diff --git a/CHANGELOG.md b/CHANGELOG.md index 606c1f64fe4a7d..1761f8aa6546d0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -87,7 +87,8 @@ release. 4.0.0
-0.12.16
+0.12.17
+0.12.16
0.12.15
0.12.14
0.12.13
diff --git a/doc/changelogs/CHANGELOG_V012.md b/doc/changelogs/CHANGELOG_V012.md index b39f0e4fc47cca..0e6dbe116fae93 100644 --- a/doc/changelogs/CHANGELOG_V012.md +++ b/doc/changelogs/CHANGELOG_V012.md @@ -6,6 +6,7 @@ +0.12.17
0.12.16
0.12.15
0.12.14
@@ -39,6 +40,19 @@ [Node.js Long Term Support Plan](https://github.com/nodejs/LTS) and will be maintained until December 31st, 2016. + +## 2016-10-18, Version 0.12.17 (Maintenance), @rvagg + +This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/october-2016-security-releases/ for details on patched vulnerabilities. + +### Notable changes: + +* c-ares: fix for single-byte buffer overwrite, CVE-2016-5180, more information at https://c-ares.haxx.se/adv_20160929.html (Daniel Stenberg) + +### Commits: + +* [c5b095ecf8] - deps: avoid single-byte buffer overwrite (Daniel Stenberg) https://github.com/nodejs/node/pull/8849 + ## 2016-09-27, Version 0.12.16 (Maintenance), @rvagg