diff options
| author | Rod Vagg <rod@vagg.org> | 2018-08-15 19:15:45 +1000 |
|---|---|---|
| committer | Rod Vagg <rod@vagg.org> | 2018-08-16 11:52:38 +1000 |
| commit | 1efdc5876dc00495994c806d2eba0638f6a355bf (patch) | |
| tree | e0fb370fc6790f8be116a173a5222a37c46c34db /doc/changelogs/CHANGELOG_V10.md | |
| parent | 82ab9b336d90206bc5b64662f3052cd14b606705 (diff) | |
| download | node-new-1efdc5876dc00495994c806d2eba0638f6a355bf.tar.gz | |
2018-08-15, Version 8.11.4 'Carbon' (LTS)
This is a security release. All Node.js users should consult the
security release summary at:
https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/
for details on patched vulnerabilities.
Fixes for the following CVEs are included in this release:
* CVE-2018-0732 (OpenSSL)
* CVE-2018-12115 (Node.js)
Notable changes:
* buffer: Fix out-of-bounds (OOB) write in `Buffer.write()` for UCS-2 encoding
(CVE-2018-12115)
* deps: Upgrade to OpenSSL 1.0.2p, fixing:
* Client DoS due to large DH parameter (CVE-2018-0732)
* ECDSA key extraction via local side-channel (CVE not assigned)
Diffstat (limited to 'doc/changelogs/CHANGELOG_V10.md')
0 files changed, 0 insertions, 0 deletions