From 4913bd41f126abbae887b8ea06a82abee332faea Mon Sep 17 00:00:00 2001 From: Evan Lucas Date: Mon, 11 Jun 2018 08:40:21 -0500 Subject: 2018-06-12, Version 8.11.3 (LTS) Notable changes: * **buffer** (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang * **http2** * (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup * (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0 PR-URL: https://github.com/nodejs-private/node-private/pull/126 --- CHANGELOG.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'CHANGELOG.md') diff --git a/CHANGELOG.md b/CHANGELOG.md index a77bad4724..a07a995be7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -60,7 +60,8 @@ release. 9.0.0
-8.11.2
+8.11.3
+8.11.2
8.11.1
8.11.0
8.10.0
-- cgit v1.2.3