Re: [BLFS Trac] #23658: node.js-24.18.1

#23658: node.js-24.18.1
-------------------------+------------------------
 Reporter:  Bruce Dubbs  |       Owner:  blfs-book
     Type:  enhancement  |      Status:  new
 Priority:  high         |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  high         |  Resolution:
 Keywords:               |
-------------------------+------------------------
Changes (by Joe Locash):

 * priority:  normal => high
 * severity:  normal => high

Comment:

 https://nodejs.org/en/blog/release/v24.18.1

 2026-07-29, Version 24.18.1 'Krypton' (LTS), @juanarbol

 This is a security release.

 Notable Changes

     - (CVE-2026-56846) http2: retain header memory in session accounting
 (Matteo Collina) – High
     - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo
 Collina) – High
     - (CVE-2026-58043) permission: avoid granting radix split nodes
 (RafaelGSS) – High
     - (CVE-2026-56850) https: distinguish PFX object-array agent keys
 (RafaelGSS) – Medium
     - (CVE-2026-58040) https: bind identity checks to session reuse
 (Matteo Collina) – Medium
     - (CVE-2026-58041) sqlite: invalidate tag store iterators on statement
 reset (Matteo Collina) – Medium
     - (CVE-2026-58042) dns: handle large resolveAny address replies
 (RafaelGSS) – Medium
     - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers
 (RafaelGSS) – Medium
     - (CVE-2026-56847) permission: enforce fs write permission for trace
 events (RafaelGSS) – Low
     - (CVE-2026-58039) permission: check final report output path
 (RafaelGSS) – Low
     - (CVE-2026-58044) http: reject requests exceeding max header count
 (Matteo Collina) – Low
     - deps: update llhttp to 9.4.3 (Paolo Insogna)
     - deps: update undici to 7.29.0 (Node.js GitHub Bot)
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23658#comment:1>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page