diff options
| author | Rod Vagg <rod@vagg.org> | 2018-08-15 19:32:28 +1000 |
|---|---|---|
| committer | Rod Vagg <rod@vagg.org> | 2018-08-16 11:52:38 +1000 |
| commit | 82ab9b336d90206bc5b64662f3052cd14b606705 (patch) | |
| tree | 86eaa54d9cb96406ca0cf036753987cef5f1bbd2 /CHANGELOG.md | |
| parent | 19246de748ccc529751a78c87ae44066feffd9c0 (diff) | |
| download | android-node-v8-82ab9b336d90206bc5b64662f3052cd14b606705.tar.gz android-node-v8-82ab9b336d90206bc5b64662f3052cd14b606705.tar.bz2 android-node-v8-82ab9b336d90206bc5b64662f3052cd14b606705.zip | |
2018-08-15, Version 6.14.4 'Boron' (LTS)
This is a security release. All Node.js users should consult the
security release summary at:
https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/
for details on patched vulnerabilities.
Fixes for the following CVEs are included in this release:
* CVE-2018-0732 (OpenSSL)
* CVE-2018-12115 (Node.js)
Notable changes:
* buffer: Fix out-of-bounds (OOB) write in `Buffer.write()` for UCS-2 encoding
(CVE-2018-12115)
* deps: Upgrade to OpenSSL 1.0.2p, fixing:
* Client DoS due to large DH parameter (CVE-2018-0732)
* ECDSA key extraction via local side-channel (CVE not assigned)
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 2b4ece4b06..119cea11c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -71,7 +71,8 @@ release. <a href="doc/changelogs/CHANGELOG_V8.md#8.0.0">8.0.0</a><br/> </td> <td valign="top"> -<b><a href="doc/changelogs/CHANGELOG_V6.md#6.14.3">6.14.3</a></b><br/> +<b><a href="doc/changelogs/CHANGELOG_V6.md#6.14.4">6.14.4</a></b><br/> +<a href="doc/changelogs/CHANGELOG_V6.md#6.14.3">6.14.3</a><br/> <a href="doc/changelogs/CHANGELOG_V6.md#6.14.2">6.14.2</a><br/> <a href="doc/changelogs/CHANGELOG_V6.md#6.14.1">6.14.1</a><br/> <a href="doc/changelogs/CHANGELOG_V6.md#6.14.0">6.14.0</a><br/> |