diff options
| author | Rod Vagg <rod@vagg.org> | 2016-03-31 03:13:10 -0700 |
|---|---|---|
| committer | Rod Vagg <rod@vagg.org> | 2016-03-31 22:18:24 -0700 |
| commit | 4882ec4e362968d87c5f9023255db677420d8e5d (patch) | |
| tree | 401adaf5f37d92cb3654d763a727a66f1b044599 /CHANGELOG.md | |
| parent | 64c87e2cf4bdac6cdea302d5a5ead36c56f81c65 (diff) | |
| download | android-node-v8-4882ec4e362968d87c5f9023255db677420d8e5d.tar.gz android-node-v8-4882ec4e362968d87c5f9023255db677420d8e5d.tar.bz2 android-node-v8-4882ec4e362968d87c5f9023255db677420d8e5d.zip | |
2016-03-31 Version 0.12.13 (LTS) Release
Notable changes:
* npm: Upgrade to v2.15.1. Fixes a security flaw in the use of
authentication tokens in HTTP requests that would allow an attacker
to set up a server that could collect tokens from users of the
command-line interface. Authentication tokens have previously been
sent with every request made by the CLI for logged-in users,
regardless of the destination of the request. This update fixes this
by only including those tokens for requests made against the
registry or registries used for the current install.
(Forrest L Norvell) https://github.com/nodejs/node/pull/5967
* openssl: OpenSSL v1.0.1s disables the EXPORT and LOW ciphers as they
are obsolete and not considered safe. This release of Node.js turns
on `OPENSSL_NO_WEAK_SSL_CIPHERS` to fully disable the 27 ciphers
included in these lists which can be used in SSLv3 and higher. Full
details can be found in our LTS discussion on the matter
(https://github.com/nodejs/LTS/issues/85).
(Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712
PR-URL: https://github.com/nodejs/node/pull/5967
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index da488ddbde..ec6fbe9f8e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -135,6 +135,22 @@ * [[`f209effe8b`](https://github.com/nodejs/node/commit/f209effe8b)] - **test**: remove timer from test-http-1.0 (Santiago Gimeno) [#5129](https://github.com/nodejs/node/pull/5129) * [[`3a901b0e3e`](https://github.com/nodejs/node/commit/3a901b0e3e)] - **tools**: remove unused imports (Sakthipriyan Vairamani) [#5765](https://github.com/nodejs/node/pull/5765) +## 2016-03-31, Version 0.12.13 (LTS), @rvagg + +### Notable changes + +* npm: Upgrade to v2.15.1. (Forrest L Norvell) +* openssl: OpenSSL v1.0.1s disables the EXPORT and LOW ciphers as they are obsolete and not considered safe. This release of Node.js turns on `OPENSSL_NO_WEAK_SSL_CIPHERS` to fully disable the 27 ciphers included in these lists which can be used in SSLv3 and higher. Full details can be found in our LTS discussion on the matter (https://github.com/nodejs/LTS/issues/85). (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712 + +### Commits + +* [4041ea6bc5] - deps: upgrade npm in LTS to 2.15.1 (Forrest L Norvell) +* [a115779026] - deps: Disable EXPORT and LOW ciphers in openssl (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712 +* [ab907eb5a8] - test: skip cluster-disconnect-race on Windows (Gibson Fahnestock) https://github.com/nodejs/node/pull/5621 +* [9c06db7444] - test: change tls tests not to use LOW cipher (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712 +* [154098a3dc] - test: bp fix for test-http-get-pipeline-problem.js (Michael Dawson) https://github.com/nodejs/node/pull/3013 +* [ff2bed6e86] - win,build: support Visual C++ Build Tools 2015 (João Reis) https://github.com/nodejs/node/pull/5627 + ## 2016-03-23, Version 5.9.1 (Stable), @Fishrock123 ### Notable changes |