From 97c1fa3d3b98bf1b28cf3362e197ae91093cf68f Mon Sep 17 00:00:00 2001
From: Rod Vagg <rod@vagg.org>
Date: Mon, 13 Aug 2018 19:02:06 +1000
Subject: 2018-08-15, Version 10.9.0 (Current)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Notable changes:

* buffer:
  * Fix out-of-bounds (OOB) write in `Buffer.write()` for UCS-2 encoding
    (CVE-2018-12115)
  * Fix unintentional exposure of uninitialized memory in `Buffer.alloc()`
    (CVE-2018-7166)
* deps:
  * Upgrade to OpenSSL 1.1.0i, fixing:
    - Client DoS due to large DH parameter (CVE-2018-0732)
    - ECDSA key extraction via local side-channel (CVE not assigned)
  * Upgrade V8 from 6.7 to 6.8 (Michaël Zasso) #21079
    - Memory reduction and performance improvements, details at:
      https://v8project.blogspot.com/2018/06/v8-release-68.html
* http: `http.get()` and `http.request()` (and `https` variants) can now accept
  three arguments to allow for a `URL` _and_ an `options` object
  (Sam Ruby) #21616
* Added new collaborators
  * Sam Ruby (https://github.com/rubys)
  * George Adams (https://github.com/gdams)
---
 doc/api/crypto.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'doc/api/crypto.md')

diff --git a/doc/api/crypto.md b/doc/api/crypto.md
index f870a5be98..f77f4213be 100644
--- a/doc/api/crypto.md
+++ b/doc/api/crypto.md
@@ -2144,8 +2144,8 @@ request.
 <!-- YAML
 added: v10.5.0
 changes:
-  - version: REPLACEME
-    pr-url: https://github.com/nodejs/node/pull/XXX
+  - version: v10.9.0
+    pr-url: https://github.com/nodejs/node/pull/21525
     description: The `cost`, `blockSize` and `parallelization` option names
                  have been added.
 -->
@@ -2198,8 +2198,8 @@ crypto.scrypt('secret', 'salt', 64, { N: 1024 }, (err, derivedKey) => {
 <!-- YAML
 added: v10.5.0
 changes:
-  - version: REPLACEME
-    pr-url: https://github.com/nodejs/node/pull/XXX
+  - version: v10.9.0
+    pr-url: https://github.com/nodejs/node/pull/21525
     description: The `cost`, `blockSize` and `parallelization` option names
                  have been added.
 -->
-- 
cgit v1.2.3