node: update to v12.18.3

upgrade npm to 6.14.6
update openssl to 1.1.1g

Vulnerabilities fixed:
* CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High).
* CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).
* CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
This commit is contained in:
Hirokazu MORIKAWA
2020-04-09 11:39:53 +09:00
parent 52e074411b
commit 6aef6e043b
5 changed files with 16 additions and 18 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
--- a/lib/internal/modules/cjs/loader.js
+++ b/lib/internal/modules/cjs/loader.js
@@ -1260,7 +1260,8 @@
@@ -1239,7 +1239,8 @@
path.resolve(process.execPath, '..') :
path.resolve(process.execPath, '..', '..');