diff options
| author | Rod Vagg <rod@vagg.org> | 2018-12-03 23:14:18 +1100 |
|---|---|---|
| committer | Rod Vagg <rod@vagg.org> | 2018-12-04 01:06:32 +1100 |
| commit | dbdc9081fa723f62126ef857ee9365425e41dd9f (patch) | |
| tree | 4be61154f383429cb4c48e60c92b1a02d89832c3 /doc | |
| parent | 2f11fe3663a0f23831b36ef92699d3f358e8a277 (diff) | |
| download | node-new-dbdc9081fa723f62126ef857ee9365425e41dd9f.tar.gz | |
2018-12-03, Version 6.15.1 'Boron' (LTS)
Notable Changes:
This is a patch release to address a bad backport of the fix for "Slowloris
HTTP Denial of Service" (CVE-2018-12122). Node.js 6.15.0 misapplies the headers
timeout to an entire keep-alive HTTP session, resulting in prematurely
disconnected sockets.
PR-URL: https://github.com/nodejs/node/pull/24803
Refs: https://github.com/nodejs/node/pull/24796
Refs: https://github.com/nodejs/node/issues/24760
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/changelogs/CHANGELOG_V6.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/changelogs/CHANGELOG_V6.md b/doc/changelogs/CHANGELOG_V6.md index 1b245b32b8..c2806db4cb 100644 --- a/doc/changelogs/CHANGELOG_V6.md +++ b/doc/changelogs/CHANGELOG_V6.md @@ -10,6 +10,7 @@ </tr> <tr> <td valign="top"> +<a href="#6.15.1">6.15.1</a><br/> <a href="#6.15.0">6.15.0</a><br/> <a href="#6.14.4">6.14.4</a><br/> <a href="#6.14.3">6.14.3</a><br/> @@ -74,6 +75,17 @@ [Node.js Long Term Support Plan](https://github.com/nodejs/LTS) and will be supported actively until April 2018 and maintained until April 2019. +<a id="6.15.1"></a> +## 2018-12-03, Version 6.15.1 'Boron' (LTS), @rvagg + +### Notable Changes + +This is a patch release to address a bad backport of the fix for "Slowloris HTTP Denial of Service" (CVE-2018-12122). Node.js 6.15.0 misapplies the headers timeout to an entire keep-alive HTTP session, resulting in prematurely disconnected sockets. + +### Commits + +* [[`5d9005c359`](https://github.com/nodejs/node/commit/5d9005c359)] - **http**: fix backport of Slowloris headers (Matteo Collina) [#24796](https://github.com/nodejs/node/pull/24796) + <a id="6.15.0"></a> ## 2018-11-27, Version 6.15.0 'Boron' (LTS), @rvagg |