• deps:
  • update openssl to 1.0.2h. (Shigeki Ohtsu) #6551
    • Please see our blog post for more info on the security contents of this release.

Commits

• [f46952e727] - buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#30
• [4f1c82f995] - streams: support unlimited synchronous cork/uncork cycles (Matteo Collina) #6164
• [1efd96c767] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #6551
• [c450f4a293] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
• [baedfbae6a] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
• [ff3045e40b] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
• [dc8dc97db3] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
• [2dfeb01213] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6551
• [72f9952516] - deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6551

Windows 32-bit Installer: https://nodejs.org/dist/v4.4.4/node-v4.4.4-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v4.4.4/node-v4.4.4-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v4.4.4/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v4.4.4/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.4.4/node-v4.4.4.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.4.4/node-v4.4.4-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v4.4.4/node-v4.4.4.tar.gz
Other release files: https://nodejs.org/dist/v4.4.4/
Documentation: https://nodejs.org/docs/v4.4.4/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

3d240db764391faca06df67db1eefd0b20989153edb0a99cbaf16e441e734a4d  node-v4.4.4-darwin-x64.tar.gz
e6a521781d212a760ef63ca139a12a86b8a312f730abc8deb0d8fa8f18d9f357  node-v4.4.4-darwin-x64.tar.xz
a5abc953d1ee4295cd3dcfdc116797e4b807e0b2d5c888aa31631fa1de9a9200  node-v4.4.4-headers.tar.gz
7a3521608274a32b5e609bf76581d6cec838ec369f1b346f73aca58588515fb0  node-v4.4.4-headers.tar.xz
4d7336411a61e92eb4815dc5b9042cae92ed49d3bc472da153aa13fd4e812b99  node-v4.4.4-linux-arm64.tar.gz
e50d47bdd5fe26a249449059244222e06f98513209027bf557bf809e24e17400  node-v4.4.4-linux-arm64.tar.xz
618efa1636db2d8acd7f28902200cbb42fd0f1d71ef482b6e99a027372584581  node-v4.4.4-linux-armv6l.tar.gz
c1a67dc4c7080b4082d165861d44a1f3279adec18279edc927329d153ab5b657  node-v4.4.4-linux-armv6l.tar.xz
64af655f048fc1ba70591076bbdeb61195347942ceef1ea18157467e5a01f253  node-v4.4.4-linux-armv7l.tar.gz
9df9d2bb7335a3118ed20a8332df40659294bfe04896c49d7e4890d7f667c495  node-v4.4.4-linux-armv7l.tar.xz
939cead87316367dd88430807ad335b9bdab4812fe0cd18adf62887c699dd4e7  node-v4.4.4-linux-ppc64le.tar.gz
23cedc2304c1709450689e5a3afe01b749dcb7a5b4f817bf59e97a64b22b60b3  node-v4.4.4-linux-ppc64le.tar.xz
0881eb010c8a4a0e746a1852fe48416d9c21b5f19a20d418cb02c7197fa55576  node-v4.4.4-linux-x64.tar.gz
c8b4e3c6e07e51593dddbf1d2ec3cf0ec09d5c6b8c5258b37b3816cc6b7e9fe3  node-v4.4.4-linux-x64.tar.xz
401fcef7908b3620bd28300bac06ad4fe774c95e10167c8617dde18befd78fcd  node-v4.4.4-linux-x86.tar.gz
7c0771b0153dd1c6609197b7b56840085df5d0752862fe4e98569d8d7bcb8682  node-v4.4.4-linux-x86.tar.xz
0e26458c8490af8f7d1aa4db8ca2792e2089fc0065517225cb30d4f22778b288  node-v4.4.4.pkg
5748ececfb65a5dfa5c7eb87c31e890aff7a32aeea6ae440e382eca34ec16eba  node-v4.4.4-sunos-x64.tar.gz
a2aea1b73dc559db924b4a00884f1ae26c5bea84956e506c7a1b7fbe04b36f5a  node-v4.4.4-sunos-x64.tar.xz
1da8b38983ba9fd8878c2127225396991c8189934e578760f0860ed15302cdd6  node-v4.4.4-sunos-x86.tar.gz
b542392497c7bd03d83cba378f0056b9d1e2c2feb71ba64196ab64a2a8ae67ba  node-v4.4.4-sunos-x86.tar.xz
53c694c203ee18e7cd393612be08c61ed6ab8b2a165260984a99c014d1741414  node-v4.4.4.tar.gz
2c9cedc401145a6648877ebd3fa9090c874dfced8bf7a6e7d9d8e9c21827b114  node-v4.4.4.tar.xz
3bfa87c9feb0107800740fd0a7f950b9259ba73a353274ba60a91d7b4a5279c5  node-v4.4.4-x64.msi
2198827fcc8ee3df77ec7551107409cf2eea02cdd98fed3388242e9f493d8467  node-v4.4.4-x86.msi
7b9884e09881ab6e3ef942f641e766c74ec33dac20c08914aa8778508d4c116b  win-x64/node.exe
a1736c89bf3510dab521fac288228ab3464eca1ee2d5449ff60de2ca6d17a38f  win-x64/node.lib
02565551c3645760e6c466190a94badf8755f4ad789e61e8e40f40c3483590fc  win-x86/node.exe
77bf8aa73cdf0d45b99a7844842e58ca6c4756531e759ea6581d92be8371c139  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJXLK8GAAoJEJM7AfQLXKlGVKUH/jYIvgLWqaQmpYJbgAupUmuo
Av7DB+iKGWFK0Tn2vmeQsWAK7XzIaXHFimldQ8x6lwt5hjH5L4MjA8wQ6zblgT7S
FK/VHWBHd+7T8eTE6D+42g7Umo4lL2D8PbB/ePKuDYYNtzFqllE0ThX+IkNnMRJs
X8xqmzXa7EvEQMiOGzQF0B2gWqovW6m7d0Skm72szT0ldayUUBwQ9z1zE1RVGmlc
lNMAMinZhOdbtCQChOTYRu6dhjdf/MOwHMMrG2AHiasjgKvrMjHBx9kbP/DOrtM4
zIarizzJGPoTU0JEb63JE5OmeR5q1vhblnT/tTo0VB1oeaC7T72vZqxvvyYvekU=
=RKEg
-----END PGP SIGNATURE-----

• npm: Correct erroneous version number in v2.15.1 code (Forrest L Norvell) https://github.com/nodejs/node/pull/5988
• openssl: Upgrade to v1.0.1t, addressing security vulnerabilities (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
  • Fixes CVE-2016-2107 "Padding oracle in AES-NI CBC MAC check"
  • Fixes CVE-2016-2105 "EVP_EncodeUpdate overflow"
  • See https://nodejs.org/en/blog/vulnerability/openssl-may-2016/ for full details

Commits:

• [3e99ee1b47] - deps: completely upgrade npm in LTS to 2.15.1 (Forrest L Norvell) #5988
• [2b63396e1f] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) joyent/node#25368
• [f21705df58] - deps: update openssl asm files (Shigeki Ohtsu) #6553
• [02b6a6bc27] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) joyent/node#25654
• [1aecc668b0] - deps: separate sha256/sha512-x86_64.pl for openssl (Shigeki Ohtsu) joyent/node#25654
• [39380836a0] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6553
• [08c8ae44a8] - deps: upgrade openssl sources to 1.0.1t (Shigeki Ohtsu) #6553
• [f5a961ab13] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) joyent/node#25654
• [810fb211a7] - tools: remove obsolete npm test-legacy command (Kat Marchán) #5988

Windows 32-bit Installer: https://nodejs.org/dist/v0.12.14/node-v0.12.14-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v0.12.14/x64/node-v0.12.14-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v0.12.14/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v0.12.14/x64/node.exe
Mac OS X Universal Installer: https://nodejs.org/dist/v0.12.14/node-v0.12.14.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-darwin-x64.tar.gz
Mac OS X 32-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-darwin-x86.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-linux-x86.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-linux-x64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-sunos-x86.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v0.12.14/node-v0.12.14-sunos-x64.tar.gz
Source Code: https://nodejs.org/dist/v0.12.14/node-v0.12.14.tar.gz
Other release files: https://nodejs.org/dist/v0.12.14/
Documentation: https://nodejs.org/docs/v0.12.14/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

83c5d843c5ba7bd8f1d43711356208eaeda0230e3587fa4a27aac5ae14308d2d  node.exe
47cd92a1db9b8782c3e40e4e6ac85c706ea7e2dcf13e0c7803031885cd3893a1  node.exp
3883d0af51df19e7a44d69d8dacec56ba065c41bfb05f7b1f49c53bae8637d3e  node.lib
d1d9a6fc90707fa364f690decc010d950667841f85e49f088c79829124b914af  node.pdb
b4de40b8fe9cf748b36b9d7764c06f1fc955c73e3547c4eaab3d90a818663e1c  node-v0.12.14-darwin-x64.tar.gz
9c2270a1d92e22f03a8ccc8698ded7947056583336885912ba2f0840cf07fc38  node-v0.12.14-darwin-x64.tar.xz
2ac52efd90931ea04dd01947e19c6320e519967a813f7274eb699bf468fe226d  node-v0.12.14-darwin-x86.tar.gz
8209c23acb175dde1424ccd73945179393cd22791c3d51e24dfeb03f77c955d5  node-v0.12.14-darwin-x86.tar.xz
75f927b98a955207f261d03de5966b167e893da80e641695e6b9d6da44312452  node-v0.12.14-headers.tar.gz
072d68b05038fec7a443240947501b0be12bd33d1b958b1946caa80824beb4ed  node-v0.12.14-headers.tar.xz
0f1f20f6989d32b4b67835f527ae3bf165c1c4a6a7dc3961d489288817956bae  node-v0.12.14-linux-x64.tar.gz
a0b93224939fb638091b4e20c87a75e1c042314d419686f5040b8a48ed7f2112  node-v0.12.14-linux-x64.tar.xz
212a3a5d1cdd34b71476dd615d95da9209b8a5e490dbe6141926e15f1ccfe386  node-v0.12.14-linux-x86.tar.gz
a85432f5da612184baee47d93870b7796776ed15d61670dbec6640621ed4722a  node-v0.12.14-linux-x86.tar.xz
59f7d1426e63ff266b5d7f7ccb3a5b5bc7eea2b1c5d6ed44dd45370235ab4357  node-v0.12.14.pkg
906a44e9f6024c3f9af05a8aac5ba10c25d84bf56b9fb08c5fc1c26c5a8b9d27  node-v0.12.14-sunos-x64.tar.gz
100f724b5f2d1dc263aa70f3cf77af873097157a22d15c883c5cd39e2ffe2520  node-v0.12.14-sunos-x64.tar.xz
f042bee409d4da3114571dfff496a954ea6cd614e7fb78fd3d9b50d799396757  node-v0.12.14-sunos-x86.tar.gz
59ca5e14f1b126887b7c4944ab0423f06011ff7acb3c142bfc486dd85a9f3718  node-v0.12.14-sunos-x86.tar.xz
0a55e57cbd3ffa67525c0d93ac7076d3b2ac70887b11c5c97be3e1953cb50b1d  node-v0.12.14.tar.gz
ed57a1917fb089726b31735e138fb41d897b3c834cfc7c895390b2d273623f1a  node-v0.12.14.tar.xz
5b23e0733ab87adc09bbac9eb1d1341616a346c4ca8a69b4b3539b559de9c7b2  node-v0.12.14-x86.msi
d676d494a36ddfd21041cc07e9fa80f6d21b6fbd5a71f84611f980c410019639  openssl-cli.exe
086f4795edcb076669065a064006085ce415d4d56d89298599a0880ff0d7154a  openssl-cli.pdb
19b2327c0068c8fcd3a8be7a724527627e346ca8e57fb1e3e39b7f80e94bd486  x64/node.exe
61b31c6af9d606bcef77d4a9afa531a597570f92cd5afeeff4e7a4223c2326c8  x64/node.exp
a838e4a513fcbfcbb6f8aad96f240bc4389940e95186b80383e32711accbb6ae  x64/node.lib
2e3cc6017f2f6cc806fae5a27bc2d696fd780558f6c5c1fa7c0df82e6c0084df  x64/node.pdb
53da9c08f72c6260d31b7c70812cc2ad17d5e203860fe1b7c6c85f0ec3d6e2ea  x64/node-v0.12.14-x64.msi
524ce8394e20e8f7a6fd681c7d509e77d015bd16510caaff954a983f0d171a29  x64/openssl-cli.exe
75404fbe3ec01c52e9373b766e59d55bada0404f8f14396e6bcaaefd4e00491a  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJXLKGsAAoJEMJzeS99g1RdI20IANwgtd3Q8omZiXhnSMSMNqt3
AZybwyOKOfGTqxmbmRxlSsllp46lWoj0l+kp0NfiSopXe/+waCpyeIemUtaF9Ag3
3gAtWP3cnw4rPv6CEG1IJu5Q1nHq1HKgMUcW+L5PUCN869SXO/ZREYtAwX4fjg/X
lhqqAss7117nV7vQ1TbkLynEm8uT2S2kOQ8UjKpazp0IobPpSoc0XiodsAkNHKpt
UGSxFKIaAjlF9JsuQw91AYIBJ3658aQw3LnIckymO8xirZE5ek1X8ReuuwhDUszQ
ibXwwI09/AGCfhakitr3NmGG+Pg6gc/UEASTJtxPCVRcrKFcJ5tIWRynaRgV1uM=
=ESJj
-----END PGP SIGNATURE-----

• npm: Correct erroneous version number in v2.15.1 code (Forrest L Norvell) https://github.com/nodejs/node/pull/5987
• openssl: Upgrade to v1.0.1t, addressing security vulnerabilities (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
  • Fixes CVE-2016-2107 "Padding oracle in AES-NI CBC MAC check"
  • See https://nodejs.org/en/blog/vulnerability/openssl-may-2016/ for full details

Commits:

• [3cff81c7d6] - deps: completely upgrade npm in LTS to 2.15.1 (Forrest L Norvell) #5987
• [7c22f19009] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) joyent/node#25368
• [5d78366937] - deps: update openssl asm files (Shigeki Ohtsu) #6553
• [2bc2427cb7] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) joyent/node#25654
• [8df4b0914c] - deps: separate sha256/sha512-x86_64.pl for openssl (Shigeki Ohtsu) joyent/node#25654
• [11eefefb17] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6553
• [61ccc27b54] - deps: upgrade openssl sources to 1.0.1t (Shigeki Ohtsu) #6553
• [aa02438274] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) [joyent/node#25654](https://github.com/joyent/node/

Windows 32-bit Installer: https://nodejs.org/dist/v0.10.45/node-v0.10.45-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v0.10.45/x64/node-v0.10.45-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v0.10.45/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v0.10.45/x64/node.exe
Mac OS X Universal Installer: https://nodejs.org/dist/v0.10.45/node-v0.10.45.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-darwin-x64.tar.gz
Mac OS X 32-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-darwin-x86.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-linux-x86.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-linux-x64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-sunos-x86.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v0.10.45/node-v0.10.45-sunos-x64.tar.gz
Source Code: https://nodejs.org/dist/v0.10.45/node-v0.10.45.tar.gz
Other release files: https://nodejs.org/dist/v0.10.45/
Documentation: https://nodejs.org/docs/v0.10.45/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

5cfddcfcdb0e5a09c54ba1c52a935c43d182b54e013fc0d621d44a710222dc00  node.exe
743c46a6145b25b088ff5a18e3403fa02c4ce9c033b284c762ccd1329de85c37  node.exp
3c7b5f96e272d71b1eaca89a111d19f0e682193306c71687f63a695f40abff07  node.lib
fc15a8a784db0f23617544f663130af8e9d1155eb2ad706fe8387de1d7b62719  node.pdb
d1ab69f49365a0dc6b10a363965452f37f3589adee19974940cbd2b991965e70  node-v0.10.45-darwin-x64.tar.gz
f8acb114faea28a6d58b35025e3fd37b5bb9e8fa9eac4a3796d225c16ba541de  node-v0.10.45-darwin-x64.tar.xz
3db0e42736fbdedc8a985269595251d9c4e4860594ce1eee4a692f8621ee5918  node-v0.10.45-darwin-x86.tar.gz
9544df4ab211e81601a02b681bf8fdec834efde4174ecf0a3f69fec9eab012eb  node-v0.10.45-darwin-x86.tar.xz
94028ba548c1faabb6cb92143392784d3ad07829c16852f5404933eed7d73da7  node-v0.10.45-headers.tar.gz
31d4d84a543bd60ca6c738e1ef243b2b04f87e41566349b8242933812107bcca  node-v0.10.45-headers.tar.xz
54d095d12b6227460f08ec81e50f9db930ec51fa05af1b7722fa85bd2cabb5d7  node-v0.10.45-linux-x64.tar.gz
2fd840bf79480863904860c63f615615077dbc88bd44669eb93c9bf216b4eaf0  node-v0.10.45-linux-x64.tar.xz
0d21b8e9d4213021cd954908098d07407052da1b7a97d6c585f89752c49505b4  node-v0.10.45-linux-x86.tar.gz
2e63e46a818777c3ba57a10406e6e1ab6ceee3b4b861eb195574659e5302ddae  node-v0.10.45-linux-x86.tar.xz
39a4cea90fcd2564db4969a0dd6fe0d57c5593d1758796b8d41dfdda6597baca  node-v0.10.45.pkg
019a1c40daff7b05efb2bd27c586d9ba9c5fe5048550b74e67e171d1495d4e30  node-v0.10.45-sunos-x64.tar.gz
69197c4adf23ff4a3c6c8fa5c35b9ab4d9906015624ef7a8a37d6573535d6116  node-v0.10.45-sunos-x64.tar.xz
39a0790a7e533dd77f473c009c11458a5205cfc438777139a5e9658be63dfee2  node-v0.10.45-sunos-x86.tar.gz
b764e0ad9a80a4a02abcfd33565aaf49d0345c43d8ce7e00b35e8a82cfa1102c  node-v0.10.45-sunos-x86.tar.xz
d184bb74758d4ac69826823934cda1d46e81402fc16ebdb2ecacdc1a8fe0b568  node-v0.10.45.tar.gz
a71070ea7aece9c94450b45102f2d1be42f0add168dd9c9701e9032d363bd4fa  node-v0.10.45.tar.xz
4c3e6c53fb65d789c522e0c4fe03341faae66707b436c389c5d5fd9298baa369  node-v0.10.45-x86.msi
c17e3353d44951611f8929afcedcd3fc9237fe7672037efbbbaab7b1a2d2f007  openssl-cli.exe
1897ea9e230f334a198f71526632a9c1ee16647fa94e6868cdd15ad9e6aa254f  openssl-cli.pdb
949c8455152d1f217708cfcbbfc1be0c54f83b4e71d5cfa142f32d758587bbf6  x64/node.exe
e62c0a6e0d2dd3cfbe5e6d99c71109b79ba72f328079a7d89c6994d71348d029  x64/node.exp
ec4811d93e8508826d98de116bdf0dc858dda3c179c9333d6b5566e1e606c9e4  x64/node.lib
303a39cdc16070aca53a6ab5e8064b6a57f2ac6813dfcd58d3770129d0900515  x64/node.pdb
2f1e8d851bcaf5f1bc3e0498b241d0db53281223333b9a891b64818ab51a2044  x64/node-v0.10.45-x64.msi
264166624c9bcc38fbed31da56ed86e8ba16238b81700f86f6f35d89cb039f21  x64/openssl-cli.exe
0628dee6ddc474eca219a5d5069de1a6f2f3abcb3cd0eee06597e183672e6b5c  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJXLJomAAoJEMJzeS99g1Rdty4IANVJ53QRd5tUepWjxjIwZ6e7
2r2oYSO6uihZkyddV+447KDzxYsGkdg0z4DS3BD7ym78hl4EEMlE/x8wPWBrZKAr
yACZu2U/3ivXYyEOvdV0nlLeUNGMeugTtVxhxSMbf7fK22zeLvLCC9Q4735zhG37
kAF7mw6Sszr+zCMV5eqh5MfYIwaCduck4TfG5ibc8fAQ4A4nUTF6jC0JRbcPXKku
7oT7ol7u8w97Im3ZynvwZZ2yQPAqSxssKjWuLnSmt+Wng7bUregjK04QNCaa8HEV
uPY0qIVSAS2rr1R12dOgqKhgO90gKoUa1qtWGivlvO2HH3JILWMjopb+mu0ZkIc=
=HZGA
-----END PGP SIGNATURE-----

Notable Changes

• assert: deep{Strict}Equal() now works correctly with circular references. (Rich Trott) #6432
• debugger: Arrays are now formatted correctly in the debugger repl. (cjihrig) #6448
• deps: Upgrade OpenSSL sources to 1.0.2h (Shigeki Ohtsu) #6550
• net: Introduced a Socket#connecting property. (Fedor Indutny) #6404
  • Previously this information was only available as the undocumented, internal _connecting property.
• process: Introduced process.cpuUsage(). (Patrick Mueller) #6157
• stream: Writable#setDefaultEncoding() now returns this. (Alexander Makarenko) #5040
• util: Two new additions to util.inspect():
  • Added a maxArrayLength option to truncate the formatting of Arrays. (James M Snell) #6334
    • This is set to 100 by default.
  • Added a showProxy option for formatting proxy intercepting handlers. (James M Snell) #6465
    • Inspecting proxies is non-trivial and as such this is off by default.

