IMPORTANT: This release of N|Solid v4.5.9 contains a Node.js security release!

NodeSource is excited to announce N|Solid v4.5.9 which contains the following changes:

Node.js v12.22.6 (LTS): Includes a Node.js security release captured in Node.js v12.22.6 (LTS).
Node.js v14.17.6 (LTS): Includes a Node.js security release captured in Node.js v14.17.6 (LTS).

For detailed information on installing and using N|Solid, please refer to the N|Solid User Guide.

Changes

These are vulnerabilities in the node-tar, arborist, and npm cli modules which are related to the initial reports and subsequent remediation of node-tar vulnerabilities CVE-2021-32803 and CVE-2021-32804. Subsequent internal security review of node-tar and additional external bounty reports have resulted in another 5 CVE being remediated in core npm CLI dependencies including node-tar, and npm arborist.

Includes a Node.js security release captured in Node.js v12.22.6 (LTS) (read more here). Vulnerabilities fixed include:
deps: update archs files for OpenSSL-1.1.1l (Richard Lau).
deps: upgrade openssl sources to 1.1.1l (Richard Lau).
deps: upgrade npm to 6.14.15 (Darcy Clarke).
Includes a Node.js security release captured in Node.js v14.17.6 (LTS) (read more here). Vulnerabilities fixed include:
deps: update archs files for OpenSSL-1.1.1l (Richard Lau) #39868
deps: upgrade openssl sources to 1.1.1l (Richard Lau) #39868
deps: upgrade npm to 6.14.15 (Darcy Clarke) #39856

There are two available LTS Node.js versions for you to use with N|Solid, Node.js 14 Fermium and Node.js 12 Erbium.

N|Solid v4.5.9 Erbium ships with Node.js v12.22.6
N|Solid v4.5.9 Fermium ships with Node.js v14.17.6
The Node.js 12 Erbium LTS release line will continue to be supported until April 30, 2022.
The Node.js 14 Fermium LTS release line will continue to be supported until April 30, 2023.

Need a helping hand?

If you have any questions, please feel free to contact us at [email protected].

To get the best out of Node.js, start a free trial of N|Solid., an augmented version of the Node.js runtime, enhanced to deliver low-impact performance insights and greater security for mission-critical Node.js applications. #KnowYourNode