From fbc68a5ceafb2f6fdb591dfbad6f7cad7cc55e0a Mon Sep 17 00:00:00 2001 From: Evan Lucas Date: Mon, 11 Jun 2018 18:35:05 -0500 Subject: 2018-06-12, Version 6.14.3 (LTS) Notable changes: * **buffer** (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang PR-URL: https://github.com/nodejs-private/node-private/pull/134 --- doc/changelogs/CHANGELOG_V6.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'doc/changelogs') diff --git a/doc/changelogs/CHANGELOG_V6.md b/doc/changelogs/CHANGELOG_V6.md index 138aab326d..b03f90e090 100644 --- a/doc/changelogs/CHANGELOG_V6.md +++ b/doc/changelogs/CHANGELOG_V6.md @@ -10,6 +10,7 @@ +6.14.3
6.14.2
6.14.1
6.14.0
@@ -70,6 +71,18 @@ [Node.js Long Term Support Plan](https://github.com/nodejs/LTS) and will be supported actively until April 2018 and maintained until April 2019. + +## 2018-06-12, Version 6.14.3 'Boron' (LTS), @evanlucas + +### Notable Changes + +* **buffer** (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang + +### Commits + +* [[`7dbcfc6217`](https://github.com/nodejs/node/commit/7dbcfc6217)] - **src**: avoid hanging on Buffer#fill 0-length input (Сковорода Никита Андреевич) [nodejs-private/node-private#121](https://github.com/nodejs-private/node-private/pull/121) + + ## 2018-04-30, Version 6.14.2 'Boron' (LTS), @MylesBorins -- cgit v1.2.3