Rafael Gonzaga
2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
Commits
- [
85abedf1ff] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#522 - [
eccd63b865] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#596
Windows 32-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v18.20.4/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v18.20.4/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v18.20.4/node-v18.20.4.tar.gz
Other release files: https://nodejs.org/dist/v18.20.4/
Documentation: https://nodejs.org/docs/v18.20.4/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
8b964752863994f9f74b9aa176584e3a1a9f408a1c57c41d929bc9d2a54020b4 node-v18.20.4-aix-ppc64.tar.gz
aca5b568cc2a7e918037f05168634a921d88f43882c92a01b4ef5e39d0b89414 node-v18.20.4-darwin-arm64.tar.gz
e4ff1ac52a42e8f5eadc59e5bde778e31f246636beae0615a8b82885d8d30f4a node-v18.20.4-darwin-arm64.tar.xz
7d2eb630b66bb39b9cf6bb12b35de833e2445797f2ddc9bcae714e63e75181ca node-v18.20.4-darwin-x64.tar.gz
a868e8a1c27fe5fe329d80dd3b51409cefdf9a7869d9abca42473beae7535e10 node-v18.20.4-darwin-x64.tar.xz
be69a16ef1b0483ca0aacc1c8d0af69e87582356e236fe750e9eef9a6127db1b node-v18.20.4-headers.tar.gz
7d5fa4cf18910fd84d94e800459851c6067aca3646507e408ebcd7e572865eca node-v18.20.4-headers.tar.xz
f4e0b8b1a89e5d6529e517d57b42ac5cbab0562d86e88566d8e90578257e2b16 node-v18.20.4-linux-arm64.tar.gz
1cb5053bd4109aec41a8104ea3e9f48b95b1adef4d23bb4fc64f8c2d90c65ae3 node-v18.20.4-linux-arm64.tar.xz
ce311e7167c8cc0392753119dad55291842c2f4aa7a87a093144fc9338f35b61 node-v18.20.4-linux-armv7l.tar.gz
65686d63e0a73915a57ff487a0f720a502779f97e9cc93b3cc8b74563f8baa85 node-v18.20.4-linux-armv7l.tar.xz
2356de20cb33798690c90270b557e690c34cfd67525e32a0a6301a8176ce0bd8 node-v18.20.4-linux-ppc64le.tar.gz
d3baf8cca1862f42529258e37a715e4e59de7c6d00409e5f8dce31ced8196ed0 node-v18.20.4-linux-ppc64le.tar.xz
654ee94e5695f4c97dc1adc03cf833763ba62865fefb057af7258a20a87be51c node-v18.20.4-linux-s390x.tar.gz
050d3646dc19a2e72f6bb16159af49d25594e9a55fa35f264c34dac7c4665ab6 node-v18.20.4-linux-s390x.tar.xz
c4b0827dc47609d0a8379e6de6c74b3934da0b1312c733b5ebdcac16e3f1e954 node-v18.20.4-linux-x64.tar.gz
592eb35c352c7c0c8c4b2ecf9c19d615e78de68c20b660eb74bd85f8c8395063 node-v18.20.4-linux-x64.tar.xz
235645185550bf8dade9d747d5bd7aa7c901b12433ac743857738df7e94ecde0 node-v18.20.4-win-x64.7z
a2864d9048fb83cc85e3b2c3d18f5731b69cae8964bb029f5cdecbb0820eccd7 node-v18.20.4-win-x64.zip
eab07bf4b4f443448205699d7a4b6d2cfa2e847c2f0d041a8117fcdcedf9e350 node-v18.20.4-win-x86.7z
4939b50f5252ae05b271e20cbdaca36c26c7b78ea817a74fd6098a2435641b91 node-v18.20.4-win-x86.zip
c2654d3557abd59de08474c6dd009b1d358f420b8e4010e4debbf130b1dfb90a node-v18.20.4-x64.msi
dcf8f4a7022be6e3a1f1af875cca6747904f88feda55387daf009308d2844003 node-v18.20.4-x86.msi
0df3e744a2beba9fe91d43a218a82dc23bcf4f6dd0532b35816766e4dd801e49 node-v18.20.4.pkg
349259af6821f730bc4ca3a0e6576efc75ba86e546d118629a5b75eb8ebc3a0b node-v18.20.4.tar.gz
a76c7ea1b96aeb6963a158806260c8094b6244d64a696529d020547b9a95ca2a node-v18.20.4.tar.xz
4dd7333812a5df39cae6c7e69e519328ff61d0e997bdc62c307e3303c73270be win-x64/node.exe
64d93225aaece04e3cd45177d6dea2b22df49e127281fefa3ade43ac46a36cc6 win-x64/node.lib
902520361c065585d8ece561d7e5078ef3f873699c2a0285d536b96fd3dc7816 win-x64/node_pdb.7z
d5c75042e9cfb6852e07ae8460cd14d3ec243926201c8f4cc44e0e3e68538663 win-x64/node_pdb.zip
bb4c0584d5f32a5246dcf02c613f9c11dcd596ab09e5be43144f0ee2fc271a15 win-x86/node.exe
df34047e8ae646e6f43d76ecbec9709a185f29e01f49b377c4c46070cacc2859 win-x86/node.lib
ce1995e9e9f99b05abc4808437eca817dd4bb28500ae9164ea2df7acbac069c6 win-x86/node_pdb.7z
02f8dd1808dce9777374fd1e4874eaddfbb748b55b5c70e70e32bf1388594ed3 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=Gnr/
-----END PGP SIGNATURE-----