From 97c1fa3d3b98bf1b28cf3362e197ae91093cf68f Mon Sep 17 00:00:00 2001 From: Rod Vagg Date: Mon, 13 Aug 2018 19:02:06 +1000 Subject: [PATCH] 2018-08-15, Version 10.9.0 (Current) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Notable changes: * buffer: * Fix out-of-bounds (OOB) write in `Buffer.write()` for UCS-2 encoding (CVE-2018-12115) * Fix unintentional exposure of uninitialized memory in `Buffer.alloc()` (CVE-2018-7166) * deps: * Upgrade to OpenSSL 1.1.0i, fixing: - Client DoS due to large DH parameter (CVE-2018-0732) - ECDSA key extraction via local side-channel (CVE not assigned) * Upgrade V8 from 6.7 to 6.8 (Michaël Zasso) #21079 - Memory reduction and performance improvements, details at: https://v8project.blogspot.com/2018/06/v8-release-68.html * http: `http.get()` and `http.request()` (and `https` variants) can now accept three arguments to allow for a `URL` _and_ an `options` object (Sam Ruby) #21616 * Added new collaborators * Sam Ruby (https://github.com/rubys) * George Adams (https://github.com/gdams) --- CHANGELOG.md | 3 +- doc/api/crypto.md | 8 +- doc/api/http.md | 4 +- doc/api/https.md | 4 +- doc/changelogs/CHANGELOG_V10.md | 193 ++++++++++++++++++++++++++++++++ 5 files changed, 203 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9a89aa5d1bd1b5..1808b0bcc69a14 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -31,7 +31,8 @@ release. -10.8.0
+10.9.0
+10.8.0
10.7.0
10.6.0
10.5.0
diff --git a/doc/api/crypto.md b/doc/api/crypto.md index f870a5be98d7fe..f77f4213beb5fb 100644 --- a/doc/api/crypto.md +++ b/doc/api/crypto.md @@ -2144,8 +2144,8 @@ request. @@ -2198,8 +2198,8 @@ crypto.scrypt('secret', 'salt', 64, { N: 1024 }, (err, derivedKey) => { diff --git a/doc/api/http.md b/doc/api/http.md index 0b1340556bb304..1ef5bbb0fe0204 100644 --- a/doc/api/http.md +++ b/doc/api/http.md @@ -1802,7 +1802,7 @@ added to the [`'request'`][] event.