Package node: Information

  • Default inline alert: Version in the repository: 20.13.1-alt1

Source package: node
Version: 18.18.2-alt1
Latest version according to Repology
Build time:  Nov 2, 2023, 03:09 AM in the task #333374
Report package bug
Home page: http://nodejs.org/

License: MIT
Summary: Evented I/O for V8 Javascript
Description: 
Node.js is a server-side JavaScript environment that uses an asynchronous
event-driven model.  Node's goal is to provide an easy way to build scalable
network programs.

List of rpms provided by this srpm:
node (x86_64, ppc64le, i586, armh, aarch64)
node-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
node-devel (x86_64, ppc64le, i586, armh, aarch64)
node-doc (noarch)

Maintainer: Vitaly Lipatov



    1. libcares-devel >= 1.19.1
    2. python3-module-simplejson
    3. openssl
    4. openssl-devel >= 3.0.8
    5. /proc
    6. gyp >= 0.14.0
    7. rpm-build-intro >= 2.1.14
    8. rpm-macros-features
    9. rpm-macros-nodejs
    10. gcc-c++
    11. libicu-devel >= 7.2
    12. libbrotli-devel
    13. libuv-devel >= 1.44.2
    14. python3-devel
    15. curl
    16. libnghttp2-devel >= 1.51.0
    17. zlib-devel >= 1.2.13

Last changed


Nov. 2, 2023 Vitaly Lipatov 18.18.2-alt1
- new version 18.18.2 (with rpmrb script)
- note: libuv reverted to 1.44.2 in upstream due some regressions
Oct. 12, 2023 Vitaly Lipatov 18.18.1-alt1
- new version 18.18.1 (with rpmrb script)
July 29, 2023 Vitaly Lipatov 18.17.0-alt1
- new version 18.17.0 (with rpmrb script)
- set npm >= 9.6.7
- CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
- CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)