Michaël Zasso
Notable changes
This is a security release.
Vulnerabilities fixed:
- CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High).
- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).
- CVE-2020-8174:
napi_get_value_string_*()allows various kinds of memory corruption (High).
Commits
- [
c6d0bdacc4] - crypto: update root certificates (AshCripps) #33682 - [
916b2824d1] - (SEMVER-MINOR) deps: update nghttp2 to 1.41.0 (James M Snell) nodejs-private/node-private#206 - [
d381426377] - (SEMVER-MINOR) http2: implement support for max settings entries (James M Snell) nodejs-private/node-private#206 - [
7dd8982570] - napi: fix memory corruption vulnerability (Tobias Nießen) nodejs-private/node-private#195 - [
0932309af2] - tls: emitsessionafter verifying certificate (Fedor Indutny) nodejs-private/node-private#200 - [
c392d3923f] - tools: update certdata.txt (AshCripps) #33682
Windows 32-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v12.18.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v12.18.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-aix-ppc64.tar.gz
SmartOS 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-sunos-x64.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v12.18.0/node-v12.18.0.tar.gz
Other release files: https://nodejs.org/dist/v12.18.0/
Documentation: https://nodejs.org/docs/v12.18.0/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
78581e043e6d33c2d793c24990424b1c3e8ac276e440d38184ba1af25b5a7aeb node-v12.18.0-aix-ppc64.tar.gz
11fe50e670315d2d3c46317d23f7a019f46a3d08b534fbadee9a1bc3d4f81852 node-v12.18.0-darwin-x64.tar.gz
0ed99477999abb6dc2d399efff7b4e0e1c5ae6801c4890fb64470277a101098a node-v12.18.0-darwin-x64.tar.xz
1c0bb8d7ec868ff163c56b8190f6f8072292f051e6046c2df7658079078e80f9 node-v12.18.0-headers.tar.gz
9540eccfaca1d17fc6addb1bba02fb3627b89f6e5b150f5f31d88cb8345ea111 node-v12.18.0-headers.tar.xz
11860778b886b9771980ba04774d18496fe6bd1f4a6181189f7b6be61b1e7c79 node-v12.18.0-linux-arm64.tar.gz
51b301102984ff73a74894396b774d00259bb3bb8c1de7c82674713acec7a214 node-v12.18.0-linux-arm64.tar.xz
79631712fdbd3f21f36c5760ded50cb47a7c983750d1eb8308e6eb0e46e6d180 node-v12.18.0-linux-armv7l.tar.gz
1ed5e19941632efcc97a85c359c46c1d550ff782c04e42abc6033c91d960cfaf node-v12.18.0-linux-armv7l.tar.xz
308a6c346b4a239db2989a9f0c5b9a76247169094e51be7fc56b2622ede67db0 node-v12.18.0-linux-ppc64le.tar.gz
a60abf49ab93e0ca86683a826d40d130fd822793ab0bf37c6c3df55c66c71528 node-v12.18.0-linux-ppc64le.tar.xz
dad5949bdf2a2609f6120bd55e1fde24455740e4fcb815984c8d8e286e1c99dc node-v12.18.0-linux-s390x.tar.gz
4b4beb7e9dd71e8dbef0fdab3db377c8ae5905c08885a5aea85302beb129cfc0 node-v12.18.0-linux-s390x.tar.xz
9526c0ee225037fc49a00e4bd5c5e2db26053f3f7c9ad124f5763d2eb80cff16 node-v12.18.0-linux-x64.tar.gz
2febc2506c298048bfddf896056be6191c1f08716876d960a4990bd63a7fe05a node-v12.18.0-linux-x64.tar.xz
7137554f1e3ae55094ffb35f1bb9c35f90be076bed0089e463a8bd75da58738a node-v12.18.0.pkg
f21cc693b1ad038a01ac8c5b97e1a8afe8be3b22cdaf95a54cd86b5938801dde node-v12.18.0-sunos-x64.tar.gz
394d55866b9800681895d4d3b4efb4111873ccbc8d2c6847b2e87fadc683a643 node-v12.18.0-sunos-x64.tar.xz
a55c36f0cd9898f8bfa5a793a9e656e78d383f643ebec94afa67d084620b2b13 node-v12.18.0.tar.gz
d4688636a378367f5157f02bd5c13902f5c193356f8f7a35c99dfa383b03b13f node-v12.18.0.tar.xz
ba0df9132406a6ce08200e208802662b7199d9094a2734fa886053c977ba77f1 node-v12.18.0-win-x64.7z
ca73a989eba5e863971cb600e5520cb4c5edf9c600fe8f76d9e4771ad03b5d08 node-v12.18.0-win-x64.zip
9b9495851c49fa0d53619dc96886c044018ad2378f27c08c978695f15dfc16e2 node-v12.18.0-win-x86.7z
00b2a2e3f49bd00f6e5beb8c4cfa3a8d1cde99c43d7c6eb9d39d248e35fb7f4f node-v12.18.0-win-x86.zip
b79307b0f1b10d509995a8f6511d126006f24fc8cab5567101eade814dc27836 node-v12.18.0-x64.msi
5b31b5fbcd350a4d52370d806c40918dd0cf1085b08bd05934ace294c5d869ee node-v12.18.0-x86.msi
6437becaeaad5a721106912dab3f866ecc50b32ac8a3ca32a3eb2bf1ec22770f win-x64/node.exe
29a84d0c0dc7cc97cb3fe6aaad31cfba88ba33b662bd73187d442a7a5b86406b win-x64/node.lib
322d12e99aa91f6a963737b8b2cf030e32c5bfa75f688c419e6daade23619cd5 win-x64/node_pdb.7z
23db76226598cfc1635be2b6a284452f078f8a0c79e7fdfa8337a8e281e82d00 win-x64/node_pdb.zip
17ef775d59a6897f1b071cd4517e88f3cf6013fcd6d79ca4fd40f72b6bc60df1 win-x86/node.exe
eefe19a12b21ddfece8e1c59ad7ba33b8255b66e7a23d93ddadb6a87f0f58275 win-x86/node.lib
7ee07015266d3a47b7c666e0c3cd7eddf01e7984a13fb45610a1628513ba1f00 win-x86/node_pdb.7z
cceefcc4231da029642a0c22c7d8818f19b14e7018d94f46453a440137e4e871 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=hOKF
-----END PGP SIGNATURE-----