Share

IMPORTANT: The release of N|Solid v4.5.8 contains a Node.js security release!

NodeSource is excited to announce N|Solid v4.5.8 which contains the following changes:

• Node.js v12.22.5 (LTS): Includes a Node.js security release captured in Node.js v12.22.5 (LTS).
• Node.js v14.17.5 (LTS): Includes a Node.js security release captured in Node.js v14.17.5 (LTS).
• N|Solid Docker images now distributed with Alpine Linux 3.14 and Ubuntu 20.04 LTS (Focal Fossa).

For detailed information on installing and using N|Solid, please refer to the N|Solid User Guide.

Changes

• Includes a Node.js security release captured in Node.js v12.22.5 (LTS) (read more here). Vulnerabilities fixed include:
  • CVE-2021-22931: cares upgrade - Improper handling of untypical characters in domain names (High).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (High).
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low).
• Includes a Node.js security release captured in Node.js v14.17.5 (LTS) (read more here). Vulnerabilities fixed include:
  • CVE-2021-22931: cares upgrade - Improper handling of untypical characters in domain names (High).
  • CVE-2021-22940: Use after free on close http2 on stream canceling (High).
  • CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (Low).
• N|Solid Docker images now distributed with Alpine Linux 3.14 and Ubuntu 20.04 LTS (Focal Fossa).

There are two available LTS Node.js versions for you to use with N|Solid, Node.js 14 Fermium and Node.js 12 Erbium.

N|Solid v4.5.8 Erbium ships with Node.js v12.22.5 N|Solid v4.5.8 Fermium ships with Node.js v14.17.5 The Node.js 12 Erbium LTS release line will continue to be supported until April 30, 2022. The Node.js 14 Fermium LTS release line will continue to be supported until April 30, 2023.