Commits

• [76c9ab5fcf] - assert: allow circular references (Rich Trott) #6432
• [7b9ae70757] - benchmark: Fix crash in net benchmarks (Matt Loring) #6407
• [0d1985358a] - build: use shorthand lint target from test (Johan Bergström) #6406
• [7153f96f0e] - build: unbreak -prof, disable PIE on OS X (Ben Noordhuis) #6453
• [8956432e18] - build: exclude tap files from tarballs (Brian White) #6348
• [11e7cc5310] - build: don't compile with -B (Ben Noordhuis) #6393
• [1330496bbf] - cluster: remove use of bind() in destroy() (yorkie) #6502
• [fdde36909c] - crypto: fix error in deprecation message (Rich Trott) #6344
• [2d503b1d4b] - debugger: display array contents in repl (cjihrig) #6448
• [54f8600613] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #6550
• [a5a2944877] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
• [3fe68129c8] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
• [d159462fed] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
• [3af28d3693] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6550
• [e6ab3ece65] - deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6550
• [65b6574d59] - deps: backport IsValid changes from 4e8736d in V8 (Michaël Zasso) #6544
• [33f24c821b] - doc: adds 'close' events to fs.ReadStream and fs.WriteStream (Jenna Vuong) #6499
• [4f728df1bf] - doc: linkify remaining references to fs.Stats object (Kevin Donahue) #6485
• [9a29b50c52] - doc: fix the lint of an example in cluster.md (yorkie) #6516
• [d674493fa5] - doc: add missing underscore for markdown italics (Kevin Donahue) #6529
• [7c30f15e1b] - doc: ensure consistent grammar in node.1 file (justshiv) #6426
• [e5ce53a217] - doc: fix sentence fragment in fs doc (Rich Trott) #6488
• [3e028a143c] - doc: remove obsolete comment in isError() example (cjihrig) #6486
• [969f96a019] - doc: fix a typo in __dirname section (William Luo) #6473
• [ab7055b003] - doc: fix fs.realpath man pg links (phette23) #6451
• [13e660888f] - doc: extra clarification of historySize option (vsemozhetbyt) #6397
• [3d5b732660] - doc: clarifies http.serverResponse implementation (Allen Hernandez) #6072
• [7034ebe2bc] - doc: use Node.js in synopsis document (Rich Trott) #6476
• [4ae39f9863] - doc: remove all scrollbar styling (Claudio Rodriguez) #6479
• [e6c8da45b1] - (SEMVER-MINOR) doc: make writable.setDefaultEncoding() return this (Alexander Makarenko) #5040
• [4068d64f4f] - doc: fix EventEmitter#eventNames() example (Сковорода Никита Андреевич) #6417
• [bfcde97251] - doc: fix incorrect syntax in examples (Evan Lucas) #6463
• [8eb87ee239] - doc: Remove extra space in REPL example (Juan) #6447
• [fd37d54eb5] - doc: added note warning about change to console.endTime() (Ben Page) #6454
• [b3f75ec801] - doc: expand documentation for process.exit() (James M Snell) #6410
• [fc0fbf1c63] - doc: subdivide TOC, add auxiliary links (Jeremiah Senkpiel) #6167
• [150dd36503] - doc: no Node.js(1) (Jeremiah Senkpiel) #6167
• [ab84d69048] - doc: better example & synopsis (Jeremiah Senkpiel) #6167
• [f6d72791a1] - doc: update build instructions for OS X (Rich Trott) #6309
• [36207c6daf] - doc: correctly document the behavior of ee.once(). (Lance Ball) #6371
• [19fb1345ba] - doc: use Buffer.from() instead of new Buffer() (Jackson Tian) #6367
• [fb6753c75c] - doc: fix v6 changelog (James M Snell) #6435
• [2c92a1fe03] - events: pass the original listener added by once (DavidCai) #6394
• [9ea6b282e8] - meta: split CHANGELOG into two files (Myles Borins) #6337
• [cbbe95e1e1] - (SEMVER-MINOR) net: introduce Socket#connecting property (Fedor Indutny) #6404
• [534f03c2f0] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
• [1b9fdba04e] - (SEMVER-MINOR) process: add process.cpuUsage() - implementation, doc, tests (Patrick Mueller) #6157
• [fa9d82d120] - src: unify implementations of Utf8Value etc. (Anna Henningsen) #6357
• [65030c77b7] - test: fix alpn tests for openssl1.0.2h (Shigeki Ohtsu) #6550
• [7641f9a6de] - test: refactor large event emitter tests (cjihrig) #6446
• [5fe5fa2897] - test: make addon testing part of make test (Ben Noordhuis) #6232
• [457d12a0a1] - test: add failing url parse tests as known_issue (James M Snell) #5885
• [089362f8b8] - test,tools: limit lint tolerance of gc global (Rich Trott) #6324
• [6d1606ee94] - test,tools: adjust function argument alignment (Rich Trott) #6390
• [08e0884ae0] - tools: add -F flag for fixing lint issues (Rich Trott) #6483
• [9f23cb24f2] - tools: fix exit code when linting from CI (Brian White) #6412
• [e62c42b8f4] - tools: remove default parameters from lint rule (Rich Trott) #6411
• [66903f6695] - tools: add tests for the doctool (Ian Kronquist) #6031
• [3f608b16a7] - tools: lint for function argument alignment (Rich Trott) #6390
• [91ab769940] - (SEMVER-MINOR) util: truncate inspect array and typed array (James M Snell) #6334
• [0bca959617] - (SEMVER-MINOR) util: fix inspecting of proxy objects (James M Snell) #6465

Windows 32-bit Installer: https://nodejs.org/dist/v6.1.0/node-v6.1.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.1.0/node-v6.1.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.1.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.1.0/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v6.1.0/node-v6.1.0.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.1.0/node-v6.1.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.1.0/node-v6.1.0.tar.gz
Other release files: https://nodejs.org/dist/v6.1.0/
Documentation: https://nodejs.org/docs/v6.1.0/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

481aeab001b6c79589daf3e1f8f5b9ad7021a3979b49fd842313010482ff7b56  node-v6.1.0-darwin-x64.tar.gz
a599974633ffbc8a3964699080d4f369297198eac4e18a990f801a6b42b742e6  node-v6.1.0-darwin-x64.tar.xz
9419fce25791df7afd27d173a1148ef9f53c349cd9a2e8d9bdac5276d80a1bb5  node-v6.1.0-headers.tar.gz
8e35bf983def6f7bc321fbabcd3bf5e7909e30417cb9c43f31171a63cf664b10  node-v6.1.0-headers.tar.xz
87670387877d1cbe36642970e3ca84a77121d3200771b80ec2286bc261e060f7  node-v6.1.0-linux-arm64.tar.gz
7fde2a7b2b7d96d14d3f3f655474434af38583b471973ba3ff07ae29a1f0d821  node-v6.1.0-linux-arm64.tar.xz
aeff5e4b77fba25feb19ec4739116373234e93aff0d2c9662c4ebd87fa4b34ae  node-v6.1.0-linux-armv6l.tar.gz
856120ca6e03501c29fadced18f737487092ad75845247e8e2feea30b97f53c9  node-v6.1.0-linux-armv6l.tar.xz
55d7a2e5071b13db6fe5d952dc5ee5d2223ae4a0de2f2c2d7a68d65e1cfa377b  node-v6.1.0-linux-armv7l.tar.gz
ee9583ee94c602b63d758edb564e944a24d4cadac38bde95b25e4995362297e8  node-v6.1.0-linux-armv7l.tar.xz
bca98e8a4f5c11dee9eb4fec2bd0a42c1f8a921863bba417fc88c7274a0c0c04  node-v6.1.0-linux-ppc64le.tar.gz
5b2b85bbc2f289d3f6c458fa77cdf7c74befccfade02c7a287c6992addcbf3f0  node-v6.1.0-linux-ppc64le.tar.xz
ce46dd0188181b70661b9162feffdbd8a860cb75cb6661c37d6d61982e3f72c5  node-v6.1.0-linux-x64.tar.gz
6ae9d08f8c606810e17db6a6c9ff2689072e27682a0e1875cbb75effa8ae3d5e  node-v6.1.0-linux-x64.tar.xz
07d6f0b11b98c876f2d029722696da6cc9b93a2ce6b34abb7a517e0afb04fb34  node-v6.1.0-linux-x86.tar.gz
41b34eef859fb0d39498bc900778f5e692fe4367b7d1588df3ae1f1f98bc4330  node-v6.1.0-linux-x86.tar.xz
b58bfcbce73dc04342a465dca92d802bf5e437f7da224b6157d6c87fe805c5f6  node-v6.1.0.pkg
d7cbb0bfe0915ac7bdb37e87ea7145f6e86ef2943e77f306c648e47d3d33c898  node-v6.1.0-sunos-x64.tar.gz
930596fb6ddb8aedc3c358002786f207f30b3d7f0b377766d5017452ea36196f  node-v6.1.0-sunos-x64.tar.xz
38ec9537ab2fbf6112365b3a291ebe962d14b384b474e54fa77227b2e98624c9  node-v6.1.0-sunos-x86.tar.gz
254c080b41db83979d200c4ab28fbbc667b8528d9e260ce9f2599293bb17e4a0  node-v6.1.0-sunos-x86.tar.xz
9e67ef0b8611e16e6e311eccf0489a50fe76ceebeea3023ef4f51be647ae4bc3  node-v6.1.0.tar.gz
c7940301917232527490a166df78f9d3d58e70e10fd502f73889d936763cfe84  node-v6.1.0.tar.xz
b32b1105da5c08023976717d9aaeb0e3ba93d09f170aa3d81ad8ddfb0abfbdd4  node-v6.1.0-x64.msi
26b762f6066feeae59107c064eeaf70019880cb113279d51e35dff46c6c81be2  node-v6.1.0-x86.msi
a0f1fa671ae76821dd1098fb67bbc9601bdf5229a1dac5585441d279765d0d20  win-x64/node.exe
135215ad3ff8774386d6525e69d62ca3a24da5a7962f1464e1b5758b58583eb3  win-x64/node.lib
a6391706a5ac17bcf9f8ff5fb9c0359b6787dcfd45a6089f91d36edb49738c69  win-x86/node.exe
17608b03161b6fd3e956ff0a53da0a0d483a3860fa236eb8e1eaf205158916fc  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=/0Ti
-----END PGP SIGNATURE-----

Notable changes

• buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#35
• deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6552

Commits

• [35f06df782] - buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#35
• [99920480ae] - buffer: fix a typo in Buffer example code (Mr C0B) #6361
• [d9f7b025d4] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #6552
• [f316fd20a0] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
• [263cc34657] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389
• [889d1151de] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389
• [ba49b636b8] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6552
• [cdad83a789] - deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6552
• [c1ddefdd79] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389
• [bec5d50f1e] - test: fix alpn tests for openssl1.0.2h (Shigeki Ohtsu) #6552

Windows 32-bit Installer: https://nodejs.org/dist/v5.11.1/node-v5.11.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v5.11.1/node-v5.11.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v5.11.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v5.11.1/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v5.11.1/node-v5.11.1.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v5.11.1/node-v5.11.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v5.11.1/node-v5.11.1.tar.gz
Other release files: https://nodejs.org/dist/v5.11.1/
Documentation: https://nodejs.org/docs/v5.11.1/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

7a992f61dc535c696ba2e236e3664ba669680f7e1a204e42166412cc3476503a  node-v5.11.1-darwin-x64.tar.gz
0fe7b4f9ad94777e642ba5efff0bd899e15fa9fb6799cd22794ac4bd5006cc23  node-v5.11.1-darwin-x64.tar.xz
85072d2f231a947862984ec79f44b990287a6ba1589342c0ac4fea54d9ec88e2  node-v5.11.1-headers.tar.gz
b2a607a0cfb1252014bc01007b7c4d7790c78ba9fbe009accf89c16c06257397  node-v5.11.1-headers.tar.xz
8df5fa56ea1f79efc6f8baa9a6784bb1b0596fb7ef1d631694e35a89b3840de6  node-v5.11.1-linux-arm64.tar.gz
cb09abcd897d44959069c17d29ce6361ad20bd15e94cf72c1c5cd0976a08fa91  node-v5.11.1-linux-arm64.tar.xz
d6ffd43fd0546a5830117bb76979f074a04f9f2323bfc786ca5bd25f254149bc  node-v5.11.1-linux-armv6l.tar.gz
a9f2c90cd7be087dff8f4fb15cf603c1bba9e95f23bd66958c41cbedc72e13a7  node-v5.11.1-linux-armv6l.tar.xz
d69ebad9bb86e2d54b6c8774e5bfd055b507dfd4da4b4a0a9ad8543358fd57de  node-v5.11.1-linux-armv7l.tar.gz
17db8b2a9221ea7455c4471198965a9b6d6bc0c97187265e64925826a072dcaa  node-v5.11.1-linux-armv7l.tar.xz
a349b77703902702ec2ec35de27150d19f73ca44045577c577312a5bde9e0b04  node-v5.11.1-linux-ppc64le.tar.gz
d0653882535519ddc6637a04eeb797b02a4ee708f14dd6cc4d84f44fcb65d0a3  node-v5.11.1-linux-ppc64le.tar.xz
d8e30e79a1e4ad56f55ef59facdf913c950e9664528f59f4388e85fdd899dfde  node-v5.11.1-linux-x64.tar.gz
35ffd25963254decbec1069da318597ed2fb032d2782f7cbdfdd41dc6af99ee9  node-v5.11.1-linux-x64.tar.xz
5c8269b21400327eaae94f52d220127a90eca40ab7574f9da07811c48d25570f  node-v5.11.1-linux-x86.tar.gz
01bcebec40d2030ebfd87fec82249fe1e2919bedcbc4998ee0b1c0365a33e7b4  node-v5.11.1-linux-x86.tar.xz
f06c2d54057c55913749991a6636e78c4180b989a6ee67bdc0017252bfc6c9c9  node-v5.11.1.pkg
65e80b25ba648b62faae99f4f4df86eeea6ed448c592cb638349a63eefcb5d0f  node-v5.11.1-sunos-x64.tar.gz
61507107d14720f1dd24a25bea2bd626ebda63da5d495e5d8f2cdb1a5c03a696  node-v5.11.1-sunos-x64.tar.xz
24e9095e7fdb1765d2acf569209a194b16c048374a804a97fc5fec123b1b9217  node-v5.11.1-sunos-x86.tar.gz
c211f830ccb2198571f0e843101b7c9917ef0feae165c7e28a795b61798968a5  node-v5.11.1-sunos-x86.tar.xz
be1211ce415ecc48412ce3e9d5b48cf9ec8e99b34f25b4e1909a02679cc72fab  node-v5.11.1.tar.gz
f11bc3727e7ea74cffa940be258beaf1f81bee90537d13caa9e748ae6105661f  node-v5.11.1.tar.xz
53c1744bfc845deb4c3a727d9e581f845c34652eb994a81f651a804f67ae749f  node-v5.11.1-x64.msi
b7c6f647a037f17d1dbdb602af8c35934dd06fa4fb8b35108bb311cbddbcb2ab  node-v5.11.1-x86.msi
df52219a3fde636f0fb73e065c85b28904eefd81c16c34ec5e6576b7fd0d886b  win-x64/node.exe
fe0654ca23f0f3c5b290d76efd8f18ba6a6d60445257eb4d59641dc647d33770  win-x64/node.lib
11160ea9fd4ae6db9c0fcee529cfae3d9fb3eed15a0428febbf6033c00494646  win-x86/node.exe
fa3fa032d8b04e65ff20cd34bb0e690f5f88ca023d9783aa5672215f568117b1  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=nE6V
-----END PGP SIGNATURE-----

The following releases have been made available to include the security updates to OpenSSL discussed in the post below. Please upgrade your Node.js installation as soon as possible in order to be protected against the disclosed vulnerabilities.

• Node v6.1.0 (Current): http://nodejs.org/en/blog/release/v6.1.0/
• Node v5.11.1: http://nodejs.org/en/blog/release/v5.11.1/
• Node v4.4.4 (LTS): http://nodejs.org/en/blog/release/v4.4.4/
• Node v0.12.14 (Maintenance): http://nodejs.org/en/blog/release/v0.12.14/
• Node v0.10.45 (Maintenance): http://nodejs.org/en/blog/release/v0.10.45/

Original post is included below, along with an update containing a risk assessment

The OpenSSL project has announced that that they will be releasing versions 1.0.1t and 1.0.2h this week, on Tuesday the 3rd of May, UTC. The releases will fix "several security defects" that are labelled as "high" severity under their security policy, meaning they are:

... issues that are of a lower risk than critical, perhaps due to affecting less common configurations, or which are less likely to be exploitable.

Node.js v0.10 and v0.12 both use OpenSSL v1.0.1 and Node.js v4, v5 and v6 use OpenSSL v1.0.2 and releases from nodejs.org and some other popular distribution sources are statically compiled. Therefore, all active release lines are impacted by this update.

At this stage, due to embargo, it is uncertain the exact nature of these defects, nor what impact they will have on Node.js users, if any. We will proceed as follows:

Within approximately 24 hours of the OpenSSL releases, our crypto team will make an impact assessment for Node.js users of the OpenSSL releases. This information may vary depending for the different active release lines and will be posted here.

As part of that impact assessment we will announce our release plans for each of the active release lines to take into account any impact. Please be prepared for the possibility of important updates to Node.js v0.10, v0.12, v4, v5 and v6 soon after Tuesday, the 3rd of May. It is likely that if upgrades are required that they will be ready on or after Thursday, the 5th of May.

