@@ -57,17 +57,17 @@ for details on patched vulnerabilities.
57
57
* ** build** :
58
58
- Disable V8 snapshots - The hashseed embedded in the snapshot is
59
59
currently the same for all runs of the binary. This opens node up to
60
- collision attacks which could result in a Denial of Service. We have
61
- temporarily disabled snapshots until a more robust solution is found
62
- (Ali Ijaz Sheikh)
60
+ collision attacks which could result in a Denial of Service. We have
61
+ temporarily disabled snapshots until a more robust solution is found
62
+ (Ali Ijaz Sheikh)
63
63
* ** deps** :
64
64
- CVE-2017 -1000381 - The c-ares function ares_parse_naptr_reply(),
65
65
which is used for parsing NAPTR responses, could be triggered to
66
- read memory outside of the given input buffer if the passed in DNS
67
- response packet was crafted in a particular way. This patch checks that
68
- there is enough data for the required elements of an NAPTR record (2
69
- int16, 3 bytes for string lengths) before processing a record. (David
70
- Drysdale)
66
+ read memory outside of the given input buffer if the passed in DNS
67
+ response packet was crafted in a particular way. This patch checks that
68
+ there is enough data for the required elements of an NAPTR record (2
69
+ int16, 3 bytes for string lengths) before processing a record. (David
70
+ Drysdale)
71
71
72
72
### Commits
73
73
@@ -1552,7 +1552,7 @@ Thank you to @italoacasas for preparing the majority of this release.
1552
1552
* ** buffer** :
1553
1553
- Reverted the runtime deprecation of calling ` Buffer() ` without ` new ` . (Anna Henningsen) [ #9529 ] ( https://github.com/nodejs/node/pull/9529 )
1554
1554
- Fixed ` buffer.transcode() ` for single-byte character
1555
- encodings to ` UCS2 ` . (Anna Henningsen) [ #9838 ] ( https://github.com/nodejs/node/pull/9838 )
1555
+ encodings to ` UCS2 ` . (Anna Henningsen) [ #9838 ] ( https://github.com/nodejs/node/pull/9838 )
1556
1556
* ** promise** : ` --trace-warnings ` now produces useful stacktraces for Promise warnings. (Anna Henningsen) [ #9525 ] ( https://github.com/nodejs/node/pull/9525 )
1557
1557
* ** repl** : Fixed a bug preventing correct parsing of generator functions. (Teddy Katz) [ #9852 ] ( https://github.com/nodejs/node/pull/9852 )
1558
1558
* ** V8** : Fixed a significant ` instanceof ` performance regression. (Franziska Hinkelmann) [ #9730 ] ( https://github.com/nodejs/node/pull/9730 )
0 commit comments