Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

blog: v4.8.4 + v6.11.1 release notes #1287

Merged
merged 1 commit into from
Jul 11, 2017
Merged

blog: v4.8.4 + v6.11.1 release notes #1287

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
100 changes: 100 additions & 0 deletions locale/en/blog/release/v4.8.4.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,100 @@
---
date: 2017-07-11T16:53:46.603Z
version: 4.8.4
category: release
title: Node v4.8.4 (Maintenance)
slug: node-v4-8-4
layout: blog-post.hbs
author: Myles Borins
---

### Notable Changes

* **build**:
- Disable V8 snapshots - The hashseed embedded in the snapshot is currently the same for all runs of the binary. This opens node up to collision attacks which could result in a Denial of Service. We have temporarily disabled snapshots until a more robust solution is found (Ali Ijaz Sheikh)
* **deps**:
- CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. This patch checks that there is enough data for the required elements of an NAPTR record (2 int16, 3 bytes for string lengths) before processing a record. (David Drysdale)

### Commits

* [[`9d51bdc9d4`](https://github.com/nodejs/node/commit/9d51bdc9d4)] - **build**: disable V8 snapshots (Ali Ijaz Sheikh) [nodejs/node-private#84](https://github.com/nodejs/node-private/pull/84)
* [[`80fe2662e4`](https://github.com/nodejs/node/commit/80fe2662e4)] - **deps**: cherry-pick 9478908a49 from cares upstream (David Drysdale) [nodejs/node-private#88](https://github.com/nodejs/node-private/pull/88)
* [[`d6969a717f`](https://github.com/nodejs/node/commit/d6969a717f)] - **http**: use Buffer.from to avoid Buffer(num) call (Сковорода Никита Андреевич) [nodejs/node-private#83](https://github.com/nodejs/node-private/pull/83)
* [[`58a8f150e5`](https://github.com/nodejs/node/commit/58a8f150e5)] - **test**: verify hash seed uniqueness (Ali Ijaz Sheikh) [nodejs/node-private#84](https://github.com/nodejs/node-private/pull/84)

Windows 32-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4-x86.msi<br>
Windows 64-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4-x64.msi<br>
Windows 32-bit Binary: https://nodejs.org/dist/v4.8.4/win-x86/node.exe<br>
Windows 64-bit Binary: https://nodejs.org/dist/v4.8.4/win-x64/node.exe<br>
macOS 64-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4.pkg<br>
macOS 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-darwin-x64.tar.gz<br>
Linux 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-x86.tar.xz<br>
Linux 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-x64.tar.xz<br>
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-ppc64le.tar.xz<br>
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-ppc64.tar.xz<br>
SunOS 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-sunos-x86.tar.xz<br>
SunOS 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-sunos-x64.tar.xz<br>
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-armv6l.tar.xz<br>
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-armv7l.tar.xz<br>
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-arm64.tar.xz<br>
Source Code: https://nodejs.org/dist/v4.8.4/node-v4.8.4.tar.gz<br>
Other release files: https://nodejs.org/dist/v4.8.4/<br>
Documentation: https://nodejs.org/docs/v4.8.4/api/