Note that Node.js v5 will be supported until June and will therefore be included in this set of releases.

Please monitor the nodejs-sec Google Group for updates, including an impact assessment and updated details on release timing within approximately 24 hours after the OpenSSL release: https://groups.google.com/forum/#!forum/nodejs-sec

Contact and future updates

The current Node.js security policy can be found at https://nodejs.org/en/security/.

Please contact security@nodejs.org if you wish to report a vulnerability in Node.js.

Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organisation.

(Update 4-May-2016) OpenSSL Impact Assessment

Our crypto team (Ben Noordhuis, Shigeki Ohtsu and Fedor Indutny) have performed an analysis of the defects addressed in this week's OpenSSL releases, 1.0.2h and 1.0.1t. The results of this analysis are included below.

We will be producing new versions this week for all of our active release lines containing the new versions of OpenSSL in order to provide security assurance. We will provide an update here once all releases are available. We anticipate that they will be available on, or soon after, Thursday the 5th of May, UTC.

CVE-2016-2107: Padding oracle in AES-NI CBC MAC check

A man-in-the-middle (MITM) attacker may be able to execute a padding oracle attack to decrypt traffic when a connection uses an AES-CBC cipher and the server runs on an Intel CPU supporting AES-NI. This is a common configuration for TLS servers.

The OpenSSL project has labelled this vulnerability high severity.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-2105: EVP_EncodeUpdate overflow

An overflow can occur in the OpenSSL EVP_EncodeUpdate() function which is used for Base64 encoding of binary data. An attacker must be able to supply large amounts of input data in order to cause an overflow.

Node.js uses the EVP_EncodeUpdate() internally during calls to crypto.Certificate#exportPublicKey() for SPKAC Certificate Signing Requests. User-supplied data must be passed to this method for applications to be vulnerable. This method has been available since Node.js v0.12.

The OpenSSL project has labelled this vulnerability low severity.

• Node.js v0.10 is unaffected
• Node.js v0.12, v4, v5 and v6 are affected

CVE-2016-2108: Memory corruption in the ASN.1 encoder

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2106: EVP_EncryptUpdate overflow

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability

CVE-2016-2109: ASN.1 BIO excessive memory allocation (CVE-2016-2109)

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability

CVE-2016-2176: EBCDIC overread

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability

Node v6.0.0 (Current). Complete changelog from previous releases can be found on GitHub.

See Breaking changes between v5 and v6 for more information.

You may have noticed that the v6 release uses the label Current instead of Stable. This name change has been made in order to better differentiate the Long Term Support releases from the current active development branches. We will be using the Current label from here-on instead of Stable.

World’s Fastest Growing Open Source Platform Pushes Out New Release

Performance improvements are key in this latest release with one of the most significant improvements coming from module loading, which is currently four times faster than Node.js version 4 (Node.js v4). This will help developers dramatically decrease the startup time of large applications for the best productivity in development cycles and more seamless experience with end users. In addition, Node.js v6 comes equipped with v8 JavaScript engine 5.0, which has improved ECMAScript 2015 (ES6) support. Ninety-three percent of ES6 features are also now supported in the Node.js v6 release, up from 56 percent for Node.js v5 and 50 percent for Node.js v4. Key features from ES6 include: default and rest parameters, destructuring, class and super keywords.

See https://nodejs.org/en/blog/announcements/v6-release/ for more information.

Community Updates

• Node Hero - Getting Started With Node.js: you can learn how to get started with Node.js and deliver software products using it.
• A Quick Guide To Reading Node.js Core Source: One person's approach to understanding the source code that makes up Node.js core. "Your mileage may vary. Warranty void if seal is broken."

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

• NodeConf London - May 11th, 2016
• Node.js Live (Beijing) - May, 21st - 22nd, 2016
• NodeConf Brazil - June 4th - 5th, 2016
• NodeConf Adventure 2016, "First batch of NodeConf Adventure tickets are up!", June 9th–12th, 2016 - Walker Creek Ranch, Marin, CA, USA
• Node PDX - June 19-21st, 2016
• NodeConf Argentina - 18 - 19th November, 2016

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

This new major version of Node.js delivers significant improvements in performance, reliability, usability and security. Module loading is nearly four times faster than in Node.js v4, tests and documentation have seen significant improvements, usability of the Buffer and File System APIs have been improved, and Node.js now supports 93% of ES6 language features, thanks to V8 version 5.0.

In accordance with our Long Term Support plan, Node.js v4 'Argon' will continue to be supported as an Active Long Term Support stream until April of 2017, after which it will transition into what we call Maintenance LTS. The new Node.js v6 branch will become the new Active Long Term Support stream in October of this year, and will continue to be supported actively until April of 2018. If our LTS plan is new to you, read more about how it works so that you can make a properly informed decision regarding which version of Node.js to adopt.

The general rule for deciding which version of Node.js to use is:

• Stay on or upgrade to Node.js v4 (currently at v4.4.3) if you need stability and have a complex production environment.
• Upgrade to Node.js v6 if you have the ability to upgrade versions quickly and want to play with the latest features as they arrive.

Note that while v6 will eventually transition into LTS, until it does, we will still be actively landing new features (semver-minor). This means that there is an increased chance for regressions to be introduced..

The release notes below are annotated with the main breaking changes that warrant the jump to v6. Note that because this new version of Node.js is shipping with a new version of V8, you will need to recompile any native addons you have already installed or you will receive a runtime error when trying to load them. Use npm rebuild or simply remove your node_modules directory and npm install from scratch.

What about Node.js v5?

Node.js v5 will continue to be supported for the next two months in order to give developers currently using v5 time to transition to Node.js v6.

What about Node.js v0.10 and v0.12?

If you're still currently using Node.js v0.10 or v0.12, it is time to begin the transition to v4 or v6. Both v0.10 and v0.12 are considered to be in Maintenance mode currently and will fall off our support plan completely later this year.

Current? What happened to Stable?

You may have noticed that the v6 release uses the label Current instead of Stable. This name change has been made in order to better differentiate the Long Term Support releases from the current active development branches. We will be using the Current label from here-on instead of Stable.

Notable changes

The following significant changes have been made since the previous Node.js v5.0.0 release.

• Buffer
  • New Buffer constructors have been added #4682 and #5833.
  • Existing Buffer() and SlowBuffer() constructors have been deprecated in docs #4682 and #5833.
  • Previously deprecated Buffer APIs are removed #5048, #4594.
  • Improved error handling #4514.
  • The Buffer.prototype.lastIndexOf() method has been added #4846.
• Cluster
  • Worker emitted as first argument in 'message' event #5361.
  • The worker.exitedAfterDisconnect property replaces worker.suicide #3743.
• Console
  • Calling console.timeEnd() with an unknown label now emits a process warning rather than throwing #5901.
• Crypto
  • Improved error handling #3100, #5611.
  • Simplified Certificate class bindings #5382.
  • Improved control over FIPS mode #5181.
  • pbkdf2 digest overloading is deprecated #4047.
• Dependencies
  • Reintroduce shared c-ares build support #5775.
  • V8 updated to 5.0.71.35 #6372.
• DNS
  • Add dns.resolvePtr() API to query plain DNS PTR records #4921.
• Domains
  • Clear stack when no error handler #4659.
• Events
  • The EventEmitter.prototype._events object no longer inherits from Object.prototype #6092.
  • The EventEmitter.prototype.prependListener() and EventEmitter.prototype.prependOnceListener() methods have been added #6032.
• File System
  • The fs.realpath() and fs.realpathSync() methods have been updated to use a more efficient libuv-based implementation. This change includes the removal of the cache argument and the method can throw new errors #3594.
  • FS apis can now accept and return paths as Buffers #5616.
  • Error handling and type checking improvements #5616, #5590, #4518, #3917.
  • fs.read's string interface is deprecated #4525.
• HTTP
  • 'clientError' can now be used to return custom errors from an HTTP server #4557.
• Modules
  • Current directory is now prioritized for local lookups #5689.
  • Symbolic links are preserved when requiring modules #5950.
• Net
  • DNS hints no longer implicitly set #6021.
  • Improved error handling and type checking #5981, #5733, #2904.
• OS X
  • MACOSX_DEPLOYMENT_TARGET has been bumped up to 10.7 #6402.
• Path
  • Improved type checking #5348.
• Process
  • Introduce process warnings API #4782.
  • Throw exception when non-function passed to nextTick #3860.
• Querystring
  • The object returned by querystring.parse() no longer inherits from Object.prototype #6055.
• Readline
  • Key info is emitted unconditionally #6024.
  • History can now be explicitly disabled #6352.
• REPL
  • Assignment to _ will emit a warning #5535.
  • Expressions will no longer be completed when eval fails #6328.
• Timers
  • Fail early when callback is not a function #4362.
• Streams
  • null is now an invalid chunk to write in object mode #6170.
• TLS
  • Rename 'clientError' to 'tlsClientError' #4557.
  • SHA1 used for sessionIdContext #3866.
• TTY
  • Previously deprecated setRawMode wrapper is removed #2528.
• URL
  • Username and password will be dropped by url.resolve() if the host changes #1480.
• Util
  • Changes to Error object formatting #4582.
  • The util._extend() method has been deprecated #4903
  • The util.log() method has been deprecated #6161.
• Windows
  • Windows XP and Vista are no longer supported #5167.
• Zlib
  • Multiple improvements have been made to Zlib processing #5883 and #5707.

Commits

Semver-major Changes since v5.0.0

• [85ab4a5f12] - (SEMVER-MAJOR) buffer: add .from(), .alloc() and .allocUnsafe() (James M Snell) #4682
• [2c55cc2d2c] - (SEMVER-MAJOR) buffer: remove deprecated Buffer.write branch (dcposch@dcpos.ch) #5048
• [101bca988c] - (SEMVER-MAJOR) buffer: remove deprecated buffer.get/.set methods (Feross Aboukhadijeh) #4594
• [3b27dd5ce1] - (SEMVER-MAJOR) buffer: throw if both length and enc are passed (Mathias Buus) #4514
• [3fe204c700] - (SEMVER-MAJOR) buffer: docs-only deprecate SlowBuffer (James M Snell) #5833
• [627524973a] - (SEMVER-MAJOR) buffer: add Buffer.allocUnsafeSlow(size) (James M Snell) #5833
• [204f3a8a0b] - (SEMVER-MAJOR) build: Bump MACOSX_DEPLOYMENT_TARGET to 10.7 (Сковорода Никита Андреевич) #6402
• [90a5fc20be] - (SEMVER-MAJOR) build: remove lint/dotfiles from release tarball (Johan Bergström) #5695
• [66f4586dd0] - (SEMVER-MAJOR) cluster: emit worker as first 'message' event arg (Ben Noordhuis) #5361
• [4f619bde4c] - (SEMVER-MAJOR) cluster: migrate from worker.suicide (Evan Lucas) #3743
• [a5cce79ec3] - (SEMVER-MAJOR) console: delete timers that have ended (Vladimir Varankin) #3562
• [1c84579031] - (SEMVER-MAJOR) console: timeEnd() with no label emits warning (Eugene Obrezkov) #5901
• [41feaa89e0] - (SEMVER-MAJOR) crypto: improve error messages (Sakthipriyan Vairamani) #3100
• [f429fe1b88] - (SEMVER-MAJOR) crypto: fail early when loading crypto without openssl (James M Snell) #5611
• [a37401e061] - (SEMVER-MAJOR) crypto: simplify Certificate class bindings (Alexander Makarenko) #5382
• [7c48cb5601] - (SEMVER-MAJOR) crypto: Improve control of FIPS mode (Stefan Budeanu) #5181
• [a1163582c5] - (SEMVER-MAJOR) crypto: pbkdf2 deprecate digest overload. (Tom Gallacher) #4047
• [b010c87164] - (SEMVER-MAJOR) crypto, string_bytes: treat buffer str as utf8 (Fedor Indutny) #5522
• [1d9451bb5a] - (SEMVER-MAJOR) crypto: better error message for createHash (Calvin Metcalf) #6042
• [52af5c4eeb] - (SEMVER-MAJOR) deps: upgrade V8 to 5.0.71.32 (Ali Ijaz Sheikh) #6111
• [2253be95d0] - (SEMVER-MAJOR) deps: reintroduce supporting shared c-ares builds (Johan Bergström) #5775
• [4bc1cccb22] - (SEMVER-MAJOR) dgram: pass null as error on successful send() (cjihrig) #5929
• [dbdbdd4998] - (SEMVER-MAJOR) dns: add resolvePtr to query plain DNS PTR records (Daniel Turing) #4921
• [c4ab861a49] - (SEMVER-MAJOR) dns: add failure test for dns.resolveXXX (Daniel Turing) #4921
• [f3be421c1c] - (SEMVER-MAJOR) dns: coerce port to number in lookupService (Evan Lucas) #4883
• [4d4f3535a9] - (SEMVER-MAJOR) doc: general improvements to fs.markdown (James M Snell) #5616
• [d8290286b3] - (SEMVER-MAJOR) doc: document deprecation of util._extend (Benjamin Gruenbaum) #4903
• [236b7e8dd1] - (SEMVER-MAJOR) doc: doc-only deprecation for util.log() (Jackson Tian) #6161
• [90204cc468] - (SEMVER-MAJOR) domains: clear stack when no error handler (Julien Gilli) #4659
• [e38bade828] - (SEMVER-MAJOR) events: don't inherit from Object.prototype (Brian White) #6092
• [53a95a5b12] - (SEMVER-MAJOR) fs: make fs.watch error message more useful (James M Snell) #5616
• [060e5f0c00] - (SEMVER-MAJOR) fs: Buffer and encoding enhancements to fs API (James M Snell) #5616
• [8bb60e3c8d] - (SEMVER-MAJOR) fs: improve error message for invalid flag (James M Snell) #5590
• [1124de2d76] - (SEMVER-MAJOR) fs: deprecate fs.read's string interface (Sakthipriyan Vairamani) #4525
• [2b15e68bbe] - (SEMVER-MAJOR) fs: fs.read into zero buffer should not throw exception (Feross Aboukhadijeh) #4518
• [8b97249893] - (SEMVER-MAJOR) fs: fix the error report on fs.link(Sync) (yorkie) #3917
• [b488b19eaf] - (SEMVER-MAJOR) fs: optimize realpath using uv_fs_realpath() (Yuval Brik) #3594
• [5f76b24e5e] - (SEMVER-MAJOR) http: overridable clientError (Fedor Indutny) #4557
• [d01eb6882f] - (SEMVER-MAJOR) lib: add 'pid' prefix in internal/util (Minwoo Jung) #3878
• [20285ad177] - (SEMVER-MAJOR) lib: Consistent error messages in all modules (micnic) #3374
• [94b9948d63] - (SEMVER-MAJOR) lib,src: ensure '(node:pid)' prefix for stdout logging (Minwoo Jung) #3833
• [b70dc67828] - (SEMVER-MAJOR) lib,test: remove publicly exposed freelist (cjihrig) #3738
• [d38503ab01] - (SEMVER-MAJOR) module: prioritize current dir for local lookups (Phillip Johnsen) #5689
• [71470a8e45] - (SEMVER-MAJOR) module: pass v8::Object to linked module initialization function (Phillip Kovalev) #4771
• [18490d3d5a] - (SEMVER-MAJOR) module: always decorate thrown errors (Brian White) #4287
• [de1dc0ae2e] - (SEMVER-MAJOR) module: preserve symlinks when requiring (Alex Lamar) #5950
• [b85a50b6da] - (SEMVER-MAJOR) net: remove implicit setting of DNS hints (cjihrig) #6021
• [ec49fc8229] - (SEMVER-MAJOR) net: improve socket.write() error message (Phillip Johnsen) #5981
• [d0edabecbf] - (SEMVER-MAJOR) net: strict checking for internal/net isLegalPort (James M Snell) #5733
• [a78b3344f8] - (SEMVER-MAJOR) net: type check createServer options object (Sam Roberts) #2904
• [02ac302b6d] - (SEMVER-MAJOR) net: Validate port in createServer().listen() (Dirceu Pereira Tiegs) #5732
• [25751bedfe] - (SEMVER-MAJOR) node: deprecate process.EventEmitter (Evan Lucas) #5049
• [08085c49b6] - (SEMVER-MAJOR) path: assert inputs are strings (Brian White) #5348
• [d1000b4137] - (SEMVER-MAJOR) path: make format() consistent and more functional (Nathan Woltman) #2408
• [c6656db352] - (SEMVER-MAJOR) process: add 'warning' event and process.emitWarning() (James M Snell) #4782
• [72e3dd9f43] - (SEMVER-MAJOR) process: throw on non-function to nextTick() (yorkie) #3860
• [5dafb435d8] - (SEMVER-MAJOR) querystring: using toString for objects on querystring.escape (Igor Kalashnikov) #5341
• [dba245f796] - (SEMVER-MAJOR) querystring: don't inherit from Object.prototype (Brian White) #6055
• [0a62f929da] - (SEMVER-MAJOR) readline: emit key info unconditionally (cjihrig) #6024
• [3de9bc9429] - (SEMVER-MAJOR) readline: document emitKeypressEvents() (cjihrig) #6024
• [ca2e8b292f] - (SEMVER-MAJOR) readline: deprecate undocumented exports (cjihrig) #3862
• [0303a2552e] - (SEMVER-MAJOR) readline: allow history to be disabled (surya panikkal) #6352
• [ad8257fa5b] - (SEMVER-MAJOR) repl: Assignment of _ allowed with warning (Lance Ball) #5535
• [3ee68f794f] - (SEMVER-MAJOR) repl: don’t complete expressions when eval fails (Anna Henningsen) #6328
• [757fbac64b] - (SEMVER-MAJOR) src: remove deprecated internal functions (Ben Noordhuis) #6053
• [4e46931406] - (SEMVER-MAJOR) src: deprecate undocumented variables (Jackson Tian) #1838
• [57003520f8] - (SEMVER-MAJOR) src: attach error to stack on displayErrors (cjihrig) #4874
• [e7c077c610] - (SEMVER-MAJOR) stream: make null an invalid chunk to write in object mode (Calvin Metcalf) #6170
• [cc0342a517] - (SEMVER-MAJOR) streams: update .readable/.writable to false (Brian White) #4083
• [652782d137] - (SEMVER-MAJOR) test: update test-repl-require for local paths (Myles Borins) #5689
• [a5aa7c1713] - (SEMVER-MAJOR) test: expand test case for unknown file open flags (James M Snell) #5590
• [2c33819370] - (SEMVER-MAJOR) test: fix tests that check error messages (cjihrig) #3727
• [ac153bd2a6] - (SEMVER-MAJOR) timers: fail early when callback is not a function (Anna Henningsen) #4362
• [1ab6b21360] - (SEMVER-MAJOR) tls: rename clientError to tlsClientError (Fedor Indutny) #4557
• [df268f97bc] - (SEMVER-MAJOR) tls: use SHA1 for sessionIdContext (Stefan Budeanu) #3866
• [8ffa20c495] - (SEMVER-MAJOR) tools: do not rewrite npm shebang in install.py (Evan Lucas) #6098
• [a2c0aa84e0] - (SEMVER-MAJOR) tty: Remove deprecated setRawMode wrapper (Wyatt Preul) #2528
• [eb4201f07a] - (SEMVER-MAJOR) url: drop auth in url.resolve() if host changes (Alex Kocharin) #1480
• [e2f47f5698] - (SEMVER-MAJOR) util: Change how Error objects are formatted (Mudit Ameta) #4582
• [93d6b5fb68] - (SEMVER-MAJOR) util: use consistent Dates in inspect() (Xotic750) #4318
• [24012a879d] - (SEMVER-MAJOR) util: make inspect more reliable (Evan Lucas) #4098
• [007cfea308] - (SEMVER-MAJOR) util: remove pump (Wyatt Preul) #2531
• [4cf19ad1bb] - (SEMVER-MAJOR) util: Remove exec, has been deprecated for years (Wyatt Preul) #2530
• [34a35919e1] - (SEMVER-MAJOR) util: improve typed array formatting (Ben Noordhuis) #3793
• [1cf26c036d] - (SEMVER-MAJOR) win: prevent node from running on Windows Vista or earlier (Alexis Campailla) #5167
• [55db19074d] - (SEMVER-MAJOR) win,msi: prevent from installing on Windows Vista or earlier (Alexis Campailla) #5167
• ['54a5287e3e'] - (SEMVER-MAJOR) zlib: fix gzip member head/buffer boundary issue (Anna Henningsen) #5883
• [8b43d3f52d] - (SEMVER-MAJOR) zlib: do not emit event on *Sync() methods (Rich Trott) #5707

