Thu, 12 Nov 2026 21:14:10 CST | login

Information for build nodejs24-24.18.1-6.oc9

ID48998
Package Namenodejs24
Version24.18.1
Release6.oc9
Epoch
DraftFalse
Sourcegit+https://gitee.com/opencloudos-stream/nodejs24.git?.#db72b22a72644b77846846fdf24e17b5b20f7745
SummaryJavaScript runtime
DescriptionNode.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.
Built byepol-bot
State building
Volume DEFAULT
StartedThu, 12 Nov 2026 20:13:54 CST
Est. CompletionThu, 12 Nov 2026 21:53:16 CST
Taskbuild (dist-oc9-epol, /opencloudos-stream/nodejs24.git:.:origin/master)
Extra{'source': {'original_url': 'git+https://gitee.com/opencloudos-stream/nodejs24.git?.#origin/master'}}
Tags No tags
RPMs No RPMs
Changelog * Wed Nov 11 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-6 - [Type] security - [DESC] Fix CVE-2026-119379 (SQLite session heap overflow), CVE-2026-102276 (brace-expansion stack exhaustion) * Tue Nov 03 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-5 - [Type] security - [DESC] Fix CVE-2026-106069: reject non-canonical IP addresses in TLS hostname verification * Fri Oct 16 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-4 - [Type] security - [DESC] Fix CVE-2026-109869: undici fetch() leaked response stream on excessive content-encodings (remote DoS) * Tue Sep 15 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-3 - [Type] security - [DESC] Fix CVE-2026-19534: backport undici WebSocket subprotocol null-dereference fix to bundled undici 7.29.0 * Tue Aug 25 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-2 - [Type] security - [DESC] Fix CVE-2026-73566: update bundled node-tar 7.5.15 -> 7.5.21 (filesFilter/mapHas unbounded recursion in tar.t()/tar.x()) * Mon Aug 03 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 24.18.1-1 - [Type] security - [DESC] update to Node.js 24.18.1 (bundled undici 7.29.0, fixes CVE-2026-13697) * Wed Jul 15 2026 Zhao Zhen <jeremiazhao@tencent.com> - 24.18.0-1 - [Type] security - [DESC] update to Node.js 24.18.0 (upstream June 2026 security release). Fixes CVE-2026-12151. - [DESC] backport c-ares CVE-2026-33630 (use-after-free / double-free in query-completion handling, fixed upstream in c-ares 1.34.7) Assisted-by： CodeBuddy CLI GLM 5.2 - [DESC] disable LTO: drop --enable-lto from configure_flags (system-level LTO already nilled via _lto_cflags). LTO is broken on Node.js system builds. * Thu May 14 2026 dorsoli <dorsoli@tencent.com> - 24.14.0-2 - [Type] bugfix - [DESC] fix loongarch64 perf-logger test. * Sun Apr 19 2026 dorsoli <dorsoli@tencent.com> - 24.14.0-1 - [Type] sync - [DESC] initial build for Node.js 24 LTS - addresses CVE-2026-27135 via downstream nghttp2 1.68.1 patch