Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release proposal: v0.10.48 #9154

Merged
merged 4 commits into from
Oct 18, 2016
Merged

Release proposal: v0.10.48 #9154

merged 4 commits into from
Oct 18, 2016

Commits on Oct 18, 2016

  1. tls: fix minor jslint failure 

    PR-URL: nodejs#9107
Reviewed-By: Anna Henningsen <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
    @rvagg
    rvagg committed Oct 18, 2016
    Configuration menu
    Copy the full SHA
    b798f59 View commit details
    Browse the repository at this point in the history

  2. deps: c-ares, avoid single-byte buffer overwrite 

    Backport of nodejs#8849 for c-ares
1.9.0.

Incorrect string length calculation when passing escaped dot.

- CVE: CVE-2016-5180
- Upstream bug: https://c-ares.haxx.se/adv_20160929.html

PR-URL: nodejs#9108
Reviewed-By: Ben Noordhuis <[email protected]>
    @rvagg
    rvagg committed Oct 18, 2016
    Configuration menu
    Copy the full SHA
    a14a6a3 View commit details
    Browse the repository at this point in the history

  3. win,build: try multiple timeservers when signing 

    PR-URL: nodejs#9155
Reviewed-By: Johan Bergström <[email protected]>
Reviewed-By: João Reis <[email protected]>
    @rvagg
    rvagg committed Oct 18, 2016
    Configuration menu
    Copy the full SHA
    92b232b View commit details
    Browse the repository at this point in the history

  4. 2016-10-18 Version 0.10.48 (Maintenance) Release 

    This is a security release. All Node.js users should consult the
security release summary at
https://nodejs.org/en/blog/vulnerability/october-2016-security-releases/
for details on patched vulnerabilities.

Notable changes:

* c-ares: fix for single-byte buffer overwrite, CVE-2016-5180, more
  information at https://c-ares.haxx.se/adv_20160929.html
  (Rod Vagg)

PR-URL: nodejs#9154
    @rvagg
    rvagg committed Oct 18, 2016
    Configuration menu
    Copy the full SHA
    262dd62 View commit details
    Browse the repository at this point in the history