Bernd Kuhls
643e767feb
https://github.com/nodejs/node/blob/v22.22.0/doc/changelogs/CHANGELOG_V22.md List of security fixes: 22.22.0: (CVE-2025-59465) add TLSSocket default error handler (CVE-2025-55132) disable futimes when permission model is enabled lib, permission: (CVE-2025-55130) require full read and write to symlink APIs src: (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks src, lib: (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle tls: (CVE-2026-21637) route callback exceptions through error handlers 22.17.1: (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize() Version 22.18.0 includes https://github.com/nodejs/node/commit/a2d2d36bb1c8a5599cda5c5ed7b65ded2abee72d which fixes build errors with python 3.14 "ImportError: cannot import name 'FancyURLopener' from 'urllib.request'" introduced by buildroot commita0a6abc8b1. Updated license hash due to upstream commits: https://github.com/nodejs/node/commit/ec60473ab1e4980bf6388b0d5ab34fb86b3ec466 https://github.com/nodejs/node/commit/0b5613f9fe38fd0f500d0bd147fa7d442189c7e2 https://github.com/nodejs/node/commit/0edf17198fe118c6cc39746feb8707a91d739f94 Switched _SITE to https. Fixes: https://autobuild.buildroot.net/results/da8/da82dc03cf0d42463fff1b5d9bf7a3c18cbf44dd/ Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit224abedb06) Signed-off-by: Thomas Perale <thomas.perale@mind.be>