<h3 id="shasums">SHASUMS</h3>

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

06213900c7d6ed598355cd11348b204bbb4d8069eaa7425c067ee596f38e7c4d node-v4.8.4-darwin-x64.tar.gz
0b944e08b51233005fa954056f1762a3fad92280e48e384b46dd5bd5695e6afd node-v4.8.4-darwin-x64.tar.xz
fe5cbb91c64df926c49d923348b4861a4e9284c8ecc87e504fbd8ddfbada8384 node-v4.8.4-headers.tar.gz
34e879759e0b577dd3900df2092ab3c15df040fbce1fbecc6cca2bef7301ffdf node-v4.8.4-headers.tar.xz
1eb8f8cadc8024fcb01f333ca8cac1db39735491a35122bf5ab1a40ee6bedced node-v4.8.4-linux-arm64.tar.gz
ae2f5a61b6218fced05de8ca8d163d985238aa5e535af1ba2075bd53aa31244f node-v4.8.4-linux-arm64.tar.xz
aaf8c7c4160ef4932004989cddc3723d8a5170ad86a2bd27e10b3e452702e086 node-v4.8.4-linux-armv6l.tar.gz
3daa79540c2133859d8d474004e6a7821cca4aa34931657f790707664c5f6346 node-v4.8.4-linux-armv6l.tar.xz
8d85b03be742b9494032f34833d766e3037934372cd0e118fd79fde00a3d8d91 node-v4.8.4-linux-armv7l.tar.gz
294ef24d3ec7224702b882d81ff9fa7e8c4988af7824c8378cafd2b72294fb14 node-v4.8.4-linux-armv7l.tar.xz
2a0627ad0683677febe99a523bb759f40c1934b7da2a1d9623dddda4ecd50063 node-v4.8.4-linux-ppc64le.tar.gz
a107957c34b21998abc914006b9566c262243ae38502595611da5cbdebea9283 node-v4.8.4-linux-ppc64le.tar.xz
9f252a4e892cdf99a081f3dfdb37ebdfc2c180df39f8850a35dc46fc59d3c2f6 node-v4.8.4-linux-ppc64.tar.gz
bb8d7167de39198fa631ab8a5b96cefa377048c5886895e1ddb2686991a39abe node-v4.8.4-linux-ppc64.tar.xz
d1297b6ddec12498f19589c0f44768a9f250ad36ea17f1f715b44aeb89cd32b2 node-v4.8.4-linux-x64.tar.gz
a98fc4cf9fcfe1c94dc34c8f58383dc4c2a40f0078735bd8dbf4fa20e075af17 node-v4.8.4-linux-x64.tar.xz
53f377f91aad1719539ba7fb591587b3ff8db25dd22d5f23647753cf60184044 node-v4.8.4-linux-x86.tar.gz
49ceb4e295837b182a61afd03b9aee353734aba646e98686d928bba2cfe502ce node-v4.8.4-linux-x86.tar.xz
b228e03c67aafb2b01456ef58dc6b238db6d31627205c7a69a6e8e072c961c9a node-v4.8.4.pkg
edff2a0eb071df6d15706202d82da7f4f6fa113e77881d6b70b0b6c350816cd8 node-v4.8.4-sunos-x64.tar.gz
11a061ddcb6f877ffb977a269e731e59071d6b3314d254d0a5898e69438f193b node-v4.8.4-sunos-x64.tar.xz
44803d9efb3f5b3b77f90d19e233c8a4e98b752de13ff10ceff9fe8a8094d011 node-v4.8.4-sunos-x86.tar.gz
d9a618c458e9ca91a2787fcd6598da5d77aff9292360078356d11ab11b515c88 node-v4.8.4-sunos-x86.tar.xz
b5480f69e9e929d2814de900fb5e673743a9d93f4fecbd79066baf18219f8584 node-v4.8.4.tar.gz
35fe633a48cbe93c79327161d9dc964ac9810f4ceb2ed8628487e6e14a15905b node-v4.8.4.tar.xz
bad999c784955ed808a2ce67ed2c0dc4b71e2abde873fbe912128f74ae5310b0 node-v4.8.4-win-x64.7z
8ebb31340af2d490a272cf0d3fdf07a60914fd79f40ac54b25babba7fcd9af25 node-v4.8.4-win-x64.zip
95c026c449f653a4de6768ae3c319383411c9c4898bef25691ae0b6038774d31 node-v4.8.4-win-x86.7z
02a38a9a3c723e8df033a9d15d1ffe492b7da42cea8f56d81148c3ac930afe81 node-v4.8.4-win-x86.zip
f5a15cbf5944f566e0ff917686f9290a688dedc24ce4bd237846f6353c20b640 node-v4.8.4-x64.msi
72190dcb1cebdbb05899acc3dea5d2dcad94dc811db289d015bb0e065c92e4ae node-v4.8.4-x86.msi