Semver-minor and patch commits since v5.11.0

• [6c1e5ad3ab] - (SEMVER-MINOR) buffer: add Buffer.prototype.lastIndexOf() (dcposch@dcpos.ch) #4846
• [dd67608bfd] - buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#30
• [a4b8000029] - build: update android-configure script for npm (Robert Chiras) #6349
• [40ede46690] - cares: Support malloc(0) scenarios for AIX (Gireesh Punathil) #6305
• [e5f1e2c1df] - deps: upgrade to V8 5.0.71.35 (Ali Ijaz Sheikh) #6372
• [49e42c530b] - deps: upgrade to V8 5.0.71.34 (Ali Ijaz Sheikh) #6320
• [2011f2c6dc] - doc: fix position of fs.readSync() (Jeremiah Senkpiel) #6399
• [29a6c7c1f0] - doc: change references to Stable to Current (Myles Borins) #6318
• [a026cd0fa5] - doc: update authors (James M Snell) #6373
• [92a02d51dc] - doc: add JacksonTian to collaborators (Jackson Tian) #6388
• [879aeb5e49] - doc: add Minqi Pan to collaborators (Minqi Pan) #6387
• [be5d699055] - doc: add eljefedelrodeodeljefe to collaborators (Robert Jefe Lindstaedt) #6389
• [916b1a1d44] - doc: add ronkorving to collaborators (ronkorving) #6385
• [c7066fb853] - doc: add estliberitas to collaborators (Alexander Makarenko) #6386
• [983a809456] - doc: fix broken references (Alexander Gromnitsky) #6350
• [ae991e7577] - doc: add note for platform specific flags fs.open() (Robert Jefe Lindstaedt) #6136
• [f85412d49b] - doc: improvements to child_process, process docs (Alexander Makarenko)
• [f6d90a912b] - doc: fix a typo in the CONTRIBUTING.md (vsemozhetbyt) #6343
• [6815a3b7f9] - doc: add vm example, be able to require modules (Robert Jefe Lindstaedt) #5323
• [7f11634a46] - doc: note that process.config can and will be changed (James M Snell) #6266
• [0e7d57af35] - (SEMVER-MINOR) events: add prependListener() and prependOnceListener() (James M Snell) #6032
• [c1cd64481f] - events: make eventNames() use Reflect.ownKeys() (Luigi Pinca) #5822
• [f1294f5bfd] - gyp: inherit parent for *.host (Johan Bergström) #6173
• [d5922bd7a9] - querystring: fix comments (Brian White) #6365
• [2c480bdae6] - src: fix check-imports.py linter errors (Sakthipriyan Vairamani) #6105
• [5eb4ec090d] - src: squelch -Wunused-variable in non-icu builds (Ben Noordhuis) #6351
• [a3b5b9cbf2] - src: fix out-of-bounds write in TwoByteValue (Anna Henningsen) #6330
• [cdba9a6c02] - src: add intl and icu configs to process.binding('config') (James M Snell) #6266
• [2e974cdd8c] - src: add process.binding('config') (James M Snell) #6266
• [75e073f2b2] - test: increase the platform timeout for AIX (Michael Dawson) #6342
• [84ebf2b40d] - test: add tests for console.assert (Evan Lucas) #6302
• [a770a163ab] - test: v8-flags is sensitive to script caching (Ali Ijaz Sheikh) #6316
• [1e4d053e6b] - test: don't assume IPv6 in test-regress-GH-5727 (cjihrig) #6319
• [a7335bd1f0] - test,benchmark: use deepStrictEqual() (Rich Trott) #6213
• [6781d917f4] - tools: rewrite check-install.sh in python (Sakthipriyan Vairamani) #6105
• [e84c69310f] - tools: enforce deepStrictEqual over deepEqual (Rich Trott) #6213
• [7940ecfa00] - v8: warn in Template::Set() on improper use (Ben Noordhuis) #6277

Windows 32-bit Installer: https://nodejs.org/dist/v6.0.0/node-v6.0.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.0.0/node-v6.0.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.0.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.0.0/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v6.0.0/node-v6.0.0.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: Coming soon
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.0.0/node-v6.0.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.0.0/node-v6.0.0.tar.gz
Other release files: https://nodejs.org/dist/v6.0.0/
Documentation: https://nodejs.org/docs/v6.0.0/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

5be18c5571ce2b33918a3dd0be2f18d2a6939a60754026fb7e7967bec09d9e5e  node-v6.0.0-darwin-x64.tar.gz
9da8c11bf45f8b6b8c6a720cfaa37624d18d6972d8670c565b6e005e643b572a  node-v6.0.0-darwin-x64.tar.xz
f72de0e9403dd4ab7b6eec7266a498ba561afe5d5c7aff77b83894b43c959beb  node-v6.0.0-headers.tar.gz
8b6c5a315fefa7b873cbedd8daf75ee928646df2f05efa60c9c7d3a488851bd1  node-v6.0.0-headers.tar.xz
c4d7da92f76e77d27ef5650ad01085baad74439fab15e5143a8e9fc6cad13101  node-v6.0.0-linux-arm64.tar.gz
68d31984e304e5840591331bdd3eaa375fe07fa96307eb7d4681cea5ccb4e669  node-v6.0.0-linux-arm64.tar.xz
7a29af935545c07ea2eb5bbf6b6fb643765d50ee69d1b4193345a50fb8cb1093  node-v6.0.0-linux-armv7l.tar.gz
5a9b4c275313c1335819924c5028241cf2ee107032c530836b41938916090bd6  node-v6.0.0-linux-armv7l.tar.xz
7044f1049d6d8673cff7b0d38cd8c606be56ba149d3d32b34ca3f017df731a2a  node-v6.0.0-linux-ppc64le.tar.gz
65e208fb8189b264f6e66d0d4974485b5eb83cae2db34cc7d09464cb43142354  node-v6.0.0-linux-ppc64le.tar.xz
78fa76c77a1168095cf5b8a5018e00e7212d11e485cf10c77ce1c8af4955cdd3  node-v6.0.0-linux-x64.tar.gz
1e7aa64e28f26887810df74ca4bb0f3c37c332e866aefd16c23daedfcf67935b  node-v6.0.0-linux-x64.tar.xz
51321999e9706d9c24ea3689a03d049ad96657933228d3ed25d7710bc5d9e9bc  node-v6.0.0-linux-x86.tar.gz
5b1cbe9a5af935619b7d4a36d09cc3b73ea2605a1bd3ab9121920caba6f95a5e  node-v6.0.0-linux-x86.tar.xz
6f2114f02252c40304e3951b058ddababfe94b86e25cd8b3dddbf6aaa295ce71  node-v6.0.0.pkg
dc1345210205380af8fa16a63dca996803af105d7b0e5aa4160df7ed88523f08  node-v6.0.0-sunos-x64.tar.gz
0f69caa00c56e21c44c849e3e82e2fa3c775f441326f2668ac9503bc349eac03  node-v6.0.0-sunos-x64.tar.xz
61259a9794d2ed7b0e5331d5d2158da06f6ed5d31cbeae6d71da4d5e941a7754  node-v6.0.0-sunos-x86.tar.gz
822bd48f5443cc45513747b4ce3aa337ff98e27e8f4c63e6bbba23f7b57d2aa3  node-v6.0.0-sunos-x86.tar.xz
6db56d81a4e07ff4017809ad4ee49a5256fad804cd8527f8724f8e149e3dfc32  node-v6.0.0.tar.gz
f0e5bdc3cf4af85b8a24bdbebed81e1a9f7fda91cab8a9475737940aa90da617  node-v6.0.0.tar.xz
933a15791a67a2740cbd082a8d9aebc43162ec6d4db335abf62121a9561c57d4  node-v6.0.0-x64.msi
614380711039b7cc23db8d8cbf42ed9f4a6f0501eb8a143490f7ece952037bc9  node-v6.0.0-x86.msi
e2e434c5d63d684f0f0f074ee97b5a79fd0d9fbb340bac658f325239aec2589f  win-x64/node.exe
b1c9f9d58ef1fd684f0d136cce002e800c852203f876606b1b641692171783c3  win-x64/node.lib
675199b7db04f95545d8ca650b87b1cc6616e5e6638b854cd7f2bbabb050d533  win-x86/node.exe
c2b83ffce6edfdfee450f07fab28d299b99a1046a5ba9452830126303a0739b6  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQEbBAEBCgAGBQJXH8kkAAoJEHNBsVwHCHesjyEH+NCanRJnIPn6HnO7U26Zjht4
FdNURcOs4ILB+R9vOS0G5OpU5fL8u1PVpPMGhkdOcvV7Xv1Nh1Vm67alOzAFv1Id
pmepNbT/hA5BGmZvt9K/Pp0+LXKXLaRStooof0QMxR8My/M65V1VNsU1CEY2ffSK
oNRf6roxvNPE0JcMmwEBDXnrEZ+hi/8R0hIms6zt6tzUcHmvzkdQ+5sGU07kKRdU
6Ez/0raEteAfzXoUoyerHTzERGP9lE8Gz7TA2vEa2Wz30brBF+FcGw+T+H/nn41N
WHZwA/fyoZo25rPzpXWygG63u7e/2OUv1pUdYp1tjkTJ+ytdb8l4RX/oOGCM4A==
=XFwg
-----END PGP SIGNATURE-----

New “Current” version line focuses on performance improvements, increased reliability and better security for its 3.5 million users

SAN FRANCISCO, April, 26, 2016 — The Node.js Foundation, a community-led and industry-backed consortium to advance the development of the Node.js platform, today announced the release of Node.js version 6 (Node.js v6). This release provides major performance improvements, increased reliability and better security.

With over 3.5 million users and an annual growth rate of 100 percent, Node.js is emerging as a universal platform used for web applications, IoT, mobile, enterprise application development, and microservice architectures. The technology is ubiquitous across numerous industries, from startups to Fortune 500 companies, and is the only unified platform that full stack JavaScript developers can use for front end, back end, mobile and IoT projects.

Performance improvements are key in this latest release with one of the most significant improvements coming from module loading, which is currently four times faster than Node.js version 4 (Node.js v4). This will help developers dramatically decrease the startup time of large applications for the best productivity in development cycles and more seamless experience with end users. In addition, Node.js v6 comes equipped with v8 JavaScript engine 5.0, which has improved ECMAScript 2015 (ES6) support. Ninety-three percent of ES6 features are also now supported in the Node.js v6 release, up from 56 percent for Node.js v5 and 50 percent for Node.js v4. Key features from ES6 include: default and rest parameters, destructuring, class and super keywords.

Security is top-of-mind for enterprises and startups alike, and Node.js v6 has added several features that impact security, making it easier to write secure code. The new Buffer API will reduce the risk of bugs and vulnerabilities leaking into applications through a new constructor method used to create Buffer instances, as well as a zero-fill-buffers command-line flag. Using the new command line flag, developers can continue to safely use older modules that have not been updated to use the new constructor API. In addition, V8 has improved their implementation of Math.random() to be more secure — this feature is added into Node.js v6.

“The Node.js Project has done an incredible job of bringing this version to life in the timeline that we initially proposed in September 2015. It’s important for us to continue to deliver new versions of Node.js equipped with all the cutting-edge JavaScript features to serve the needs of developers and to continue to improve the performance and stability enterprises rely on,” said Mikeal Rogers, Community Manager of the Node.js Foundation. “This release is committed to Long Term Support, which allows predictable long-term stability, reliability, performance and security to the growing number of enterprise users that are adopting Node.js as a key technology in their infrastructure.”

To increase reliability of Node.js, there has been increased documentation and testing done around Node.js v6 for enterprises that are using and looking to implement the platform.

Node.js release versioning follows the Semantic Versioning Specification, a specification for version numbers of software libraries similar to dependencies. Under the Node.js’ Long-Term Support (LTS), version 6 is now the “Current” release line while version 5 will be maintained for a few more months. In October 2016, Node.js v6 will become the LTS release and the LTS release line (version 4) will go under maintenance mode in April 2017, meaning only critical bugs, critical security fixes and documentation updates will be permitted. Users should begin transitioning from v4 to v6 in October when v6 goes into LTS.

Additional Resources

• Download version 6
• Download version 4
• Technical blog with additional new features and updates

About Node.js Foundation Node.js is used by tens of thousands of organizations in more than 200 countries and amasses more than 3.5 million active users per month. It is the runtime of choice for high-performance, low latency applications, powering everything from enterprise applications, robots, API engines, cloud stacks and mobile websites.

The Foundation is made up of a diverse group of companies including Platinum members Famous, IBM, Intel, Joyent, Microsoft, PayPal and Red Hat. Gold members include GoDaddy, NodeSource and Modulus/Progress Software, and Silver members include Apigee, AppDynamics, Codefresh, DigitalOcean, Fidelity, Google, Groupon, nearForm, New Relic, npm, Opbeat, RisingStack, Sauce Labs, SAP, StrongLoop (an IBM company), Sphinx, YLD!, and Yahoo!. Get involved here: https://nodejs.org.

Node v5.11.0 (Stable). Complete changelog from previous releases can be found on GitHub.

Community Updates

• NodeUp podcast episode 100: A Creative Coding Show with Mariko Kosaka, Kassandra Perch, Myles Borins, and Rich Trott.
• A Quick Guide To Reading Node.js Core Source: One person's approach to understanding the source code that makes up Node.js core. "Your mileage may vary. Warranty void if seal is broken."

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

• NodeConf Adventure 2016, "First batch of NodeConf Adventure tickets are up!", June 9th–12th, 2016 - Walker Creek Ranch, Marin, CA, USA

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

• Buffer:
  • Buffer.prototype.compare can now compare sub-ranges of two Buffers. (James M Snell) #5880
• deps:
  • update to http-parser 2.7.0 (Fedor Indutny) #6279
  • update ESLint to 2.7.0 (silverwind) #6132
• net:
  • adds support for passing DNS lookup hints to createConnection() (Colin Ihrig) #6000
• node:
  • Make the builtin libraries available for the --eval and --print CLI options (Anna Henningsen) #6207
• npm:
  • upgrade npm to 3.8.6 (Kat Marchán) #6153
• repl:
  • Pressing enter in the repl will repeat the last command by default if no input has been received. This behaviour was in node previously and was not removed intentionally. (Rich Trott) #6090
• src:
  • add SIGINFO to supported signals (James Reggio) #6093
• streams:
  • Fix a regression that caused by net streams requesting multiple chunks synchronously when combined with cork/uncork (Matteo Collina) #6164
• zlib:
  • The flushing flag is now configurable allowing for decompression of partial data (Anna Henningsen) #6069

