2016-06-23, Version 5.12.0 (Stable)

Notable changes:

This is a security release. All Node.js users should consult the security
release summary at https://nodejs.org/en/blog/vulnerability/june-2016-security-releases
for details on patched vulnerabilities.

* **buffer**
  * backport allocUnsafeSlow (Сковорода Никита Андреевич) [#7169](https://github.com/nodejs/node/pull/7169)
  * ignore negative allocation lengths (Anna Henningsen) [#7221](https://github.com/nodejs/node/pull/7221)
* **deps**: backport 3a9bfec from v8 upstream (Ben Noordhuis) [nodejs/node-private#40](https://github.com/nodejs/node-private/pull/40)
  * Fixes a Buffer overflow vulnerability discovered in v8. More details
    can be found in the CVE (CVE-2016-1699).

PR-URL: https://github.com/nodejs/node-private/pull/51
This commit is contained in:
Evan Lucas 2016-06-23 07:27:44 -05:00
parent fb146cecc3
commit 6a9438343b
2 changed files with 31 additions and 5 deletions

View File

@ -159,6 +159,10 @@ release.
---- ----
---- ----
## 2016-06-23, Version 5.12.0 (Stable), @evanlucas
<a href="doc/changelogs/CHANGELOG_V5.md#5.12.0">Moved to doc/changelogs/CHANGELOG_V5.md#5.12.0</a>.
## 2016-06-23, Version 4.4.6 'Argon' (LTS), @thealphanerd ## 2016-06-23, Version 4.4.6 'Argon' (LTS), @thealphanerd
<a href="doc/changelogs/CHANGELOG_V4.md#4.4.6">Moved to doc/changelogs/CHANGELOG_V4.md#4.4.6</a>. <a href="doc/changelogs/CHANGELOG_V4.md#4.4.6">Moved to doc/changelogs/CHANGELOG_V4.md#4.4.6</a>.

View File

@ -6,6 +6,7 @@
</tr> </tr>
<tr> <tr>
<td> <td>
<a href="#5.12.0">5.12.0</a><br/>
<a href="#5.11.1">5.11.1</a><br/> <a href="#5.11.1">5.11.1</a><br/>
<a href="#5.11.0">5.11.0</a><br/> <a href="#5.11.0">5.11.0</a><br/>
<a href="#5.10.1">5.10.1</a><br/> <a href="#5.10.1">5.10.1</a><br/>
@ -39,6 +40,27 @@
**Note:** Official support for the v5 release line is scheduled to expire **Note:** Official support for the v5 release line is scheduled to expire
around June 2016. Users of v5 should upgrade to [Node.js v6](CHANGELOG_V6.md). around June 2016. Users of v5 should upgrade to [Node.js v6](CHANGELOG_V6.md).
<a id="5.12.0"></a>
## 2016-06-23, Version 5.12.0 (Stable), @evanlucas
### Notable changes
This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/june-2016-security-releases for details on patched vulnerabilities.
* **buffer**
* backport allocUnsafeSlow (Сковорода Никита Андреевич) [#7169](https://github.com/nodejs/node/pull/7169)
* ignore negative allocation lengths (Anna Henningsen) [#7221](https://github.com/nodejs/node/pull/7221)
* **deps**: backport 3a9bfec from v8 upstream (Ben Noordhuis) [nodejs/node-private#40](https://github.com/nodejs/node-private/pull/40)
* Fixes a Buffer overflow vulnerability discovered in v8. More details can be found in the CVE (CVE-2016-1699).
### Commits
* [[`0ca0827b71`](https://github.com/nodejs/node/commit/0ca0827b71)] - **(SEMVER-MINOR)** **buffer**: backport allocUnsafeSlow (Сковорода Никита Андреевич) [#7169](https://github.com/nodejs/node/pull/7169)
* [[`27785aeb37`](https://github.com/nodejs/node/commit/27785aeb37)] - **buffer**: ignore negative allocation lengths (Anna Henningsen) [#7221](https://github.com/nodejs/node/pull/7221)
* [[`34b96c1322`](https://github.com/nodejs/node/commit/34b96c1322)] - **deps**: backport 3a9bfec from v8 upstream (Ben Noordhuis) [nodejs/node-private#40](https://github.com/nodejs/node-private/pull/40)
* [[`2ebeb82852`](https://github.com/nodejs/node/commit/2ebeb82852)] - **test**: fix test-net-* error code check for getaddrinfo(3) (Natanael Copa) [#5099](https://github.com/nodejs/node/pull/5099)
* [[`03d36aea4f`](https://github.com/nodejs/node/commit/03d36aea4f)] - **(SEMVER-MINOR)** **test**: add buffer testcase for resetting kZeroFill (Сковорода Никита Андреевич) [#7169](https://github.com/nodejs/node/pull/7169)
<a id="5.11.1"></a> <a id="5.11.1"></a>
## 2016-05-05, Version 5.11.1 (Stable), @evanlucas ## 2016-05-05, Version 5.11.1 (Stable), @evanlucas