30e1308011f5e738d01ef406d3fe2648a66a7c042eb9aba3ca21b934a55fb61c win-x64/node.exe
51e7ebeed49def988e3398bf8a70bbba67ed38346439924dbdf9c01827016789 win-x64/node.lib
0a919967ed1cb6d1f7763ddbb2594f8f93adbcab2296192310faaf52d35fd6d1 win-x64/node_pdb.7z
ab593c61f1a39c93774c551116fa96f6b904c3dde9a4caf95cd199aec33f8aca win-x64/node_pdb.zip
540897f8d48d913b45eadb5201fc71475cd1652b414a7f035460aad2613c7594 win-x86/node.exe
35eb7a9960a773e8cac4c02336c500357a88c1937fda93466c1bd57eb8a63310 win-x86/node.lib
09dc53e16ab7d9b46419b5be872035349f428034beaa83008c3fd6798bdbc9e7 win-x86/node_pdb.7z
3070955c6e16c9f9ec5c6ce3a4bb1edc1efd2e1513ba6442d796f16207f5ee5e win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZZP/TAAoJEJM7AfQLXKlGd+gH/AhLQk+gW3NxrdgHhYUbQstS
uMjhSHBeNrwSk2UeFYimjE46SPf/v/zmjovcMyTEL/YzcNCSrEvuzdzjJ1U0ltxf
RngCDoZzJghpozLVQw97jClirblxOID6OpMNMV6zixs+JYzGvjK56RS8jE5mya1s
wZnHEOUAl/BVDvgQ7RGbL4lE9Kgms4PlnRZVqHPK23hZ9YwhMFRr3uMmduM8pasm
5Ea/wDIq7a9AlSgVk1CYkyfI0abgeIvihRa0BI8Q9I8wq517//VRi0Bcs2jcsUWO
/LZVxnz1lEuxRJB5FZ2Cx+PwxMwqITV1oUlNUhpZiPEukpZIeFtthYTrPTAZllI=
=0OBH
-----END PGP SIGNATURE-----

```
105 changes: 105 additions & 0 deletions locale/en/blog/release/v6.11.1.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,105 @@
---
date: 2017-07-11T16:53:50.440Z
version: 6.11.1
category: release
title: Node v6.11.1 (LTS)
slug: node-v6-11-1
layout: blog-post.hbs
author: Myles Borins
---

### Notable Changes

* **build**:
- Disable V8 snapshots - The hashseed embedded in the snapshot is currently the same for all runs of the binary. This opens node up to collision attacks which could result in a Denial of Service. We have temporarily disabled snapshots until a more robust solution is found (Ali Ijaz Sheikh)
* **deps**:
- CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. This patch checks that there is enough data for the required elements of an NAPTR record (2 int16, 3 bytes for string lengths) before processing a record. (David Drysdale)

### Commits

* [[`86c0eae524`](https://github.com/nodejs/node/commit/86c0eae524)] - **build**: disable V8 snapshots (Ali Ijaz Sheikh) [nodejs/node-private#84](https://github.com/nodejs/node-private/pull/84)
* [[`75bc33d16f`](https://github.com/nodejs/node/commit/75bc33d16f)] - **deps**: cherry-pick 9478908a49 from cares upstream (David Drysdale) [nodejs/node-private#88](https://github.com/nodejs/node-private/pull/88)
* [[`a92d4ca460`](https://github.com/nodejs/node/commit/a92d4ca460)] - **deps**: Debug code requires bigger buffer on s390 (Michael Dawson) [nodejs/node-private#93](https://github.com/nodejs/node-private/pull/93)
* [[`6e247b8a4e`](https://github.com/nodejs/node/commit/6e247b8a4e)] - **test**: verify hash seed uniqueness (Ali Ijaz Sheikh) [nodejs/node-private#84](https://github.com/nodejs/node-private/pull/84)

Windows 32-bit Installer: https://nodejs.org/dist/v6.11.1/node-v6.11.1-x86.msi<br>