Commits

• [14fcb1dded] - assert: respect assert.doesNotThrow message. (Ilya Shaisultanov) #2407
• [332f7382bb] - benchmark: add module loader benchmark parameter (Brian White) #5172
• [473f086a94] - (SEMVER-MINOR) buffer: add Buffer.prototype.compare by offset (James M Snell) #5880
• [d44540f5af] - buffer: standardize array index check (Trevor Norris) #6084
• [bd12d72e0c] - build: fix make tar-headers for Linux (Gibson Fahnestock) #5978
• [3c8d404a82] - build: allow test-ci to run tests in parallel (Johan Bergström) #6208
• [a5f8d0c6ef] - build: remove -f{data,function}-sections flags (Ben Noordhuis) #6077
• [adfb1a4bb0] - child_process: add nullptr checks after allocs (Anna Henningsen) #6256
• [1fb40524ee] - (SEMVER-MINOR) debugger: run last command on presssing enter (Rich Trott) #6090
• [5305831184] - deps: update to http-parser 2.7.0 (Fedor Indutny) #6279
• [8ae200c768] - deps: floating fix for npm's test-node script (Kat Marchán) #6153
• [e3e544eb96] - deps: upgrade npm to 3.8.6 (Kat Marchán) #6153
• [a7104e4516] - deps: cherry-pick 1383d00 from v8 upstream (Fedor Indutny) #6179
• [632e6b9617] - deps: backport 125ac66 from v8 upstream (Myles Borins) #6086
• [4b8376986a] - doc: git mv to .md (Robert Jefe Lindstaedt) #4747
• [e6f4a175d4] - doc: add full example for zlib.flush() (Anna Henningsen) #6172
• [50f3f10ce6] - doc: note that zlib.flush acts after pending writes (Anna Henningsen) #6172
• [985685d170] - doc: fix broken references (Alexander Gromnitsky) #6100
• [d66d883a85] - doc: path.format provide more examples (John Eversole) #5838
• [dc1552e321] - doc: replace functions with arrow functions (abouthiroppy) #6203
• [fa04dfc307] - doc: DCO anchor that doesn't change (William Kapke) #6257
• [b49a5b33b5] - doc: fix http response event, Agent#getName (Matthew Douglass) #5993
• [3b00d7a5b1] - doc: document intention and dangers of fs module Buffer API (Nikolai Vavilov) #6020
• [3bc31526bb] - doc: explain differences in console.assert between node and browsers (James M Snell) #6169
• [3f73502662] - doc: native module reloading is not supported (Bryan English) #6168
• [5f9c8297f1] - doc: clarify fs.watch() and inodes on linux, os x (Joran Dirk Greef) #6099
• [f3c0b78ae4] - doc: add domain postmortem (Trevor Norris) #6159
• [a91834e743] - doc: add stefanmb to collaborators (Stefan Budeanu) #6227
• [117348d082] - doc: add iWuzHere to collaborators (Imran Iqbal) #6226
• [a1c46b63e8] - doc: add santigimeno to collaborators (Santiago Gimeno) #6225
• [976e4bb3da] - doc: add addaleax to collaborators (Anna Henningsen) #6224
• [4fa949ef75] - doc: fix incorrect references in buffer docs (Amery) #6194
• [b26fea1595] - doc: add copy about how to curl SHA256.txt (Myles Borins) #6120
• [daaad47099] - doc: clarification for maxBuffer and Unicode output (James M Snell) #6030
• [5e6915f374] - doc: describe child.kill() pitfalls on linux (Robert Jefe Lindstaedt) #2098
• [a40d0e8f9d] - doc: fix scrolling on iOS devices (Luigi Pinca) #5878
• [a81fca4f99] - doc: add topic - event loop, timers, nextTick() (Jeff Harris) #4936
• [440d1172fd] - doc: add example using algorithms not directly exposed (Brad Hill) #6108
• [96ad5c5303] - doc: update openssl LICENSE using license-builder.sh (Steven R. Loomis) #6065
• [07829b0bc9] - doc: simple doc typo fix (Brendon Pierson) #6041
• [bc0ee06226] - doc: note about Android support (Rich Trott) #6040
• [60a73a2ed2] - doc: fix a typo in 5.10.1's changelog (Vladimir Varankin) #6076
• [b57be92c1b] - gitignore: adding .vs/ directory to .gitignore (Mike Kaufman) #6070
• [6e891c7ad4] - gitignore: ignore VS 2015 *.VC.opendb files (Mike Kaufman) #6070
• [abd101be1a] - http: disallow sending obviously invalid status codes (Brian White) #6291
• [16b23b2c28] - http: skip body and next message of CONNECT res (Fedor Indutny) #6279
• [a259ee4018] - http: unref socket timer on parser execute (Fedor Indutny) #6286
• [d4abca5b27] - lib: remove bootstrap global context indirection (Jeremiah Senkpiel) #5881
• [c8783aff21] - lib,test,tools: alignment on variable assignments (Rich Trott) #6242
• [d5d4f194f1] - net: replace defineGetter with defineProperty (Fedor Indutny) #6284
• [6d9c0c9aa7] - (SEMVER-MINOR) net: support DNS hints in createConnection() (Colin Ihrig) #6000
• [457f24f19c] - (SEMVER-MINOR) node: make builtin libs available for --eval (Anna Henningsen) #6207
• [fc89d17656] - path: fixing a test that breaks on some machines. (Mike Kaufman) #6067
• [1d408099b7] - process: fix incorrect usage of assert.fail() (Rich Trott) #6211
• [07c9f981d6] - (SEMVER-MINOR) repl: keep the built-in modules non-enumerable (Anna Henningsen) #6207
• [5382deaa18] - repl: don’t complete non-simple expressions (Anna Henningsen) #6192
• [2254f1a175] - repl: refactor repl.js (Rich Trott) #6071
• [7d54d85269] - (SEMVER-MINOR) src: add SIGINFO to supported signals (James Reggio) #6093
• [fbc99ba4f1] - src: add missing 'inline' keywords (Ben Noordhuis) #6056
• [20bb92f5c8] - src: use size_t for http parser array size fields (Ben Noordhuis) #5969
• [2fd8be2dbe] - src: replace ARRAY_SIZE with typesafe arraysize (Ben Noordhuis) #5969
• [4392b4aee0] - stream: Fix readableState.awaitDrain mechanism (Anna Henningsen) #6023
• [20dcdd365b] - stream_base: expose bytesRead getter (Fedor Indutny) #6284
• [f69416c06e] - streams: support unlimited synchronous cork/uncork cycles (Matteo Collina) #6164
• [4bfed26d1a] - test: add zlib close-after-error regression test (Anna Henningsen) #6270
• [99d0a61441] - test: move more tests from sequential to parallel (Santiago Gimeno) #6187
• [96be986a77] - test: assert - fixed error messages to match the tests (surya panikkal) #6241
• [4e4efb756e] - test: add test for responses to HTTP CONNECT req (Josh Leder) #6279
• [5b42ef5dfe] - test: move debugger tests to sequential (Rich Trott) #6205
• [9856b804e9] - test: move some test from sequential to parallel (Santiago Gimeno) #6087
• [1d130d0203] - test: move the debugger tests back to parallel (Santiago Gimeno) #6246
• [c0e9c94868] - test: fix issues for ESLint 2.7.0 (silverwind) #6132
• [056a258173] - test: fix flaky test-http-set-timeout-server (Santiago Gimeno) #6248
• [be993fcf6c] - test: fix test-net-settimeout flakiness (Santiago Gimeno) #6166
• [a38b614ae9] - test: fix flaky test-child-process-fork-net (Rich Trott) #6138
• [476535cc0e] - test: fix flaky test-http-client-abort (Rich Trott) #6124
• [6bb7999bd6] - test: refactor test-file-write-stream3 (Rich Trott) #6050
• [a27e95231e] - test: enforce strict mode for test-domain-crypto (Rich Trott) #6047
• [8da4bad1c9] - test: fix pummel test failures (Rich Trott) #6012
• [edd8a15508] - test,repl: use deepStrictEqual for false-y values (Jeremiah Senkpiel) #6196
• [48ecc0b6b5] - test,tools: enable linting for undefined vars (Rich Trott) #6255
• [d809c84bf8] - test,vm: enable strict mode for vm tests (Rich Trott) #6209
• [4a1dfdcc0f] - tools: lint rule for assert.fail() (Rich Trott) #6261
• [fff6a84da5] - tools: enable linting for v8_prof_processor.js (Rich Trott) #6262
• [a2ca347803] - tools: move message listener to worker objects (Brian White) #6212
• [f201b01bf7] - tools: improve js linter (Brian White) #5638
• [be070d775f] - tools: lint for alignment of variable assignments (Rich Trott) #6242
• [d9b8758f47] - tools: update ESLint to 2.7.0 (silverwind) #6132
• [a6056c453e] - tools: fix license-builder.sh again for ICU (Steven R. Loomis) #6068
• [fabc33a075] - tools: remove simplejson dependency (Sakthipriyan Vairamani) #6101
• [d516412cd5] - tools,doc: parse types in braces everywhere (Alexander Makarenko) #5329
• [69eb4a6834] - tools,doc: fix json for grouped optional params (firedfox) #5977
• [a2dd848764] - tools,doc: fix incomplete json produced by doctool (firedfox) #5966
• [bad006f2e1] - zlib: fix use after null when calling .close (James Lal) #5982
• [83bc0a2ac9] - (SEMVER-MINOR) zlib: Make the finish flush flag configurable (Anna Henningsen) #6069
• [2c23e14d5d] - (SEMVER-MINOR) zlib: detect gzip files when using unzip* (Anna Henningsen) #5884
• [61167c3e23] - zlib: fix gzip member head/buffer boundary issue (Anna Henningsen) #5973

Windows 32-bit Installer: https://nodejs.org/dist/v5.11.0/node-v5.11.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v5.11.0/node-v5.11.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v5.11.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v5.11.0/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v5.11.0/node-v5.11.0.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v5.11.0/node-v5.11.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v5.11.0/node-v5.11.0.tar.gz
Other release files: https://nodejs.org/dist/v5.11.0/
Documentation: https://nodejs.org/docs/v5.11.0/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

4992e1ba18cdac51383a089b1494131dbca465a5328938dbd4835cbf780f7ecc  node-v5.11.0-darwin-x64.tar.gz
b450fc3f380c23f98e800abb4feb79760b54ddbc1e504c23f69ac87fabc942be  node-v5.11.0-darwin-x64.tar.xz
d6850717f78dd94238510ec3cb804181a6bd152397def7de4a90dedf08a0eae1  node-v5.11.0-headers.tar.gz
ab0b262cf38de15aa8930d6f497173062832e09f47c95257e8fa433f31e7ab58  node-v5.11.0-headers.tar.xz
b6cc0dd471f07b607367b76a3f2ec1f11d9bc05f2fccbcda7b85ce76d31a3e2a  node-v5.11.0-linux-arm64.tar.gz
646fc0e65744fa8bb5af552ba4727fb588a327aab905bbae3b510a1498951f3f  node-v5.11.0-linux-arm64.tar.xz
6bf29cbf6d78e95a895bfb77774fde49fc3a565d601320b91b7ed5849f01a08d  node-v5.11.0-linux-armv6l.tar.gz
9873fb842c1e632c89a6aa18a1c2bb97abb6860e93d4128e0098cef2cb619753  node-v5.11.0-linux-armv6l.tar.xz
c07487fab4434f667a4b456fab098deffa76d73853e6636ebe05045e7db875de  node-v5.11.0-linux-armv7l.tar.gz
f5e6be7af2f06d63118d181e5d7000c41599cb1b118c79fc8c38de0a52a9620c  node-v5.11.0-linux-armv7l.tar.xz
6d267c7e1294d15d99747437ee74104b941111e7861382da84466c86d7fca139  node-v5.11.0-linux-ppc64le.tar.gz
c8882683c4f02e6eec1b7442ddc9b60e01bfb964524ec9bc9d24f43c4c8fa624  node-v5.11.0-linux-ppc64le.tar.xz
92602b815ce1c64c63b94d6f72f9b96b427415d023d5f9466c7ffef334bf0386  node-v5.11.0-linux-x64.tar.gz
8fffbfc5152e05434f2ff2a80f2ae9fd08952bebd54f57ca731d8e3ffee855ef  node-v5.11.0-linux-x64.tar.xz
f167a644eb6bf94f9a289d28d8140a6a497b02190571b02c7919458e12431ce0  node-v5.11.0-linux-x86.tar.gz
b462a02a0e80c4eb35736a0c2e15c882c443bcceec51fd937bc979aa86efbf6d  node-v5.11.0-linux-x86.tar.xz
a5637b0eb69df94b74744a60603344e6fbba0de9145b944a136474920b8f3d4d  node-v5.11.0.pkg
386fed5acd84eb0d9efe958c951db2e9af2dd469d82e745179285b52a087b553  node-v5.11.0-sunos-x64.tar.gz
20782223853cdfd0c64c18aa7ad5e2789e0a330fadfc79bb341562d54849ec9d  node-v5.11.0-sunos-x64.tar.xz
44dd2e9bae4513bbf586fde1fea11ea310219feece915c21b3a45d4715e14c5e  node-v5.11.0-sunos-x86.tar.gz
9bfd684df327d32e58bb7802c9eba9799a3e5e111720949b7339d11dabee8a4e  node-v5.11.0-sunos-x86.tar.xz
ef41b01a9e49de5a5d160071166f911d0bc9ff6a0bd0e88ea4863df572d95e91  node-v5.11.0.tar.gz
083766aff72fc5c78f6999dd0d00bc0340a052ab270fd60d6928b719ca2b3fd1  node-v5.11.0.tar.xz
5d4185ca686c32fad6d62fa2fcea13f437a04f1fbec2e4ec19998189941c472b  node-v5.11.0-x64.msi
51d7c57d2246d92fbeb325f3bb8b878452829e36edb57110b67e402913cdc194  node-v5.11.0-x86.msi
47d7c3d295be704c7423cfe556b5da99816404c9bb18d49f30947f28b70d358c  win-x64/node.exe
f09c4aa7056f16f019b55b4e592c87fa72a72a94e680545cfdfdcf7ea2cc2f7b  win-x64/node.lib
7167ebafaf12659f0b8adc1853af1fbffc974ecc6b2d74ca4adfbabf21856dfe  win-x86/node.exe
3bb913a5edcb70bbd73eaff625852ebafa843aca081294981a17408e0d0edd40  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJXGTmPAAoJEJM7AfQLXKlGl8sH+wWBJ7sh6SaNEuzAPFGJHDg7
DfnT5ZtdOmKhcFU1TNYv1UkoddhOYGuiU6o64+RaoRQVNTbrS0CktmbZNebe+Ar5
SVNf4ZPVYsqf78lzHkxBgBV8ysxXWL0G0GbOYCbc8PxE8oAmJz+TN5gsxSe3rNci
ksRISXLL0Nt91ef/CEjpODo9Lpf8onmnvFemXz7lm5kLBKZBUGVVRA1XAyg/MgEE
IWlpaGVJRCifLooy+nHBe+cXMomNMZUQZDFitgesHmNbMgNk7jlxorCjrYm/R69f
h7Ojc19+84SaALBwFQ/gqTo8MV47pqNodLo4xP5A8SEwGpDzzTNkVeio4Go64hc=
=imFa
-----END PGP SIGNATURE-----

Node v4.4.3 (LTS) is released.

Node v4.4.3 (LTS) Release

We have one release: Node v4.4.3 (LTS). Complete changelog from previous releases can be found on GitHub.

New Node.js Foundation Survey Reports New “Full Stack” In Demand Among Enterprise Developers

The Node.js User Survey report features insights on emerging trends happening in this massive community that serves as a leading indicator on trends like microservices architectures, real-time web applications, Internet of Things (IoT). The report paints a detailed picture of the technologies that are being used, in particular, with Node.js in production and language preferences (current and future) for front end, back end and IoT developers.

See https://nodejs.org/en/blog/announcements/nodejs-foundation-survey/ for more information.

Community Updates

• NodeUp podcast episode 100: A Creative Coding Show with Mariko Kosaka, Kassandra Perch, Myles Borins, and Rich Trott.
• A Quick Guide To Reading Node.js Core Source: One person's approach to understanding the source code that makes up Node.js core. "Your mileage may vary. Warranty void if seal is broken."

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

• NodeConf Adventure 2016, "First batch of NodeConf Adventure tickets are up!", June 9th–12th, 2016 - Walker Creek Ranch, Marin, CA, USA

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

• deps:
  • Fix --gdbjit for embedders. Backported from v8 upstream. (Ben Noordhuis) #5577
• etw:
  • Correctly display descriptors for ETW events 9 and 23 on the windows platform. (João Reis) #5742
• querystring:
  • Restore throw when attempting to stringify bad surrogate pair. (Brian White) #5858

Commits

• [f949c273cd] - assert: Check typed array view type in deepEqual (Anna Henningsen) #5910
• [132acea0d4] - build: introduce ci targets for lint/benchmark (Johan Bergström) #5921
• [9a8f922dee] - build: add missing openssl_fips% to common.gypi (Fedor Indutny) #5919
• [d275cdf202] - child_process: refactor self=this in socket_list (Benjamin Gruenbaum) #5860
• [aadf356aa2] - deps: backport 8d00c2c from v8 upstream (Ben Noordhuis) #5577
• [200f763c43] - deps: completely upgrade npm in LTS to 2.15.1 (Forrest L Norvell) #5989
• [86e3903626] - dns: Use object without protoype for map (Benjamin Gruenbaum) #5843
• [9a33f43f73] - doc: update openssl LICENSE using license-builder.sh (Steven R. Loomis) #6065
• [9679e2dc70] - doc: clarify that __dirname is module local (James M Snell) #6018
• [86d2af58d6] - doc: simple doc typo fix (Brendon Pierson) #6041
• [f16802f3ca] - doc: note about Android support (Rich Trott) #6040
• [8c2befe176] - doc: note assert.throws() pitfall (Rich Trott) #6029
• [0870ac65f2] - doc: use HTTPS for links where possible (Rich Trott) #6019
• [56755de96e] - doc: clarify stdout/stderr arguments to callback (James M Snell) #6015
• [bb603b89a2] - doc: add 'Command Line Options' to 'View on single page' (firedfox) #6011
• [c91f3d897a] - doc: add copy about how to curl SHA256.txt (Myles Borins) #6120
• [f9cf232284] - doc: add example using algorithms not directly exposed (Brad Hill) #6108
• [f60ce1078d] - doc: document unspecified behavior for buf.write* methods (James M Snell) #5925
• [02401a6cbd] - doc: fix scrolling on iOS devices (Luigi Pinca) #5878
• [aed22d0855] - doc: path.format provide more examples (John Eversole) #5838
• [6e2bfbe1fd] - doc: fix doc for Buffer.readInt32LE() (ghaiklor) #5890
• [940d204401] - doc: consolidate timers docs in timers.markdown (Bryan English) #5837
• [505faf6360] - doc: refine child_process detach behaviour (Robert Jefe Lindstaedt) #5330
• [feedca7879] - doc: add topic - event loop, timers, nextTick() (Jeff Harris) #4936
• [6d3822c12b] - etw: fix descriptors of events 9 and 23 (João Reis) #5742
• [56dda6f336] - fs: Remove unused branches (Benjamin Gruenbaum) #5289
• [dfe9e157c1] - governance: remove target size for CTC (Rich Trott) #5879
• [c4103b154f] - lib: refactor code with startsWith/endsWith (Jackson Tian) #5753
• [16216a81de] - meta: add "joining a wg" section to WORKING_GROUPS.md (Matteo Collina) #5488
• [65fc4e36ce] - querystring: don't stringify bad surrogate pair (Brian White) #5858
• [4f683ab912] - src,tools: use template literals (Rich Trott) #5778
• [ac40a4510d] - test: explicitly set global in test-repl (Rich Trott) #6026
• [a7b3a7533a] - test: be explicit about polluting of global (Rich Trott) #6017
• [73e3b7b9a8] - test: make use of globals explicit (Rich Trott) #6014
• [e7877e61b6] - test: fix flaky test-net-socket-timeout-unref (Rich Trott) #6003
• [a39051f5b3] - test: make arch available in status files (Santiago Gimeno) #5997
• [ccf90b651a] - test: fix test-dns.js flakiness (Rich Trott) #5996
• [1994ac0912] - test: add test for piping large input from stdin (Anna Henningsen) #5949
• [cc1aab9f6a] - test: mitigate flaky test-https-agent (Rich Trott) #5939
• [10fe79b809] - test: fix offending max-len linter error (Sakthipriyan Vairamani) #5980
• [63d82960fd] - test: stdin is not always a net.Socket (Jeremiah Senkpiel) #5935
• [fe0233b923] - test: add known_issues test for GH-2148 (Rich Trott) #5920
• [d59be4d248] - test: ensure _handle property existence (Rich Trott) #5916
• [9702153107] - test: fix flaky test-repl (Brian White) #5914
• [a0a2e69097] - test: move dns test to test/internet (Ben Noordhuis) #5905
• [8462d8f465] - test: fix flaky test-net-socket-timeout (Brian White) #5902
• [e0b283af73] - test: fix flaky test-http-set-timeout (Rich Trott) #5856
• [5853fec36f] - test: fix test-debugger-client.js (Rich Trott) #5851
• [ea83c382f9] - test: ensure win32.isAbsolute() is consistent (Brian White) #6043
• [c33a23fd1e] - tools: fix json doc generation (firedfox) #5943
• [6f0bd64122] - tools,doc: fix incomplete json produced by doctool (firedfox) #5966
• [f7eb48302c] - win,build: build and test add-ons on test-ci (Bogdan Lobor) #5886

Windows 32-bit Installer: https://nodejs.org/dist/v4.4.3/node-v4.4.3-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v4.4.3/node-v4.4.3-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v4.4.3/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v4.4.3/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.4.3/node-v4.4.3.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.4.3/node-v4.4.3-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v4.4.3/node-v4.4.3.tar.gz
Other release files: https://nodejs.org/dist/v4.4.3/
Documentation: https://nodejs.org/docs/v4.4.3/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

