News
NodeJS 23.6.1
- Details
This is a security release.
- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
- [
f2ad4d3af8] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#654 - [
0afc6f9600] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (RafaelGSS) nodejs-private/node-private#555 - [
3c7686163e] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650 - [
51938f023a] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#629
Mailpit 1.22.0 Released
- Details
This release introduces two significant new features: Chaos and SMTP auto-forwarding.
Chaos (sometimes referred to as "Chaos Monkey") allows you to set SMTP error response codes at various stages in a SMTP transaction in order to test application resilience.
Feature
- Add Chaos functionality to test integration handling of SMTP error responses (#402, #110, #144 & #268)
- SMTP forwarding option (#414)
- Option to override the
Fromemail address in SMTP relay configuration (#414)
Chore
- Update node dependencies
- Update Go dependencies
Fix
- Update command
npm run update-caniemailsave path (#422) - Correct date formatting in TestMakeHeaders
PHP 8.1.31, 8.2.26, 8.3.14, & 8.4.1 Released!
- Details
8.1.31 - https://www.php.net/ChangeLog-8.php#PHP_8_1
8.2.26 - https://www.php.net/ChangeLog-8.php#PHP_8_2
8.3.14 - https://www.php.net/ChangeLog-8.php#PHP_8_3
8.4.1 - https://www.php.net/ChangeLog-8.php#PHP_8_4
NOTE: PHP 8.4.x currently does not work with Memcached. If you use Memcached and PHP together, please use PHP 8.3.x until a release is available for 8.4.x
Memcached 1.6.33 Released!
- Details
Numerous fixes and improvements to the proxy as usual. The proxy now embeds our routelib lua library to make it even easier to use. To use the builtin routelib start the proxy with -o proxy_config=routelib (note lack of .lua) and it will use the version shipped with the binary.
See https://docs.memcached.org/features/proxy/ for more information on using the proxy.
- proxy: fix mutator reserr err messages
- proxy: set result object status from mutator
- proxy: fix compilation issue on beta RHEL/GCC
- proxy: simplify lua GC logic
- proxy: add
mcp.luagc_ratio(float) - proxy: improve various mutator copy steps
- proxy: don't allow mutating mutated objects
- proxy: fix for result value buffers
- proxy: internally track rctx:new objects
- proxy: fixes to request object
- proxy: embed routelib
Xlight 3.9.4.4 Released!
- Details
3.9.4.4(2024-10-28)
Add an option "File contains users blocked from external authentication", one user per line in this file.
Fixed a bug in FTP OPTS.