620dff83880c5e33c4ec2b19bd2d6399aa node-v19.0.1-darwin-x64.tar.gz
f9a9e6e2ed5e553faa84b8ae2447502ef4dbde22e6ed92f76c044fbcc7b08f45 node-v19.0.1-darwin-x64.tar.xz
51fafa4a6271d1c6747cfc788aed07121fcf955d4d5bc5d902d2804cc8921965 node-v19.0.1-headers.tar.gz
139ccede48ba2bf389af8f79b939143f02367b3f5f631ca1fb6e997876bfb335 node-v19.0.1-headers.tar.xz
ee1c319aaecafb6be140b64e91b0e83b90ef77657013d9c3c19bec27d5b32400 node-v19.0.1-linux-arm64.tar.gz
544a58a8da5a0b1d800d9228d59e8368bc14ab34f78cd702024b19fc18e282af node-v19.0.1-linux-arm64.tar.xz
ea28a07479838646ed05326c756dfebc56d5b3e8c3e24df489e36089209611e0 node-v19.0.1-linux-armv7l.tar.gz
268c62e9cd2eb64a3203c016cabcdc12bf18fa0e67f49962d969c77b0cf9f5a8 node-v19.0.1-linux-armv7l.tar.xz
fd07f47d4d0255918d1091b741b88c3d64ca017a58f895cbe4b22869f24a11a5 node-v19.0.1-linux-ppc64le.tar.gz
694a6dcc101243470bfab8a4b22187b0adc2bd31ac1faa362364735f55c870bc node-v19.0.1-linux-ppc64le.tar.xz
f2924991ac9e3d477c6bfbb7ab242934a8e34c08f430618e1f3a3d98624ef77a node-v19.0.1-linux-s390x.tar.gz
c5046af1cba2d28b862a5e0d0def2dee57c4cb5bd7a7b07cf5fd5d2f3801c2f9 node-v19.0.1-linux-s390x.tar.xz
7df29266d2cfd75b6e6ae59205476debac94848e29350378ece95701c13c32ee node-v19.0.1-linux-x64.tar.gz
a3322ffcf9f2840fc3f80112641839da6565e2357f3c8ee4f042d3386e49a216 node-v19.0.1-linux-x64.tar.xz
5e3f6e568dc520b3af6b9e16b92dedb1a42badd903c53d6504d79380c5bebe5c node-v19.0.1-win-x64.7z
a15925b346cb6906b916c4e18373e3311d921cf4de17b14e041ff238fc9639e0 node-v19.0.1-win-x64.zip
fe06896ecd10d99cfc8beca8366a131832792e0066839b79d668f584d956d82b node-v19.0.1-win-x86.7z
ab9fee18205c9d02a4bc0f921a38a1e2b8f8b070db1ba3c47f83d20a3251ae2f node-v19.0.1-win-x86.zip
37ca5394aca9fb959fabaabe8082b3acb5aa79b660d80094a0b08bad94aae52a node-v19.0.1-x64.msi
02df09b86d0203005806bda57fce7584154bcac2db2c147765be4502754a8fa5 node-v19.0.1-x86.msi
a15108cccf34e32c3b0bd15db045915fb461605022a73f4426d2995ba7c40179 node-v19.0.1.pkg
6524eb35e1b3c1fc128f9fb6c9ecd92aaba64261fa411aeec6a193019791a51b node-v19.0.1.tar.gz
ece5c28ceb4763f5e7f276f8c9251b3621e1fa6e45c942e757c4d151f8bf016d node-v19.0.1.tar.xz
d0f16d890fb461b2caa2ed389471005184f10fa2e39124dad7e8133ad0e1fc3a win-x64/node.exe
207cac29c02762e417c23dc4703bb22e137ed1a271e69283a2ec0e4b9afef9be win-x64/node.lib
b3ed66b8d3d67e57f6564885105897a104d0b6b985aecec1c6c75bd017550486 win-x64/node_pdb.7z
5ec5245375f787a5a06cf7c0ce953a03cacb06216b7d882a6b9684ee30a5f58f win-x64/node_pdb.zip
587f0a252c0d60700e4a8dab914416a4c754317d1ccfd476fa94962c42c8687c win-x86/node.exe
45ddbe6798a427532a8336d1a8f7f8ece5b2757d76276ddd7e9243994de35513 win-x86/node.lib
820c894e5a20cfb27673cd1bc3f51080bc03320e6a845298e8df1ca1d745cba1 win-x86/node_pdb.7z
23d103ade6b769c168f77446877def714b438a6c9857b5f9ec4f14f87f465371 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=1UzP
-----END PGP SIGNATURE-----