7cbb9819926d90c9c9f31c3db4c83499a3d9518ad3c7d9915fa4c66d6d5875df  node-v4.4.3-darwin-x64.tar.gz
9aabc5221d664ff6030abbbd8c94c74c1579cfd91cc39f82508a1da4cff2c42d  node-v4.4.3-darwin-x64.tar.xz
e24fb3eb7c7fe4c5b1ac64a93b63cfc109d56b59bedf2e88a2001f7ce3b1673c  node-v4.4.3-headers.tar.gz
286a884fe4ff5601afcd1352257b6133cf04304859e126cac533c9f1662af38c  node-v4.4.3-headers.tar.xz
261646b9d606ab3cc42f870d4bcaab79a40f18f7b13740762127598ef29d4ffc  node-v4.4.3-linux-arm64.tar.gz
fe65d3992219389cd965cee015571b222948ce46c676e5e0224450439fa26637  node-v4.4.3-linux-arm64.tar.xz
04d8abedf4199d1ca9b963d18458eb9e99f80cc5663e6f61041735dc28c9eb5f  node-v4.4.3-linux-armv6l.tar.gz
b570ba9a8dcb287fa833c0d0dd05f3ad008853a4a445805ef1e17e2ce7c01d03  node-v4.4.3-linux-armv6l.tar.xz
b1cd7144bea5564ae8ca0f653f1e1daf45c63e2a0d0e5c391519aaf7167dbd9e  node-v4.4.3-linux-armv7l.tar.gz
437716a5a9e751196eb25486fc486786a431fe3a632c61728949f4628ccbe83d  node-v4.4.3-linux-armv7l.tar.xz
dd9d9f8a25b1ba67c73af4724ca1abe4e0661d3ffac3d48e57ef3480c8f3cb2a  node-v4.4.3-linux-ppc64le.tar.gz
20af624f1ef5214f34ad5e7fab3cf11cb9bbadce4efeae727602eae03fb037bd  node-v4.4.3-linux-ppc64le.tar.xz
28ff2b23a837526ecfea66b0db42d43ec84368949998f2cb26dd742e8988ec1f  node-v4.4.3-linux-x64.tar.gz
7d8919fa7c6fa927c0fe295fcb16c7025c974b717350e97ddbd7a46d3b60fbef  node-v4.4.3-linux-x64.tar.xz
ffdbb81573d77a2bf14415fc1c0d65b110cfc2ba5a20dcdf8b62015519acd079  node-v4.4.3-linux-x86.tar.gz
93bcf48a9e5c6fdcd030ccfa0bde626466daaf0d8924a98f235e89f517addb76  node-v4.4.3-linux-x86.tar.xz
2e7cfa53c916524add24d7407572ede6d199a0a7b539ba6da67fd5a97c7ebab2  node-v4.4.3.pkg
72ceeafe74e911a418baa5c73cdb2888105c85d62f15245d55009f0e93da543a  node-v4.4.3-sunos-x64.tar.gz
24ab0b4363718b3062b5a1aeb6ce5c41d6444eb5315a8e97be7982cb3ee8049f  node-v4.4.3-sunos-x64.tar.xz
182963950c657aeecb18494c4d3765bcf51970aca938dd4848cf6942382fc730  node-v4.4.3-sunos-x86.tar.gz
4ad7229ca766aa80c412d69d1968a41172090698547829e3f34bcd3e9bd86fa6  node-v4.4.3-sunos-x86.tar.xz
8e67b95721aab7bd721179da2fe5dd97f9acc1306c15c9712ee103bcd6381638  node-v4.4.3.tar.gz
57499bb0b1b86080459d4066e3c138579a278b2d0b1f5b2f19e66c69b4e8433c  node-v4.4.3.tar.xz
388197c171805d97746d29b64d1e98c87dca378e70d5e947875327772bb2d560  node-v4.4.3-x64.msi
1ea07653ae47f71201c9ea0691fdfe4384416666ea70f725030f3b0140d729ca  node-v4.4.3-x86.msi
484b02a6559d6938ee90ac7f86e8b46b22025f3900c8677162af1f381c48c554  win-x64/node.exe
050a3d2743ea783ee63846872e5922f2afeeef0aa576994deafcf25565090b26  win-x64/node.lib
50ceedced779dd320da68e54ca403e9094c0f264cb3ba818cde1bf46ace415b3  win-x86/node.exe
0393695ea383baf27dee1feabd288b2162ed9354ebf5fe6e89ef6bc3f8333d04  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJXDXGUAAoJEJM7AfQLXKlGIwUIALrSiVgRpJI8k93c3ZsAfiPq
h8Q2JSKlk5vvCu/e2GttxaSlwUY6GBCpOyrsD1zEny+9ni37eOKph/T64MVr4rwt
ZXNDOTuz+6/dAUUmPpnkVtJD9c0sWiDXM6PrLjAKnTuL2v8qqrtetKnUaVVtzMB8
DE2bRpWGII/ULOKIAl7Er+G2J5Il5m1sMUnTHxMjrWyauj3kclehmStPSmXgTDjZ
Lmm6BHIEQbm4qESJNsJJ+hhmdblcdMyfXH+vKxtT01XL9zTFzfXuDr8Awj+BHpfC
A5B5lcCTgXo5meJyFisu7MA6zqt9Y7pajr0ecv1JqffwiFURWJUAva2suJ/xMH8=
=OM4J
-----END PGP SIGNATURE-----

Nearly 50 percent of Node.js developers surveyed using container technology, strong growth emerges in cloud, front end, mobile and devices

SAN FRANCISCO, April, 12, 2016 — The Node.js Foundation, a community-led and industry-backed consortium to advance the development of the Node.js platform, today announced the availability of its first ever Node.js User Survey Report.

With over 3.5 million users and an annual growth rate of 100 percent, Node.js is emerging as a universal platform used for web applications, IoT, and enterprise. The Node.js User Survey report features insights on emerging trends happening in this massive community that serves as a leading indicator on trends like microservices architectures, real-time web applications, Internet of Things (IoT). The report paints a detailed picture of the technologies that are being used, in particular, with Node.js in production and language preferences (current and future) for front end, back end and IoT developers.

Key findings from the Node.js Foundation survey

Node.js and Containers Take Off Together

Both Node.js and containers are a good match for efficiently developing and deploying microservices architectures. And, while the surge in container use is relatively new, 45 percent of developers that responded to the survey use Node.js with the technology. Other container-related data points:

• 58 percent of respondents that identified as IoT developers use Node.js with Docker.
• 39 percent of respondents that identified as back end developers use Node.js with Docker.
• 37 percent of respondents that identified as front end developers use Node.js with Docker.

Node.js — the Engine that Drives IoT

JavaScript and Node.js have risen to be the language and platform of choice for IoT as both are suited for data intensive environments that require parallel programming without disruption. JavaScript, including Node.js and frameworks, such as React, have become the de facto choice of developers working in these connected, device-driven environments with 96 percent of IoT respondents indicating they use JavaScript/Node.js for development.

“Data about developer choices is catnip for developers,” said James Governor, RedMonk co-founder. “In this survey, the Node.js Foundation identifies some interesting results, notably about languages programmers are using alongside Node.js and IoT demographics.”

These environments are challenging, and the survey revealed that on average, IoT developers using Node.js have more experience than their front end and back end counterparts with more than 40 percent of IoT developers surveyed having over 10+ years of development experience.

Additionally, although Docker is a server technology, many IoT developers (58%) are using Node.js with Docker compared to only 39 percent of back end developers. This metric is significant as it means that the new IoT world also is quickly adopting containers and microservices.

Node.js Becoming Universal Platform

The full stack is no longer “front end and back end,” but rather “front end, back end and connected devices,” which is a combination of everything from the browser to a toaster all being run in JavaScript and enabled by Node.js. The survey revealed that 62 percent of respondents are using Node.js for both front end and back end development, and nearly 10 percent are using Node.js for front end, back end, and IoT development.

Node.js Pervasive in Enterprises

Node.js is increasingly used in the enterprise, and used within huge enterprises like PayPal, Go Daddy, Capital One, and Intel. The survey found:

• More than 45 percent already using the Node.js Long Term Support release (v4) geared toward medium to large enterprise users who require stability and high performance.
• Of those who haven’t upgraded, 80 percent report definite plans to upgrade to v4, with half of respondents planning to do so this year.
• Strong interest in enterprise tooling among 34 percent of tech leaders.

Full “MEAN” Stack Explodes

The popularity of real-time, social networking and interactive game applications is pushing a new stack among developers. The MEAN stack is able to handle lots of concurrent connections and extreme scalability, which these applications demand. Node.js, in combination with MongoDB, Express, AngularJS, allows developers to tackle the needs of front end and back end development. Not surprisingly, all of these technologies were commonly used alongside Node.js. Express, cited the most, is used by an average of 83 percent of developers.

Popularity of JavaScript and Node.js

JavaScript and Node.js were popular among back end, front end, and IoT developers. Other languages, beyond JavaScript, that were popular for all three developer types included PHP, Python and Java. However, when looking to the future, back end, front end and IoT developers planned to decrease their use of Java, .Net and PHP (PHP averages a 15% decrease) and increase the use of Python and C++.

About the Survey

The survey was open for 15 days, from January 13 to January 28, 2016. During this time, 1,760 people from around the world completed the survey. Seventy percent were developer's, 22 percent technical management and 64 percent run Node.js in production. Geographic representation of survey covered: 35 percent from United States, 22 percent from Continental Europe, 6 percent India, and 6 percent from United Kingdom with the remaining respondents hailing from Asia, Latin America, Africa, Russia and the Middle East.

Additional Resources:

• Node.js Foundation User survey infographic
• Report summarizing Node.js Foundation User Survey 2016

About Node.js Foundation

Node.js is used by tens of thousands of organizations in more than 200 countries and amasses more than 3 million active users per month. It is the runtime of choice for high-performance, low latency applications, powering everything from enterprise applications, robots, API engines, cloud stacks and mobile websites.

The Foundation is made up of a diverse group of companies including Platinum members Famous, IBM, Intel, Joyent, Microsoft, PayPal and Red Hat. Gold members include GoDaddy, NodeSource and Modulus/Progress Software, and Silver members include Apigee, AppDynamics, Codefresh, DigitalOcean, Fidelity, Google, Groupon, nearForm, New Relic, npm, Opbeat, RisingStack, Sauce Labs, SAP, StrongLoop (an IBM company), Sphinx, YLD!, and Yahoo!. Get involved here: http://nodejs.org.

http:

• Enclose IPv6 Host header in square brackets. This will enable proper seperation of the host adress from any port reference (Mihai Potra) #5314

path:

• Make win32.isAbsolute more consistent (Brian White) #6028

Commits

• [0f5a51ae4b] - assert: Check typed array view type in deepEqual (Anna Henningsen) #5910
• [e966d1f5db] - buffer: don't set kNoZeroFill flag in allocUnsafe (Vladimir Kurchatkin) #6007
• [3f75751c2e] - build: introduce ci targets for lint/benchmark (Johan Bergström) #5921
• [781290b61d] - doc: refine child_process detach behaviour (Robert Jefe Lindstaedt) #5330
• [aa9fb03202] - doc: use HTTPS for links where possible (Rich Trott) #6019
• [dd25984838] - doc: note assert.throws() pitfall (Rich Trott) #6029
• [f879f5e68a] - doc: document unspecified behavior for buf.write* methods (James M Snell) #5925
• [f12c3861e0] - doc: clarify stdout/stderr arguments to callback (James M Snell) #6015
• [ce173716be] - doc: add 'Command Line Options' to 'View on single page' (firedfox) #6011
• [7337ef6422] - doc: minor argument formatting in stream.markdown (James M Snell) #6016
• [0ae5d027c6] - doc: clarify that __dirname is module local (James M Snell) #6018
• [8bec8aa41f] - doc: consolidate timers docs in timers.markdown (Bryan English) #5837
• [0a13099c42] - etw: add event messages (João Reis) #5936
• [c6ac6f2ea1] - http: Corrects IPv6 address in Host header (Mihai Potra) #5314
• [8317778925] - meta: add "joining a wg" section to WORKING_GROUPS.md (Matteo Collina) #5488
• [f3f19ee5e2] - net: refactor self=this to arrow functions (Benjamin Gruenbaum) #5857
• [1c4007927d] - path: fix win32.isAbsolute() inconsistency (Brian White) #6028
• [059b607a4f] - test: make use of globals explicit (Rich Trott) #6014
• [cc8fcc5a07] - test: be explicit about polluting of global (Rich Trott) #6017
• [7db7a820b9] - test: make arch available in status files (Santiago Gimeno) #5997
• [02f2ebd9b4] - test: explicitly set global in test-repl (Rich Trott) #6026
• [2ab1237137] - test: fix flaky test-net-socket-timeout-unref (Rich Trott) #6003
• [0127c2bd39] - test: fix test-dns.js flakiness (Rich Trott) #5996
• [6052ced37f] - test: fix error message checks in test-module-loading (James M Snell) #5986
• [a40b0cb673] - test: refactor http-end-throw-socket-handling (Santiago Gimeno) #5676
• [96bb315262] - test: ensure _handle property existence (Rich Trott) #5916
• [4f1fa2adeb] - test: fix offending max-len linter error (Sakthipriyan Vairamani) #5980
• [f14d71ccea] - test: stdin is not always a net.Socket (Jeremiah Senkpiel) #5935
• [50a062e691] - tools: remove obsolete lint config file (Rich Trott) #5959
• [7491fdcfe9] - tools: remove disabling of already-disabled rule (Rich Trott) #6013

Windows 32-bit Installer: https://nodejs.org/dist/v5.10.1/node-v5.10.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v5.10.1/node-v5.10.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v5.10.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v5.10.1/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v5.10.1/node-v5.10.1.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v5.10.1/node-v5.10.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v5.10.1/node-v5.10.1.tar.gz
Other release files: https://nodejs.org/dist/v5.10.1/
Documentation: https://nodejs.org/docs/v5.10.1/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

00ffc5c662580e1a5062a8740a9b9a40dbf7dadb5c8aa16bdf0ed33c7c1dfbfb  node-v5.10.1-darwin-x64.tar.gz
52d6103a14690c4541e6924d28687b23dbcf65cd171a50529db0998004e888c7  node-v5.10.1-darwin-x64.tar.xz
77e1469d6c2c6f49e68cb3fb8052ee90284700e7da013a7d47ad1cefcd8afc63  node-v5.10.1-headers.tar.gz
a3c5c8f545ca320305128731f546a24387719768ccf5fa8a5e3059ee26f43370  node-v5.10.1-headers.tar.xz
98e4f003818968d5b9bcf17c921d33a5e3d6866be63d80510ae7ff8877e817db  node-v5.10.1-linux-arm64.tar.gz
2c264c596a9bf1a962b37ea51afa3540f819a1428627a28b6a25abe284eb04ab  node-v5.10.1-linux-arm64.tar.xz
5d6f652ce962a0fb59edf5e305af3a7e9147489ebb90a1244f3fa67d86fcf54b  node-v5.10.1-linux-armv6l.tar.gz
bfa551df4739d3f975c4114f1e87b0060bb1998d27b4916a0238561bd4478e7c  node-v5.10.1-linux-armv6l.tar.xz
f1ccddf5fc894a4a4becdf9b32e579b2aad6c6ace189890dbdcb934afbaab060  node-v5.10.1-linux-armv7l.tar.gz
d35134ec4c6ac723da20898c3061c11b71823e09167cf830ab56983cb33affeb  node-v5.10.1-linux-armv7l.tar.xz
b7137dc0bc9a6e3a91be67f05330d2722d58b4e50047d3455a7c035c455701b4  node-v5.10.1-linux-ppc64le.tar.gz
2bc959b36318c0a64b86e0eedbc5179b59db9a8b4f1577039182d7c283b1ffc2  node-v5.10.1-linux-ppc64le.tar.xz
897506e1e83cba9b780b030c9cc7299b0ae8872c0b8b0081a86996079025cea5  node-v5.10.1-linux-x64.tar.gz
edc2afd401d5bbbc05aee186e94ea21078bd4d733da0fc1e95cb8dfbae04bcc8  node-v5.10.1-linux-x64.tar.xz
a4c17570bd03424cd57affd10a4ef7d3b76167d3646656236bc78b86bc622a88  node-v5.10.1-linux-x86.tar.gz
d2fd77706d6b122f978ac68eba540e3ad8efb93909b56a1fe944af81b74b552e  node-v5.10.1-linux-x86.tar.xz
9bf1a7a92debe7613e6ff0d1852aa09e8ed95cf01f276e71848d44235059423a  node-v5.10.1.pkg
0cb823dacc340aa79b70a08d7d81a72260c3414b6f07398ab80e755efcc93f85  node-v5.10.1-sunos-x64.tar.gz
780c323919d1912989784e5577212a56856e3ceb7eab11a8d3d43bf6a7da3582  node-v5.10.1-sunos-x64.tar.xz
1d2731f7ffb46d9f2153993f24ac36a5e98dd136ad28600e45d918205997403f  node-v5.10.1-sunos-x86.tar.gz
75096b173bbbd920b2039b3ede985025f0c8dc91f999224626163d3cb9458cb5  node-v5.10.1-sunos-x86.tar.xz
c6e278b612b53c240ddf85521403e55abfd8f0201d2f2c7e3d2c21383054aacd  node-v5.10.1.tar.gz
9eecd853cdd06ebee24a1bb8d753cd20af5a19297c5d3a3b1680fe36b47d5cbe  node-v5.10.1.tar.xz
a1207fa1e831c1347d338546e353ea195d5cb1acb7e290dad8836153aad11c35  node-v5.10.1-x64.msi
87a902472fe0458ee444456ef5a9bdbd9247c7747b4deeb7a7ded43e56b43daa  node-v5.10.1-x86.msi
4985991e02af90ca5628a6f3e5aa8d913c72b1c898fa0202db47cb757b576ac9  win-x64/node.exe
8b2c8cfb473fa45bf24567302c0f5adf4d573afc13d27797e717dc0696336f01  win-x64/node.lib
bbf7ca1d2bb2c590d97e785bbc7fe0f5478b4ee586d47a0e95ca6cff1b9f968b  win-x86/node.exe
23be78c07830ad80f1b188dd9ef38dc9e267728d1f09acd435b42914875ae89d  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJXBEq/AAoJEJM7AfQLXKlGLc8H/1tjkCtDxKsrVWCTdTA+L4nD
qkptH/E78gmGSq6BjQUV/usfhJVvH4kot9OGjIAs9rJezSco+y2jLkNfo6gm4SSt
tI6pFxrZDnBC+qtXcdCcfjXiRhmPVInJVLHnU0H6BhkMEHcyjyPHim+UNIfbmOB4
MD+Lduqf6xe8VTscipPujXFsS6B2XT2pMFCAyUJqz2xd23QubAGWSLWJ/eK3P0h5
hhC7EHoVDkVhlByRhuSK74yKqm8jb4Rtv1tYJi2UM8Ip/XQhM+YcLFV3+k7e5huu
X7sIluHGRzjaqts4BR79Fr0i80yBL06b7JCDl8McMn1wfZPDG+E/iSnU/zfS7g8=
=aUEi
-----END PGP SIGNATURE-----

Please note that the version of npm included in this release does not have the correct version string. As such executing npm -v will report 2.15.0 rather than 2.15.1, which is incorrect. The source code included in this release is in fact the source for 2.15.1, including the security fix.

