From 82f0552dea0782debd19884e236e8c6b8709f876 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 15 Nov 2022 15:52:32 +0000 Subject: [PATCH] chore(deps): update node.js to v18.12.1 (#14) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | volta | patch | [`18.12.0` -> `18.12.1`](https://renovatebot.com/diffs/npm/node/18.12.0/v18.12.1) | --- ### Release Notes
nodejs/node ### [`v18.12.1`](https://github.com/nodejs/node/releases/tag/v18.12.1) [Compare Source](https://github.com/nodejs/node/compare/v18.12.0...v18.12.1) This is a security release. ##### Notable changes The following CVEs are fixed in this release: - **[CVE-2022-3602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3602)**: X.509 Email Address 4-byte Buffer Overflow (High) - **[CVE-2022-3786](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3786)**: X.509 Email Address Variable Length Buffer Overflow (High) - **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium) More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post. ##### Commits - \[[`39f8a672e3`](https://github.com/nodejs/node/commit/39f8a672e3)] - **deps**: update archs files for quictls/openssl-3.0.7+quic [nodejs/node#​45286](https://github.com/nodejs/node/pull/45286) - \[[`80218127c8`](https://github.com/nodejs/node/commit/80218127c8)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.7+quic [nodejs/node#​45286](https://github.com/nodejs/node/pull/45286) - \[[`165342beac`](https://github.com/nodejs/node/commit/165342beac)] - **inspector**: harden IP address validation again (Tobias NieรŸen) [nodejs-private/node-private#​354](https://github.com/nodejs-private/node-private/pull/354)
--- ### Configuration ๐Ÿ“… **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). ๐Ÿšฆ **Automerge**: Enabled. โ™ป **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. ๐Ÿ”• **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, click this checkbox. --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Co-authored-by: Renovate Bot Reviewed-on: https://git.froth.zone/sam/waifurudor.de/pulls/14 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index a4f5d70..2e0d036 100644 --- a/package.json +++ b/package.json @@ -38,6 +38,6 @@ "typescript": "4.8.4" }, "volta": { - "node": "18.12.0" + "node": "18.12.1" } }