Windows 64-bit Installer: https://nodejs.org/dist/v6.11.1/node-v6.11.1-x64.msi<br>
Windows 32-bit Binary: https://nodejs.org/dist/v6.11.1/win-x86/node.exe<br>
Windows 64-bit Binary: https://nodejs.org/dist/v6.11.1/win-x64/node.exe<br>
macOS 64-bit Installer: https://nodejs.org/dist/v6.11.1/node-v6.11.1.pkg<br>
macOS 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-darwin-x64.tar.gz<br>
Linux 32-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-x86.tar.xz<br>
Linux 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-x64.tar.xz<br>
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-ppc64le.tar.xz<br>
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-ppc64.tar.xz<br>
Linux s390x 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-s390x.tar.xz<br>
AIX 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-aix-ppc64.tar.gz<br>
SunOS 32-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-sunos-x86.tar.xz<br>
SunOS 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-sunos-x64.tar.xz<br>
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-armv6l.tar.xz<br>
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-armv7l.tar.xz<br>
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.11.1/node-v6.11.1-linux-arm64.tar.xz<br>
Source Code: https://nodejs.org/dist/v6.11.1/node-v6.11.1.tar.gz<br>
Other release files: https://nodejs.org/dist/v6.11.1/<br>
Documentation: https://nodejs.org/docs/v6.11.1/api/

<h3 id="shasums">SHASUMS</h3>

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

903c39914631c25509467516f22d2b8b320d08f17d1a4d2a7de740dffc7a1c1b node-v6.11.1-aix-ppc64.tar.gz
a2b839259089ef26f20c17864ff5ce9cd1a67e841be3d129b38d288b45fe375b node-v6.11.1-darwin-x64.tar.gz
60521df5c436552bc09ae68e8399e7e32cf34c36b21f1dd93c4ddfa421ed7ef0 node-v6.11.1-darwin-x64.tar.xz
333fd57e7ffa419655980b462ece5efc1b2f09c50c5d702ce2a24cb763f19885 node-v6.11.1-headers.tar.gz
cef0b18c510fc396e571576d6479072ae2895387335532dd6811ef337a0bfcb5 node-v6.11.1-headers.tar.xz
f8c898c39ecc9806fd6b5a3b49f037fee3cfe823238b8c119b4f6f8b7869168e node-v6.11.1-linux-arm64.tar.gz
da1188f66aefab601c419b18d658b2fb22dbfcd8dd9db1efe033454182302a06 node-v6.11.1-linux-arm64.tar.xz
f725f0b55f1ddf8b297325e7d34e7dd2acb940c380adadae0489df438f7b5976 node-v6.11.1-linux-armv6l.tar.gz
9111c08c27553afe39bf75b5c70d1090e99eab79874a349d2475372447751171 node-v6.11.1-linux-armv6l.tar.xz
f48a17b7781052a57414f4c4f9b8cda61886ac82dbcc72cb054151b8ddae7f13 node-v6.11.1-linux-armv7l.tar.gz
81d5cfeca28134e1c4011ef473b836f17b9833ce35477ce3d5d5244a574cb2d7 node-v6.11.1-linux-armv7l.tar.xz
79d64e0265d29eb2ce2b592657ef36ef8f263db85bd81a01ddc6e20c9602117a node-v6.11.1-linux-ppc64le.tar.gz
2ce2f559d7b3e165638659c4bd8190f0b944376f6af2613af08b7dca390d9ca3 node-v6.11.1-linux-ppc64le.tar.xz
af73c5213a986c3cbe152ea06fd02e9bf9ae534f01f0f9aebf976aa1aecf3ce8 node-v6.11.1-linux-ppc64.tar.gz
