Fwd: Node.js security update for all active relesae lines, April 9 2024

                							

                <!--X-Body-Begin-->
<!--X-User-Header-->

oss-sec
mailing list archives
<!--X-User-Header-End-->
<!--X-TopPNI-->

By Date

By Thread

</form>

<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
Fwd: Node.js security update for all active relesae lines, April 9 2024

<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->

From: Rafael Gonzaga &lt;work () rafaelgss dev&gt;

Date: Wed, 10 Apr 2024 10:04:02 -0700 (PDT)

<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->

<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->

---------- Mensagem encaminhada ---------
De: Rafael Gonzaga &lt;work () rafaelgss dev&gt;
Data: quarta-feira, 10 de abril de 2024 às 14:03:54 UTC-3
Assunto: Re: Node.js security update for all active relesae lines, April 9 
2024
Para: nodejs-sec &lt;nodejs-sec () googlegroups com&gt;

The planned security releases are now available. You can read more about 
the details at 
https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2
Em quinta-feira, 4 de abril de 2024 às 17:22:26 UTC-3, Rafael Gonzaga 
escreveu:

The Node.js project will release new versions of all supported release 
lines on or shortly after Tuesday April 9th 2024. For more information see: 
https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2

<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->

<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->

By Date

By Thread

Current thread:

Fwd: Node.js security update for all active relesae lines, April 9 2024 Rafael Gonzaga (Apr 04)

&lt;Possible follow-ups&gt;
Fwd: Node.js security update for all active relesae lines, April 9 2024 Rafael Gonzaga (Apr 10)

NodeJS Command injection via args parameter of child_process.spawn without shell option enabled on Windows (CVE-2024-27980) Jan Schaumann (Apr 10)

 

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->