summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRod Vagg <rod@vagg.org>2015-12-03 23:05:52 +1100
committerRod Vagg <rod@vagg.org>2015-12-04 08:44:40 +1100
commitffc1395af0d5495be442eaefd9ce4dd6561c6dba (patch)
tree320a5dedee94425569b608dcf2a81f0a60cd0d9a
parent8d24a14f2c9d98f664fbe96a25cb2918982c39ba (diff)
downloadnode-new-ffc1395af0d5495be442eaefd9ce4dd6561c6dba.tar.gz
2015-12-04, Version 0.12.9 (Stable)v0.12.9
Security Update Notable items: * http: Fix a bug where an HTTP socket may no longer have a socket but a pipelined request triggers a pause or resume, a potential denial-of-service vector. (Fedor Indutny) * openssl: Upgrade to 1.0.1q, fixes CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers; TLS clients are also impacted. Details are available at <http://openssl.org/news/secadv/20151203.txt>. (Ben Noordhuis) #4133 PR-URL: https://github.com/nodejs/node-private/pull/13
-rw-r--r--ChangeLog14
-rw-r--r--src/node_version.h2
2 files changed, 15 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 82e2133ef9..c85fc3a2dc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,17 @@
+2015-12-04, Version 0.12.9 (LTS), @rvagg
+
+Security Update
+
+Notable items:
+
+* http: Fix a bug where an HTTP socket may no longer have a socket but a pipelined request triggers a pause or resume, a potential denial-of-service vector. (Fedor Indutny)
+* openssl: Upgrade to 1.0.1q, containing fixes CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers; TLS clients are also impacted. Details are available at <http://openssl.org/news/secadv/20151203.txt>. (Ben Noordhuis) https://github.com/nodejs/node/pull/4133
+
+Commits:
+
+* [8d24a14f2c] - deps: upgrade to openssl 1.0.1q (Ben Noordhuis) https://github.com/nodejs/node/pull/4133
+* [dfc6f4a9af] - http: fix pipeline regression (Fedor Indutny)
+
2015.11.25, Version 0.12.8 (LTS)
* [d9399569bd] - build: backport tools/release.sh (Rod Vagg) https://github.com/nodejs/node/pull/3642
diff --git a/src/node_version.h b/src/node_version.h
index 43c4052047..f4cf73619a 100644
--- a/src/node_version.h
+++ b/src/node_version.h
@@ -26,7 +26,7 @@
#define NODE_MINOR_VERSION 12
#define NODE_PATCH_VERSION 9
-#define NODE_VERSION_IS_RELEASE 0
+#define NODE_VERSION_IS_RELEASE 1
#ifndef NODE_STRINGIFY
#define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)