47a51a7a92ca4dfd24e3ea545d3ecb85de028fe0213472a041c7244d05dd0557 node-v6.11.1-linux-ppc64.tar.xz
afb203218defb33189e9205ea3aaed8b16d7f8e8ba1c754225d931919f42566a node-v6.11.1-linux-s390x.tar.gz
8b3ab3eb08245ee5fa381952d5b2e6a12c29dc8216687adc8a0f775ae56a9fd1 node-v6.11.1-linux-s390x.tar.xz
175e00ad504f0dca5a4d2af0f941e27ea0bd3178529fd1a9c3d67f3d75afd864 node-v6.11.1-linux-x64.tar.gz
e68cc956f0ca5c54e7f3016d639baf987f6f9de688bb7b31339ab7561af88f41 node-v6.11.1-linux-x64.tar.xz
6471fbb402e2e26086e125abb6dfe51d1f1aaee4c7cc769539490de6bca635c3 node-v6.11.1-linux-x86.tar.gz
5bab3ae4e437b94dfe6116fab5e0ad30eb9ef91d728f8daa9518ced28910f2af node-v6.11.1-linux-x86.tar.xz
b74310f4de51f60de8377686d8c150c737a3f41bb2bda353f4b170f9db58aa5f node-v6.11.1.pkg
9d7826c823df9edc51967005d80ba93ba962000c99e9a32b8f2c380275698b82 node-v6.11.1-sunos-x64.tar.gz
a0312c958f07b54ec2be0123a3fd04490a0bd85f5a63ed52a0f5b572b1e5a822 node-v6.11.1-sunos-x64.tar.xz
f400f12a1c7e954247e48d858cac4282b821858ac1d40760cfd30544c63a6752 node-v6.11.1-sunos-x86.tar.gz
beda0888e07856c5c1ae5a27bdb83af63706a78d402d0dd742a26927d0b0c4ad node-v6.11.1-sunos-x86.tar.xz
0187d4e4ef00cee2b70b0ad0689100050654f26629775d097b145d0d8727f9a0 node-v6.11.1.tar.gz
6f6655b85919aa54cb045a6d69a226849802fcc26491d0db4ce59873e41cc2b8 node-v6.11.1.tar.xz
22adcce6cbf2e40a879906be662f1818073f4668964d3b4ce544da56c17051f9 node-v6.11.1-win-x64.7z
9ffdaf75546fdc39b1a4f49ed816618c4669e34e2ee3b7a810ad89c8287f1293 node-v6.11.1-win-x64.zip
117bdeec7008492e2b313b637773375f07bf9582d13083566d3ad5e089f30875 node-v6.11.1-win-x86.7z
39be718eab141a38edc8abd6328362e8bb63c13c0d6114f8f59df95e0eb36952 node-v6.11.1-win-x86.zip
a3cd79655e4bff8c33884923eb0ccdb7290729e5f3352e8644d63e2849ae445d node-v6.11.1-x64.msi
6d10c47ad968bee5bf8d467a375eb93c148a780e3c34ee8d656055035f1f90c8 node-v6.11.1-x86.msi
2b740a411bd8d6d63749452169fdeb662d7bbec35a5108c19753fe993e0df141 win-x64/node.exe
392f789336568f3c4d5f8f24ddfe62e8084f33ef10d0fb186cd508055e579e6e win-x64/node.lib
db8ce8256c5281139de57cadd19910125123ba16184027f58f269f82d9e370e2 win-x64/node_pdb.7z
2fd21217fba052f49ce175f16398163eb7616f8052403d0c5a8264e3ff3bd583 win-x64/node_pdb.zip
781f24b0426f30fa4ac0baf2d22710a938360df4f8c4ae3285ca8921937d985c win-x86/node.exe
5b0285b9e03214d384e7a72cf45bf0eb047481dcab85ab93932271020b78b342 win-x86/node.lib
95eb4925543f143da527ecfabf454c3e6f2845e76afa8cac49a2c66d5ec06727 win-x86/node_pdb.7z
37a7dc654c03fea7f98428ecb81a1b575de5f19efa0f382f81302fdac7bdf0d1 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZZP/7AAoJEJM7AfQLXKlGBXUIALt3QRkrrOOEx+2O3C787Cw1
VnIIzElVgsUXAI4HFUeIYyfq3vgysQFdzHpKI0vjcgCHPP1fOEQrA4jIW8ZIdDlu
FsFjf8nRJSTTneMGyvX6xU8Q4Y5rA/+Htwg/CDIWU2T+pc+HSggk3D7TyOW48XKk
5N5F1L8tAx/wuebgntyXhjV0RT8ZFLAlgKFLvpzLmaZ0zya3wbkTv9jMwqt5TEGk
px7MxqSZmISHAGzHcVGRVwy3Znic8ZzSvthyGki+Z/8GLWzQeIBMIOS5wqhwl1kC
EWybzffifUDJfukFcKnHjDmV/BCS+/lkCSMcsH4yJzqLAcUxDxpRFstUP8K1VNs=
=qvw/
-----END PGP SIGNATURE-----

```