Notable changes:

• npm: Upgrade to v2.15.1. Fixes a security flaw in the use of authentication tokens in HTTP requests that would allow an attacker to set up a server that could collect tokens from users of the command-line interface. Authentication tokens have previously been sent with every request made by the CLI for logged-in users, regardless of the destination of the request. This update fixes this by only including those tokens for requests made against the registry or registries used for the current install. IMPORTANT: This is a major upgrade to npm v2 LTS from the previously deprecated npm v1. (Forrest L Norvell) https://github.com/nodejs/node/pull/5967
• openssl: OpenSSL v1.0.1s disables the EXPORT and LOW ciphers as they are obsolete and not considered safe. This release of Node.js turns on OPENSSL_NO_WEAK_SSL_CIPHERS to fully disable the 27 ciphers included in these lists which can be used in SSLv3 and higher. Full details can be found in our LTS discussion on the matter (https://github.com/nodejs/LTS/issues/85). (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712

Commits:

• [feceb77d7e] - deps: upgrade npm in LTS to 2.15.1 (Forrest L Norvell) https://github.com/nodejs/node/pull/5968
• [0847954331] - deps: Disable EXPORT and LOW ciphers in openssl (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712
• [6bb86e727a] - test: change tls tests not to use LOW cipher (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712
• [905bec29ad] - win,build: support Visual C++ Build Tools 2015 (João Reis) https://github.com/nodejs/node/pull/5627

Windows 32-bit Installer: https://nodejs.org/dist/v0.10.44/node-v0.10.44-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v0.10.44/x64/node-v0.10.44-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v0.10.44/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v0.10.44/x64/node.exe
Mac OS X Universal Installer: https://nodejs.org/dist/v0.10.44/node-v0.10.44.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-darwin-x64.tar.gz
Mac OS X 32-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-darwin-x86.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-linux-x86.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-linux-x64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-sunos-x86.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v0.10.44/node-v0.10.44-sunos-x64.tar.gz
Source Code: https://nodejs.org/dist/v0.10.44/node-v0.10.44.tar.gz
Other release files: https://nodejs.org/dist/v0.10.44/
Documentation: https://nodejs.org/docs/v0.10.44/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ad1ab74e1315828a7fd1452e565791a0544ca6c86c76ddd9275287c84ccaca74  node.exe
e9142dda53c17fb84a30438a4f4b69f8f474750d1cf32b4057edaea2309b3aec  node.exp
5b2b75d133380996a6c0433944c61d47777389bbcba9ffdd20ef0c37a28f1565  node.lib
cf46dd07a29abfadf9096d5b29878618433cc6ef5307f523ae283e7b1150e660  node.pdb
cc9916991a16395c4a561db6d091a9a1e9af13e66dddbd03d3c687d0ab3e52a9  node-v0.10.44-darwin-x64.tar.gz
d9aa4cdae49798b45818ddcd38cc8781a591e2b1c6d6c9c9599205353771d602  node-v0.10.44-darwin-x64.tar.xz
7c582b190050d268b4fa4d1a4e4b3456be1a9c224407a4ef61258af6e95f01d8  node-v0.10.44-darwin-x86.tar.gz
e1920de5cf492079a44113c5f5bf4954b73ad8ae26a79c196bb915ce31766a85  node-v0.10.44-darwin-x86.tar.xz
1f61b9a97e4a4100ad601661d3e53556fc8287c36cc56a7c9bf1617b30c5eed4  node-v0.10.44-headers.tar.gz
28192921448ec80632ec5a34aca438136b7384e35878fbf4c8486825590e67ef  node-v0.10.44-headers.tar.xz
b5f4acc54e5527d793463e05b5435f11dd1f0997168aa71d53a1ff1a06c7b144  node-v0.10.44-linux-x64.tar.gz
1c72d19eb4c505a3e6c76038b9c25fc1fee09829215f67e040e363996b160c14  node-v0.10.44-linux-x64.tar.xz
8eb2b47928f56b0a7bbbde72074af84bc8864544b75f991facc3fbf4d7ed0c99  node-v0.10.44-linux-x86.tar.gz
45c300fafc8a71c240c94ca8b43701edf5fbdaa1d80ac449b96d46922b61ce0f  node-v0.10.44-linux-x86.tar.xz
53a918e31ea61cf5106b3cfcedbe5b331cbca0f6508abbf02a77a9bbdc78aeb3  node-v0.10.44.pkg
ee2867b193b53ffab308bea6f0e4c197222903ae308b1748eceaa786402d6c15  node-v0.10.44-sunos-x64.tar.gz
3ce6599f526e1cca2fe2d736e946c34c1f830926987cabd8c22066dc5511ba99  node-v0.10.44-sunos-x64.tar.xz
0b385a3aa1f9122bca205515917a2406ab24782ecbbb886ceb5dcba93f3a9758  node-v0.10.44-sunos-x86.tar.gz
c2cd71e47ac8e2565e4c176e78f22c6ff45752dd0ddc32fa4251f4d6fa17d18a  node-v0.10.44-sunos-x86.tar.xz
4155639d71e690cafd885f58a8be3bf97a93c28875212aac991923d3ee589be8  node-v0.10.44.tar.gz
25b2cd910822723e972a3990d5687b7ff48581ad2f77aa1942d99a1b024f434a  node-v0.10.44.tar.xz
7052fecac6a3c4969d62dc655f1ae4c98bc00323e16e9a3ec4dfabd85da2e2fa  node-v0.10.44-x86.msi
977af6c6b87b2cedbbe43292eb2a9533c9bb385af0d7f4cb503d2a73266437c8  openssl-cli.exe
83e2e5209f110f77cfb1b5198312dce7714084979b31285b7718b08fd8c4e9c5  openssl-cli.pdb
e1044fc4768ea380d2a4dfd10f35ac90194333a753b7ca740a81840aa5ecfa98  x64/node.exe
a386a731e0880be60531af7ad291f9ab5cb1829d9a73247e5ee7b4fd5fc734b5  x64/node.exp
d11f6d920a9a1484248415fba80c74b2836ef66325935b0d3d4b4248a4be268a  x64/node.lib
47ee02bb149e6622dabcb2c26dcf0c32b9b8419118d6f3ea2d4d3eeca4d6229f  x64/node.pdb
b98c678fdd2a18b380f277d635f3720df4b4c967b6fa204979f1c62f418b9940  x64/node-v0.10.44-x64.msi
3fd5077d54b1f1ada05e3022c5730344b22efbd1ecd63f6db63506a48c0ebcc5  x64/openssl-cli.exe
6a08f8e77a6754938cbe5cbad656b5a39aae62e8ca54af144340bf6b372212a9  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJW/fmNAAoJEMJzeS99g1Rd2OMH/1ao48kMN6+E+mMR+aG6hxir
AKUSHVYHqVt2WG5/9XJHCRNTnE5D+xCX9heF+PgFtZGpzoJRfwho7TTn+XlFD/4i
4UAPPfJW4mOo4rdywQ6Ry8hqJnBS3Ewyj6ABvdcBPyrJCQf7ZOhi6QEJQwx70yMA
TKWUaEQGhMmQB+zKhmfWuVjFIv+ZW7z/fOW6v/51QGF0zuOrwcboABXUFiIxsyNq
XgG1TkZhj1jZeaR7YAyk5NxMLhblz9FC5JaaqutoA1VFcPopDMOFbV3rwZKWe1yo
wqJYf6JKhenBRM+P9rRUl7wlVBSjHBW9SP+BOzL7ETQG1ebhYsCLytz+9gNtX0E=
=gzZT
-----END PGP SIGNATURE-----

Notable changes

• buffer:
  • make byteLength work with ArrayBuffer & DataView (Jackson Tian) #5255
  • backport --zero-fill-buffers command line option (James M Snell) #5744
  • backport new buffer constructor APIs (James M Snell) #5763
  • add swap16() and swap32() methods (James M Snell) #5724
• fs: add the fs.mkdtemp() function. (Florian MARGAINE) #5333
• net: emit host in lookup event (HUANG Wei) #5598
• node: --no-browser-globals configure flag (Fedor Indutny) #5853
• npm: Upgrade to v3.8.3. Fixes a security flaw in the use of authentication tokens in HTTP requests that would allow an attacker to set up a server that could collect tokens from users of the command-line interface. Authentication tokens have previously been sent with every request made by the CLI for logged-in users, regardless of the destination of the request. This update fixes this by only including those tokens for requests made against the registry or registries used for the current install. (Forrest L Norvell) npm/node#6
• repl: support standalone blocks (Prince J Wesley) #5581
• src: override v8 thread defaults using cli options (Tom Gallacher) #4344

Commits

• [2cbbaafca9] - async_wrap: don't abort on callback exception (Trevor Norris) #5756
• [6f16882733] - async_wrap: notify post if intercepted exception (Trevor Norris) #5756
• [a4856122d3] - async_wrap: setupHooks now accepts object (Trevor Norris) #5756
• [ee83c956c5] - (SEMVER-MINOR) buffer: make byteLength work with ArrayBuffer & DataView (Jackson Tian) #5255
• [1f8e4b54ce] - (SEMVER-MINOR) buffer: add swap16() and swap32() methods (James M Snell) #5724
• [bdf933bece] - buffer: changing let in for loops back to var (Gareth Ellis) #5819
• [c1534e7eaf] - (SEMVER-MINOR) buffer: backport new buffer constructor APIs (James M Snell) #5763
• [3c02727055] - (SEMVER-MINOR) buffer: backport --zero-fill-buffers command line option (James M Snell) #5744
• [58b5c1e19f] - build: add suport for x86 architecture (Robert Chiras) #5544
• [389f5a85e6] - build: add script to create Android .mk files (Robert Chiras) #5544
• [5ee5fa292f] - build: add missing openssl_fips% to common.gypi (Fedor Indutny) #5919
• [5681ffecf7] - build: enable compilation for linuxOne (Michael Dawson) #5941
• [660ec9f889] - child_process: refactor self=this in socket_list (Benjamin Gruenbaum) #5860
• [e1a012f277] - deps: upgrade npm to 3.8.3 (Forrest L Norvell)
• [ec1813199d] - deps: backport 8d00c2c from v8 upstream (Ben Noordhuis) #5577
• [2a5c6d7006] - dns: Refactor forEach to map (Benjamin Gruenbaum) #5803
• [6a6112a2f3] - dns: Use object without protoype for map (Benjamin Gruenbaum) #5843
• [8fa0b5c1da] - doc: Add @mhdawson back to the CTC (James M Snell) #5633
• [858a524325] - doc: typo: interal->internal. (Corey Kosak) #5849
• [5676a35bd9] - doc: explain path.format expected properties (John Eversole) #5801
• [29778393a0] - doc: use consistent event name parameter (Benjamin Gruenbaum) #5850
• [949b17ff6d] - doc: fix order of end tags of list after heading (firedfox) #5874
• [8e790b7a0c] - doc: add instructions to only sign a release (Jeremiah Senkpiel) #5876
• [f1f9aff855] - doc: fix doc for Buffer.readInt32LE() (ghaiklor) #5890
• [731f7b8055] - etw: fix descriptors of events 9 and 23 (João Reis) #5742
• [aac9ead379] - etw,build: always generate .rc and .h files (João Reis) #5657
• [80155d398c] - (SEMVER-MINOR) fs: add the fs.mkdtemp() function. (Florian MARGAINE) #5333
• [ae15d68ad1] - governance: remove target size for CTC (Rich Trott) #5879
• [63c601bc15] - http: speed up checkIsHttpToken (Jackson Tian) #4790
• [40847b0b8b] - lib: rename /node.js to /bootstrap_node.js (Jeremiah Senkpiel) #5103
• [e644eb3d69] - lib: refactor code with startsWith/endsWith (Jackson Tian) #5753
• [a757e0583c] - lib,src: move src/node.js to lib/internal/node.js (Jeremiah Senkpiel) #5103
• [e3c7b46326] - lib,src: refactor src/node.js into internal files (Jeremiah Senkpiel) #5103
• [b07bc5d996] - (SEMVER-MINOR) net: emit host in lookup event (HUANG Wei) #5598
• [2fa959be15] - (SEMVER-MINOR) node: --no-browser-globals configure flag (Fedor Indutny) #5853
• [a2ad21645f] - querystring: don't stringify bad surrogate pair (Brian White) #5858
• [427173204e] - (SEMVER-MINOR) repl: support standalone blocks (Prince J Wesley) #5581
• [d044898495] - src: Add missing using v8::MaybeLocal (Anna Henningsen) #5974
• [0d0c57ff5e] - (SEMVER-MINOR) src: override v8 thread defaults using cli options (Tom Gallacher) #4344
• [f9d0166291] - src: reword command and add ternary (Trevor Norris) #5756
• [f1488bb24c] - src,http_parser: remove KickNextTick call (Trevor Norris) #5756
• [8e8768ecbb] - test: add known_issues test for GH-2148 (Rich Trott) #5920
• [bf94b5a1b9] - test: mitigate flaky test-https-agent (Rich Trott) #5939
• [2192528326] - test: fix flaky test-repl (Brian White) #5914
• [aebe6245b7] - test: add test for piping large input from stdin (Anna Henningsen) #5949
• [a19de97d2f] - test: remove the use of curl in the test suite (Santiago Gimeno) #5750
• [6928a17aa3] - test: exclude new fs watch test for AIX (Michael Dawson) #5937
• [3238bff3b3] - test: confirm globals not used internally (Rich Trott) #5882
• [a41fd93f68] - test: fix flaky test-net-socket-timeout (Brian White) #5902
• [82a50d3def] - test: move dns test to test/internet (Ben Noordhuis) #5905
• [fb0c5bcac2] - test: fix flaky test-http-set-timeout (Rich Trott) #5856
• [8344a522a8] - test: fix test-debugger-client.js (Rich Trott) #5851
• [7ec5397954] - timers: fixing API refs to use safe internal refs (Kyle Simpson) #5882
• [cb676cf3e7] - tools: fix json doc generation (firedfox) #5943
• [77bed269ad] - win,build: build and test add-ons on test-ci (Bogdan Lobor) #5886
• [afcd276ecc] - zlib: Fix handling of gzip magic bytes mid-file (Anna Henningsen) #5863

Windows 32-bit Installer: https://nodejs.org/dist/v5.10.0/node-v5.10.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v5.10.0/node-v5.10.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v5.10.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v5.10.0/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v5.10.0/node-v5.10.0.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v5.10.0/node-v5.10.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v5.10.0/node-v5.10.0.tar.gz
Other release files: https://nodejs.org/dist/v5.10.0/
Documentation: https://nodejs.org/docs/v5.10.0/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

00407892416649f7567cc20ae6f0c091650dee6186fe58eb33d2bd886f276799  node-v5.10.0-darwin-x64.tar.gz
32bb55aa33da388e0ffb653678b1598511a12e9664ff42ff80e9072e75cbad3a  node-v5.10.0-darwin-x64.tar.xz
726c61ca135198ef238078ab4f4f5a7ccd1980d049f08f2e1f2dd767c510f000  node-v5.10.0-headers.tar.gz
ab520da8a88f00cdab394eb2064a293ab549f44d91f03cf3c20b671cfee48834  node-v5.10.0-headers.tar.xz
df88803bda234b32240906b620315c8f6d6200332047a88cb0ec83009cf25dd5  node-v5.10.0-linux-arm64.tar.gz
bee70770110caa640bc56d3da40a80de8a5c0f5c2bfc8b7363b9372c0a321faa  node-v5.10.0-linux-arm64.tar.xz
019a257faa5eebf6304686dfeffdbcb4c22f0547aa366f6e563aad39ab1b1ab1  node-v5.10.0-linux-armv6l.tar.gz
a9b085d19b8abac65ffa245d2959c2ff697b3a26b904be964a0b3c797c1e8d24  node-v5.10.0-linux-armv6l.tar.xz
3f7524d3db60175c2323bb2a0a13ad1ca7d47d4ede6f42834b6b8425be70e0a2  node-v5.10.0-linux-armv7l.tar.gz
e2988e55b603d08705137bb26690abe8c870144c5674f8c20a643df8c4833281  node-v5.10.0-linux-armv7l.tar.xz
07058fb1c82e7cd3d21729ab6a5ed5523fdb9f664d975438974668710b7d8ec6  node-v5.10.0-linux-ppc64le.tar.gz
05d9ecab3d2e9e82cd6ca046dcb7389b4e8d322a5ee6acc3948bbbeb0f475180  node-v5.10.0-linux-ppc64le.tar.xz
a458ddab5f8d071c9b4f24ccfa685aedd57ccf7338c3ea0e2b99546cf35a3958  node-v5.10.0-linux-x64.tar.gz
6e6442d1a44a0df0949ef7ade04caf43d994205e65ca57f97303b6462fa90377  node-v5.10.0-linux-x64.tar.xz
e884f070542f49f577fd9785f09cf7734e6c2107d23b6c1b58453d43183c5ec0  node-v5.10.0-linux-x86.tar.gz
fa3d63bfc2e6497b8ce5c5d7d6cde69e36669b246f2fe6ad0811ce76bf1d70d6  node-v5.10.0-linux-x86.tar.xz
581fda48da967e8f5d3ba5ea5e1f6e12e689b91ee26393f398ab261dfe1fcfd2  node-v5.10.0.pkg
78017489238f8ac86176079d1aa73cd8c40849f410d705080e00345512de8c93  node-v5.10.0-sunos-x64.tar.gz
94f1963a760a2b874baafd856b610708dfcdf857bd6423b7f613c53384ee8ce7  node-v5.10.0-sunos-x64.tar.xz
f9540debe8a396158f21a47f275d2fff564b42193f6621960d04c959e8ac5cc3  node-v5.10.0-sunos-x86.tar.gz
202afe2bae1fa483ded7e6317af7a1445ab01f6cb390b32d8ba1473920bc231f  node-v5.10.0-sunos-x86.tar.xz
8faeb9af5bde641b6e5dfae32bfa99253df2bccf59cf8a62162760026411762b  node-v5.10.0.tar.gz
e3cc8e84b38b2d86ddf802f690eacabd97f5e32d37b9c70e19ecfdd2bef6e13a  node-v5.10.0.tar.xz
d2c6cf6664e8fdb01d7078dd25191149ba44f6f2b4b5b2e441d2a25b1db12809  node-v5.10.0-x64.msi
b807fb855048df7cae320aa55c4eca902a745dafc96571f720d9d3e1c129bd97  node-v5.10.0-x86.msi
a37a8698d74a0204de958e53f1c44b158f0e46719664f2bdd195c3538b0ecacb  win-x64/node.exe
7563f3c29e4b66a885dfaa9e3023eaec316dfb0e5cdbc98c1a8c09aa1049e759  win-x64/node.lib
878b6c8a10622966a11dae7934f72dfb6abbe75896a21bd277acaa4076473187  win-x86/node.exe
dc50c17be9a65d8e49939f497d73b7cb8b785c5aac5b20c28dc35dd286113064  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=SX5M
-----END PGP SIGNATURE-----

Update: The version of npm included in this release did not have the correct version string. As such executing npm -v will report 2.15.0 rather than 2.15.1, which is incorrect. The source code included in this release is in fact the source for 2.15.1, including the security fix.

