nodejs/node
### [`v18.12.1`](https://togithub.com/nodejs/node/releases/tag/v18.12.1): 2022-11-04, Version 18.12.1 'Hydrogen' (LTS), @juanarbol
[Compare Source](https://togithub.com/nodejs/node/compare/v18.12.0...v18.12.1)
This is a security release.
##### Notable changes
The following CVEs are fixed in this release:
- **[CVE-2022-3602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3602)**: X.509 Email Address 4-byte Buffer Overflow (High)
- **[CVE-2022-3786](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3786)**: X.509 Email Address Variable Length Buffer Overflow (High)
- **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post.
##### Commits
- \[[`39f8a672e3`](https://togithub.com/nodejs/node/commit/39f8a672e3)] - **deps**: update archs files for quictls/openssl-3.0.7+quic [nodejs/node#45286](https://togithub.com/nodejs/node/pull/45286)
- \[[`80218127c8`](https://togithub.com/nodejs/node/commit/80218127c8)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.7+quic [nodejs/node#45286](https://togithub.com/nodejs/node/pull/45286)
- \[[`165342beac`](https://togithub.com/nodejs/node/commit/165342beac)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#354](https://togithub.com/nodejs-private/node-private/pull/354)
### [`v18.12.0`](https://togithub.com/nodejs/node/releases/tag/v18.12.0): 2022-10-25, Version 18.12.0 'Hydrogen' (LTS), @ruyadorno and @RafaelGSS
[Compare Source](https://togithub.com/nodejs/node/compare/v18.11.0...v18.12.0)
##### Notable Changes
This release marks the transition of Node.js 18.x into Long Term Support (LTS)
with the codename 'Hydrogen'. The 18.x release line now moves into "Active LTS"
and will remain so until October 2023. After that time, it will move into
"Maintenance" until end of life in April 2025.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[x] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
18.11.0
->18.12.1
Release Notes
nodejs/node
### [`v18.12.1`](https://togithub.com/nodejs/node/releases/tag/v18.12.1): 2022-11-04, Version 18.12.1 'Hydrogen' (LTS), @juanarbol [Compare Source](https://togithub.com/nodejs/node/compare/v18.12.0...v18.12.1) This is a security release. ##### Notable changes The following CVEs are fixed in this release: - **[CVE-2022-3602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3602)**: X.509 Email Address 4-byte Buffer Overflow (High) - **[CVE-2022-3786](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3786)**: X.509 Email Address Variable Length Buffer Overflow (High) - **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium) More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post. ##### Commits - \[[`39f8a672e3`](https://togithub.com/nodejs/node/commit/39f8a672e3)] - **deps**: update archs files for quictls/openssl-3.0.7+quic [nodejs/node#45286](https://togithub.com/nodejs/node/pull/45286) - \[[`80218127c8`](https://togithub.com/nodejs/node/commit/80218127c8)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.7+quic [nodejs/node#45286](https://togithub.com/nodejs/node/pull/45286) - \[[`165342beac`](https://togithub.com/nodejs/node/commit/165342beac)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#354](https://togithub.com/nodejs-private/node-private/pull/354) ### [`v18.12.0`](https://togithub.com/nodejs/node/releases/tag/v18.12.0): 2022-10-25, Version 18.12.0 'Hydrogen' (LTS), @ruyadorno and @RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v18.11.0...v18.12.0) ##### Notable Changes This release marks the transition of Node.js 18.x into Long Term Support (LTS) with the codename 'Hydrogen'. The 18.x release line now moves into "Active LTS" and will remain so until October 2023. After that time, it will move into "Maintenance" until end of life in April 2025.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.