Changelog for
ea-nodejs16-16.20.2-1.2.5.cpanel.x86_64.rpm :
* Fri Aug 11 2023 Cory McIntire
- 16.20.2-1- EA-11604: Update ea-nodejs16 from v16.20.1 to v16.20.2 - CVE-2023-32559: Policies can be bypassed via process.binding - CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire - CVE-2023-32002: Policies can be bypassed via Module.\\_load - OpenSSL sources upgraded upstream to latest
* Wed Jun 21 2023 Cory McIntire - 16.20.1-1- EA-11513: Update ea-nodejs16 from v16.20.0 to v16.20.1
* Mon May 08 2023 Julian Brown - 16.20.0-2- ZC-10936: Clean up Makefile and remove debug-package-nil
* Fri Mar 31 2023 Cory McIntire - 16.20.0-1- EA-11328: Update ea-nodejs16 from v16.19.1 to v16.20.0
* Fri Feb 17 2023 Cory McIntire - 16.19.1-1- EA-11255: Update ea-nodejs16 from v16.19.0 to v16.19.1- [CVE-2023-23918) Node.js Permissions policies can be bypassed via process.mainModule (High)- [CVE-2023-23919) Node.js OpenSSL error handling issues in nodejs crypto library (Medium)- [CVE-2023-23920] Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)- [CVE-2023-23936] Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)- [CVE-2023-24807] Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
* Thu Dec 15 2022 Cory McIntire - 16.19.0-1- EA-11105: Update ea-nodejs16 from v16.18.1 to v16.19.0
* Mon Nov 07 2022 Cory McIntire - 16.18.1-1- EA-11040: Update ea-nodejs16 from v16.18.0 to v16.18.1
* Mon Oct 17 2022 Cory McIntire - 16.18.0-1- EA-10988: Update ea-nodejs16 from v16.17.1 to v16.18.0
* Sun Sep 25 2022 Cory McIntire - 16.17.1-1- EA-10948: Update ea-nodejs16 from v16.17.0 to v16.17.1
* Tue Aug 16 2022 Cory McIntire - 16.17.0-1- EA-10881: Update ea-nodejs16 from v16.16.0 to v16.17.0
* Thu Jul 07 2022 Cory McIntire - 16.16.0-1- EA-10822: Update ea-nodejs16 from v16.15.1 to v16.16.0
* Thu Jun 02 2022 Cory McIntire - 16.15.1-1- EA-10748: Update ea-nodejs16 from v16.15.0 to v16.15.1
* Wed Apr 27 2022 Cory McIntire - 16.15.0-1- EA-10667: Update ea-nodejs16 from v16.14.2 to v16.15.0
* Tue Mar 22 2022 Travis Holloway - 16.14.2-1- EA-10588: Update ea-nodejs16 from v16.13.1 to v16.14.2
* Tue Dec 07 2021 Dan Muey - 16.13.1-2- ZC-9571: Explicitly conflict w/ `ea-nodejs10` so that DNF does not simply downgrade it to get around the conflict
* Thu Dec 02 2021 Julian Brown - 16.13.1-1- ZC-9550 - Create package