Notable Changes

• https:
  • Under certain conditions ssl sockets may have been causing a memory leak when keepalive is enabled. This is no longer the case. (Alexander Penev) #5713
• lib:
  • The way that we were internally passing arguments was causing a potential leak. By copying the arguments into an array we can avoid this. (Nathan Woltman) #4361
• npm:
  • Upgrade to v2.15.1. Fixes a security flaw in the use of authentication tokens in HTTP requests that would allow an attacker to set up a server that could collect tokens from users of the command-line interface. Authentication tokens have previously been sent with every request made by the CLI for logged-in users, regardless of the destination of the request. This update fixes this by only including those tokens for requests made against the registry or registries used for the current install. (Forrest L Norvell)
• repl:
  • Previously if you were using the repl in strict mode the column number would be wrong in a stack trace. This is no longer an issue. (Prince J Wesley) #5416

Commits

• [96e163a79f] - buffer: changing let in for loops back to var (Gareth Ellis) #5819
• [0c6f6742f2] - console: check that stderr is writable (Rich Trott) #5635
• [55c3f804c4] - deps: upgrade npm in LTS to 2.15.1 (Forrest L Norvell)
• [1d0e4a987d] - deps: remove unused openssl files (Ben Noordhuis) #5619
• [d55599f4d8] - dns: use template literals (Benjamin Gruenbaum) #5809
• [42bbdc9dd1] - doc Add @mhdawson back to the CTC (James M Snell) #5633
• [8d86d232e7] - doc: typo: interal->internal. (Corey Kosak) #5849
• [60ddab841e] - doc: add instructions to only sign a release (Jeremiah Senkpiel) #5876
• [040263e0f3] - doc: grammar, clarity and links in timers doc (Bryan English) #5792
• [8c24bd25a6] - doc: fix order of end tags of list after heading (firedfox) #5874
• [7c837028da] - doc: use consistent event name parameter (Benjamin Gruenbaum) #5850
• [20faf9097d] - doc: explain error message on missing main file (Wolfgang Steiner) #5812
• [79d26ae196] - doc: explain path.format expected properties (John Eversole) #5801
• [e43e8e3a31] - doc: add a cli options doc page (Jeremiah Senkpiel) #5787
• [c0a24e4a1d] - doc: fix multiline return comments in querystring (Claudio Rodriguez) #5705
• [bf1fe4693c] - doc: Add windows example for Path.format (Mithun Patel) #5700
• [3b8fc4fddc] - doc: update crypto docs to use good defaults (Bill Automata) #5505
• [a6ec8a6cb7] - doc: fix crypto update() signatures (Brian White) #5500
• [eb0ed46665] - doc: reformat & improve node.1 manual page (Jeremiah Senkpiel) #5497
• [b70ca4a4b4] - doc: updated fs #5862 removed irrelevant data in fs.markdown (topal) #5877
• [81876612f7] - https: fix ssl socket leak when keepalive is used (Alexander Penev) #5713
• [6daebdbd9b] - lib: simplify code with String.prototype.repeat() (Jackson Tian) #5359
• [108fc90dd7] - lib: reduce usage of self = this (Jackson Tian) #5231
• [3c8e59c396] - lib: copy arguments object instead of leaking it (Nathan Woltman) #4361
• [8648420586] - net: make isIPv4 and isIPv6 more efficient (Vladimir Kurchatkin) #5478
• [07b7172d76] - net: remove unused var self = this from old code (Benjamin Gruenbaum) #5224
• [acbce4b72b] - repl: fix stack trace column number in strict mode (Prince J Wesley) #5416
• [0a1eb168e0] - test: fix test-cluster-worker-kill (Santiago Gimeno) #5814
• [86b876fe7b] - test: smaller chunk size for smaller person.jpg (Jérémy Lal) #5813
• [1135ee97e7] - test: strip non-free icc profile from person.jpg (Jérémy Lal) #5813
• [0836d7e2fb] - test: fix flaky test-cluster-shared-leak (Claudio Rodriguez) #5802
• [e57355c2f4] - test: make test-net-connect-options-ipv6.js better (Michael Dawson) #5791
• [1b266fc15c] - test: remove the use of curl in the test suite (Santiago Gimeno) #5750
• [7e45d4f076] - test: minimize test-http-get-pipeline-problem (Rich Trott) #5728
• [78effc3484] - test: add batch of known issue tests (cjihrig) #5653
• [d506eea4b7] - test: improve test-npm-install (Santiago Gimeno) #5613
• [7520100e8b] - test: add test-npm-install to parallel tests suite (Myles Borins) #5166
• [b258dddb8c] - test: repl tab completion test (Santiago Gimeno) #5534
• [f209effe8b] - test: remove timer from test-http-1.0 (Santiago Gimeno) #5129
• [3a901b0e3e] - tools: remove unused imports (Sakthipriyan Vairamani) #5765

Windows 32-bit Installer: https://nodejs.org/dist/v4.4.2/node-v4.4.2-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v4.4.2/node-v4.4.2-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v4.4.2/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v4.4.2/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.4.2/node-v4.4.2.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.4.2/node-v4.4.2-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v4.4.2/node-v4.4.2.tar.gz
Other release files: https://nodejs.org/dist/v4.4.2/
Documentation: https://nodejs.org/docs/v4.4.2/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

a143d6c71c9f1d1827d4cde1086611fb41d4909247377b8539a7129e1bf8266b  node-v4.4.2-darwin-x64.tar.gz
2407261b3829b83b06ad285af1aaa5198b9c69f6efb93ca493ffb42344f219fe  node-v4.4.2-darwin-x64.tar.xz
6b2ec4064900a8c39357ca7bdd7863587d749dcad1e4735df0de402400142cbb  node-v4.4.2-headers.tar.gz
8dc001e4b78073c567eb4c345a5d50bb3d9f9dfe6a4b5f99ba4ca9cadd0a7e52  node-v4.4.2-headers.tar.xz
be881df65ff29ffbec47a14e082800c150d4a9238d1c137ff18cf7c28fafa987  node-v4.4.2-linux-arm64.tar.gz
a15d77d084b954c96d0fbb12e97afc988bfd1f9c0e386ad52e0805f6422db783  node-v4.4.2-linux-arm64.tar.xz
c574a381e5955c724bf39ff93814882e8f5218293b8c4210ccfafbda06fc4200  node-v4.4.2-linux-armv6l.tar.gz
d139f9ba6c18a55a9549b75d5b384ee4a7e7b379bf36e8077d33e27d5ee6e7fd  node-v4.4.2-linux-armv6l.tar.xz
f243f42bbab4757b3881a26e7ac3af4a1ec6d0f5edc1e4415e69768e94cd1389  node-v4.4.2-linux-armv7l.tar.gz
03bcb820c7f1fea145675a9b632e35b58211cb3dae202f9347eae007386ca1e7  node-v4.4.2-linux-armv7l.tar.xz
035d202d02ac965618d99ec5c8680aba1ea41f6114caf720a160fe23405809b5  node-v4.4.2-linux-ppc64le.tar.gz
cd6e96898fcc1b8e98177d6de3e58904431db5c9ca75a68b08558d5c8f166ab9  node-v4.4.2-linux-ppc64le.tar.xz
b4a44dbe528520397621aad76168bdfd50cdb96fb1f15e99358263f6400c33d2  node-v4.4.2-linux-x64.tar.gz
003a8dcb3c267b9f268e9443ee2ae381bceaebee1cb438688cd52122591c9b56  node-v4.4.2-linux-x64.tar.xz
0c2bdf6fed204c6b9bddd7f839f49010cf9b484986f820e20d4f7abb01d8ee9d  node-v4.4.2-linux-x86.tar.gz
3787dc1a9dd6f65a32f9cc435c6c7d04bc3580ac03ce38246734bfdcdef94ea9  node-v4.4.2-linux-x86.tar.xz
5d115f4d561f92c6b26f40e7d0217e99e4255e2051337bca15489c39597d05ba  node-v4.4.2.pkg
006ef87af910bb5b0d78d65d2b979125a6b1049d56dc26088c9cb9deb6a16986  node-v4.4.2-sunos-x64.tar.gz
c66c35ea9b3594475eac67b213bb87f3ac867a953b5202c70433bc318de1369d  node-v4.4.2-sunos-x64.tar.xz
13da507b8ecd88598080c63a63c77efc83e04c8454f4070389c4472d512ced48  node-v4.4.2-sunos-x86.tar.gz
6e9e382fca253b6032881cad42a7e7380f7efd7a169b4df56aba990613a6404f  node-v4.4.2-sunos-x86.tar.xz
ae91cb0a31f87b5b13bb2665178845d99abf1037dc3636fa88f442b4a4c65297  node-v4.4.2.tar.gz
49051fd930e36181509dc8fcf584fc01971083b6bf9e14f2bbec49cc9c4224e9  node-v4.4.2.tar.xz
70bab3f8412f341d8ed2f2fd98904270aba650262f947084dbc5b1e7e6d98692  node-v4.4.2-x64.msi
3f16ed3b83d893b8d594e252fbe2512806141d078afd66440afd63cd00f562f8  node-v4.4.2-x86.msi
133e73a2b7a231e78cfa5802ae301de64e9b1bcfbe7e46e49a930b6b6f08c222  win-x64/node.exe
c258cd572a3120e940671c4728041bc1e34fe1e2287e73c358dccb41f959191b  win-x64/node.lib
79f633a85f6c06b923b2283d7f6b8a869d4cf0f66ef95464c19e67d575d204bc  win-x86/node.exe
b2a4e0057b5bca1a5b089d1faa92f23718359442f1bd072dac2c9d7b0bd71199  win-x86/node.lib
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJW/dEwAAoJEJM7AfQLXKlGMW8H/Aj8PhN/66SYqG3LH2UCffmh
rlsc9R265TU5m9WJA6AuXOa5cY5rIdWiucp9wzc5nX/y8imSmy7bCNui2Ar0McDN
VKIlzcUhsa4TG0b1LihF5NUbNDwpFjandbMVHMPoo4KPYYd5IbxEIDjGj6ysktRl
D7w/cUXihLTWm8Ucda1IKGBDt28e4zSSz1bYUBPcw0AKc9KJzTWth0ikqRWLNxXB
aSJWflrDatBvghtTOtXNrGmnlcn2dLDOD44a9gqTkFBdQg1CfHchFCHpG7+TIAHZ
kUMFGcEvH3tj27YFn7iyfUIlGUezwI+fuS52HN6BU3alO0JWCmQmGNr/Z6uL4Ew=
=+gcT
-----END PGP SIGNATURE-----

Node.js v0.12.13 will be the final Active-LTS release for the v0.12 release line, from next month, v0.12 moves in to Maintenance. This change impacts on the types of changes that will be accepted in to v0.12 releases, restricting them primarily to critical security and stability fixes. v0.12 will remain supported until the end of 2016 but it is important that you begin planning your move to a new release line as soon as possible. v4 (LTS "Argon") is recommended at this stage.

Update: the version of npm included in this release does not have the correct version string. As such executing npm -v will report 2.15.0 rather than 2.15.1, which is incorrect. The source code included in this release is in fact the source for 2.15.1, including the security fix.

Notable changes:

• npm: Upgrade to v2.15.1. Fixes a security flaw in the use of authentication tokens in HTTP requests that would allow an attacker to set up a server that could collect tokens from users of the command-line interface. Authentication tokens have previously been sent with every request made by the CLI for logged-in users, regardless of the destination of the request. This update fixes this by only including those tokens for requests made against the registry or registries used for the current install. (Forrest L Norvell) https://github.com/nodejs/node/pull/5967
• openssl: OpenSSL v1.0.1s disables the EXPORT and LOW ciphers as they are obsolete and not considered safe. This release of Node.js turns on OPENSSL_NO_WEAK_SSL_CIPHERS to fully disable the 27 ciphers included in these lists which can be used in SSLv3 and higher. Full details can be found in our LTS discussion on the matter (https://github.com/nodejs/LTS/issues/85). (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712

Commits:

• [2ce29165a1] - deps: upgrade npm in LTS to 2.15.1 (Forrest L Norvell)
• [a115779026] - deps: Disable EXPORT and LOW ciphers in openssl (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712
• [ab907eb5a8] - test: skip cluster-disconnect-race on Windows (Gibson Fahnestock) https://github.com/nodejs/node/pull/5621
• [9c06db7444] - test: change tls tests not to use LOW cipher (Shigeki Ohtsu) https://github.com/nodejs/node/pull/5712
• [154098a3dc] - test: bp fix for test-http-get-pipeline-problem.js (Michael Dawson) https://github.com/nodejs/node/pull/3013
• [ff2bed6e86] - win,build: support Visual C++ Build Tools 2015 (João Reis) https://github.com/nodejs/node/pull/5627

Windows 32-bit Installer: https://nodejs.org/dist/v0.12.13/node-v0.12.13-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v0.12.13/x64/node-v0.12.13-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v0.12.13/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v0.12.13/x64/node.exe
Mac OS X Universal Installer: https://nodejs.org/dist/v0.12.13/node-v0.12.13.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-darwin-x64.tar.gz
Mac OS X 32-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-darwin-x86.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-linux-x86.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-linux-x64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-sunos-x86.tar.gz
SunOS 64-bit Binary: https://nodejs.org/dist/v0.12.13/node-v0.12.13-sunos-x64.tar.gz
Source Code: https://nodejs.org/dist/v0.12.13/node-v0.12.13.tar.gz
Other release files: https://nodejs.org/dist/v0.12.13/
Documentation: https://nodejs.org/docs/v0.12.13/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

b6e84fce06882ec5da0870d7ed7b70541d9de505e767dc2fbd9605518d27d869  node.exe
efbee64b1c5602f1ef50a26358e3a007c79892070b4500df4c3454635ce4fd9b  node.exp
4edacd81a4df404cded210d35b2fbd28835f2b849bc43dad89252e4f3f2a0a59  node.lib
9a6ef0d67a661253cbdb3fc92f99c5d06e569f6db86407f34df0e47b7a7e923f  node.pdb
e842a8eb8b7658d177675de9d054de4d7fb7d6c77edfcda7d83adb95b029bf3d  node-v0.12.13-darwin-x64.tar.gz
41d2f04872c1c1079856be475bdbdee5c63ac227cc2c08b94a6b48bac0469a2d  node-v0.12.13-darwin-x64.tar.xz
8ecdcd3b29ef0d3264bb48c0834bc024016d19a8f5c040fa6b51328191f39a60  node-v0.12.13-darwin-x86.tar.gz
33aeb892d0d0c044cc2dbfba4a234821ea9dcb09d4310e5b15fe0752d8b87e98  node-v0.12.13-darwin-x86.tar.xz
bf6a8de61b08935e91ac345e2dcd54c95d1def963b5db9a8bb33cf75963e13e6  node-v0.12.13-headers.tar.gz
19f6106b69a442da72ae9cf7f8ca9cef75d9a19348bd8c378ce1df50dad258b3  node-v0.12.13-headers.tar.xz
3e8b6ee32fc9a726bfe6f3961bcccf3d2b6d0ddd68326abb4434039f16e10f09  node-v0.12.13-linux-x64.tar.gz
6953bdca60cb703551d04078090a3347a0a8a820fded61bfb94005462251a7f2  node-v0.12.13-linux-x64.tar.xz
8300b9cbe363bf2a5fd987e7d05a88cb60842ad5b0ea6cbf3f4342eef547feed  node-v0.12.13-linux-x86.tar.gz
5618b0987a3b214c063578aa4e1905ba49ea2546894dd1b3277f659a3d563d03  node-v0.12.13-linux-x86.tar.xz
ca6395291862af79808b42d91a6f6e2ab7ec7ca5187c6de13d9a2cc2b47956f8  node-v0.12.13.pkg
9b40e2b657e560901c6cccf3c93d01a5055cb4d011ccfefe1b977dae7935ea42  node-v0.12.13-sunos-x64.tar.gz
961be780775a91b453c260aca11c4ea24ce64b077ac3ee0970c0faa418a8c865  node-v0.12.13-sunos-x64.tar.xz
83f862b0383ba6c9a15f32a043de48288b087c0f368117eac36d66779491a910  node-v0.12.13-sunos-x86.tar.gz
15eca8c6c3aa8b2e2262b77c6047be97802b5fd6f2e23d73bf0a3daa856cae4f  node-v0.12.13-sunos-x86.tar.xz
0a972ed6442cb526aa7aa1bcb10aa536b65bd90ab4956b5a1aa51b4b7bb071bd  node-v0.12.13.tar.gz
d0a4ebff052016c81184b6b880009f299263fc1a2f2bca35483b67bb886c6556  node-v0.12.13.tar.xz
03502f5cf6d3c6b8dc112558219af0ceba6af5793e1fb8139a6567780eded07d  node-v0.12.13-x86.msi
4288ca4a92e3b79365b4be8fe5bc2d34066db7f1027dbcdfe42b7350eb5e1363  openssl-cli.exe
5588b16ed5e0ad2ddd7b025353922bcedd7567fde3680175dee78046debcdfcd  openssl-cli.pdb
75c0fc30a9454cecd40f43b3da8060eff1d22b1e7e2616afd9625678026a3880  x64/node.exe
fc6a706dda6b96c4c3da96107b48580c4e5c9327667d5234c033f68ae5f54215  x64/node.exp
8bf8cf62ef9629fd686008233fe5a97dff0b093f81cc2979aae9f1490f4b499d  x64/node.lib
71396d3e53c3cfa93e95f81b464f7acd97d1e2454f2bfa7c0a9c407ada2bf18b  x64/node.pdb
0c77dedd115776b7c5e1661a1c9c3ecc4cb5a119820b0919d190ba8fe15137f4  x64/node-v0.12.13-x64.msi
d1ee99c0c37c7ac017725ec69169beba8d9358af9ba61ed0cf3e058cd3dfd224  x64/openssl-cli.exe
7c6ebb541559eedf977109418f017bf035567936efee6f576516580a52a73a3b  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJW/bxoAAoJEMJzeS99g1Rd258H/Rj9sMrQ7HNLrLJdEGHr7rqW
vxfmkHHX3dWS8IqrsoupeskSJeW4YLW8tB5MYKDJiU5hsjwPR6it4oDs8xvxmsaG
UrZiTqTiFGNJ0Q6atxcBvkKJ0bUKGmyg9sHnFG1YbrfXryAG7usy1Ko2lzrh4WUt
e8FokEoOMVYySJQxg+V8MrrNXwW3T9qPlW3cnPC3lTYS1wh9nTQgBeb8DnWaSMdD
lkE8AmCbsM3KSM5qADbOEgjBP9VGJhFCBAtl5LZjlXs7/fca3GTCfTqPrqI4+pSn
Qlv+t2nQMn5hd1U9oiROKrneVwMQwMBmRjx8m6c4dQ0rpm4paYrp/H2snfW2LHw=
=Gzpx
-----END PGP SIGNATURE-----

The primary npm registry has, since late 2014, used HTTP bearer tokens to authenticate requests from the npm command-line interface. Due to a design flaw in the CLI, these bearer tokens were sent with every request made by the CLI for logged-in users, regardless of the destination of the request. They should instead only be included for requests made against the registry or registries used for the current install.

This flaw allows an attacker to set up an HTTP server that could collect authentication information they could use to impersonate the users whose tokens they collected. This impersonation would allow them to do anything the compromised users could do, including publishing new versions of packages.

This flaw has been fixed in npm@2.15.1 (npm LTS) and npm@3.8.3. The npm CLI team believes that the fix won't break any existing registry setups, but due to the large number of registry software suites in the wild, it's possible that this change will be breaking in some cases. If so, please file an issue describing the software you're using and how it broke, and the team will work with you to mitigate the breakage.

If you believe that your bearer token may have been leaked, it should be sufficient to invalidate your current npm bearer tokens and to rerun npm login to generate new tokens. Keep in mind that this may cause continuous integration builds in services like Travis to break, in which case you'll need to update the tokens in your CI server's configuration.

Thanks to Mitar, Will White & the team at Mapbox, Max Motovilov, and James Taylor for reporting this vulnerability to npm.

As Node.js ships with npm, releases for the active lines will be made available shortly for your convenience. Please watch the Node.js news feed for the following releases:

• v0.10 (Maintenance): Node.js v0.10.44 includes npm LTS v2.15.1. This is a major upgrade of npm from v1 which has previously been deprecated. No fix is being made available for npm v1, please upgrade to npm v2 as soon as possible.
• v0.12 (LTS): Node.js v0.12.13 includes npm LTS v2.15.1.
• v4 (LTS "Argon"): Node.js v4.4.2 includes npm LTS v2.15.1.
• v5 (Stable): Node.js v5.10.0 includes npm v3.8.3.

Update: Unfortunately the version of npm that was bundled with Node.js version v0.10.44, v0.12.13 and v4.4.2 did not include the correct version string, npm -v reports 2.15.0, however the code is v2.15.1.

Note that you can upgrade your installed version of npm manually without requiring a Node.js update by using the command npm install npm@2 -g for npm LTS v2.15.2 or npm install npm@3 -g for npm v3.8.5.