@@ -57,17 +57,17 @@ for details on patched vulnerabilities.
5757* ** build** :
5858 - Disable V8 snapshots - The hashseed embedded in the snapshot is
5959 currently the same for all runs of the binary. This opens node up to
60- collision attacks which could result in a Denial of Service. We have
61- temporarily disabled snapshots until a more robust solution is found
62- (Ali Ijaz Sheikh)
60+ collision attacks which could result in a Denial of Service. We have
61+ temporarily disabled snapshots until a more robust solution is found
62+ (Ali Ijaz Sheikh)
6363* ** deps** :
6464 - CVE-2017 -1000381 - The c-ares function ares_parse_naptr_reply(),
6565 which is used for parsing NAPTR responses, could be triggered to
66- read memory outside of the given input buffer if the passed in DNS
67- response packet was crafted in a particular way. This patch checks that
68- there is enough data for the required elements of an NAPTR record (2
69- int16, 3 bytes for string lengths) before processing a record. (David
70- Drysdale)
66+ read memory outside of the given input buffer if the passed in DNS
67+ response packet was crafted in a particular way. This patch checks that
68+ there is enough data for the required elements of an NAPTR record (2
69+ int16, 3 bytes for string lengths) before processing a record. (David
70+ Drysdale)
7171
7272### Commits
7373
@@ -1552,7 +1552,7 @@ Thank you to @italoacasas for preparing the majority of this release.
15521552* ** buffer** :
15531553 - Reverted the runtime deprecation of calling ` Buffer() ` without ` new ` . (Anna Henningsen) [ #9529 ] ( https://github.com/nodejs/node/pull/9529 )
15541554 - Fixed ` buffer.transcode() ` for single-byte character
1555- encodings to ` UCS2 ` . (Anna Henningsen) [ #9838 ] ( https://github.com/nodejs/node/pull/9838 )
1555+ encodings to ` UCS2 ` . (Anna Henningsen) [ #9838 ] ( https://github.com/nodejs/node/pull/9838 )
15561556* ** promise** : ` --trace-warnings ` now produces useful stacktraces for Promise warnings. (Anna Henningsen) [ #9525 ] ( https://github.com/nodejs/node/pull/9525 )
15571557* ** repl** : Fixed a bug preventing correct parsing of generator functions. (Teddy Katz) [ #9852 ] ( https://github.com/nodejs/node/pull/9852 )
15581558* ** V8** : Fixed a significant ` instanceof ` performance regression. (Franziska Hinkelmann) [ #9730 ] ( https://github.com/nodejs/node/pull/9730 )
0 commit comments