Node.js Blog

October security releases and v6 LTS "Boron" security inclusions

Rod Vagg — Sat, 15 Oct 2016 10:36:44 GMT

Node.js v6 LTS security inclusions

Next week, on Tuesday the 18th (late evening UTC), the Node.js Foundation will be launching its second new LTS release line, a continuation of the v6.x series of releases. This line will be codenamed "Boron" and the first version will be v6.9.0.

In addition to a change to introduce the process.release.lts property, set to 'Boron', we will also be including 3 low-severity security patches that only apply to the v6.x release series.

The security vulnerabilities being addressed are all low-severity and arise from Node.js dependencies:

V8
OpenSSL when Node.js is built in FIPS-compliant mode (not official builds)
v8_inspector, a new experimental debugging protocol

These patches will also be included in the new v7.x Current (non-LTS) release series which is due to be launched later this month.

Node.js v6 is affected
Node.js v4 (LTS "Argon") is not affected
Node.js v0.12 (Maintenance) is not affected
Node.js v0.10 (Maintenance) is not affected

CVE-2016-5180 "ares_create_query single byte out of buffer write"

A security vulnerability has been discovered in the c-ares library that is bundled with all versions of Node.js. Due to the difficulty of triggering and making use of this vulnerability we currently consider this a low-severity security flaw for Node.js users.

The patch has already been included in Node.js v6 and we will ensure that patched versions of the remaining affected versions are made available by Tuesday the 18th.

Node.js v6 is not affected
Node.js v4 (LTS "Argon") is affected
Node.js v0.12 (Maintenance) is affected
Node.js v0.10 (Maintenance) is affected

We apologise for the short notice of these releases.

Node v6.8.1 (Current)

Evan Lucas — Sat, 15 Oct 2016 00:38:39 GMT

Notable changes

build: Fix building with shared zlib. (Bradley T. Hughes) #9077
stream: Fix regression in stream.Writable subclass instanceof checks. (Anna Henningsen) #9088
timers: Fix regression where immediates that are cleared in the callback would never be called. (Brian White) #9086

Commits

[8d2206fe41] - build: add -DZLIB_CONST when building with --shared-zlib (Bradley T. Hughes) #9077
[8c4fab0a28] - stream: fix Writable subclass instanceof checks (Anna Henningsen) #9088
[7171bd6311] - timers: fix regression with clearImmediate() (Brian White) #9086

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

fc42b85875c2ed593a22c4543f82f5ae4d737969c1915ac3d5f7a1fcf47a05a1  node-v6.8.1-aix-ppc64.tar.gz
36058e54c0e502c3e98f37f85533cf6148ea0232cf06cbebaee70a53719e60ca  node-v6.8.1-darwin-x64.tar.gz
0de6e5494e958abae485a89e56acfdd1c8be81f5f2c77d82fd9a90d05f226be4  node-v6.8.1-darwin-x64.tar.xz
63091ba93129536252820d0a6dc1e291d6bf602c1051a06979d45ae629265715  node-v6.8.1-headers.tar.gz
7e25a7ce6db3eda84998a41476c9cd684505839b12c79e3447d98ace81a4911b  node-v6.8.1-headers.tar.xz
d68acdedba79bb0cca9ccdb985323d18b6edbd85ee8cf896e02433c09cad1da9  node-v6.8.1-linux-arm64.tar.gz
813737086589af99cc46b35859418347dbbb8777b40fd841314d5cd44ff171d9  node-v6.8.1-linux-arm64.tar.xz
439c1018d65e224ae9b7a25bf546952c89c0d6faeddd2d932697a1bda6f6935d  node-v6.8.1-linux-armv6l.tar.gz
1424002e68f77ea4c6f2cd545e75652b97f5c2f00371df261f1d2da9f65fc5ce  node-v6.8.1-linux-armv6l.tar.xz
7afaab589165ba2e59476148010dd23d68cf67cd9f98d2522ce6e5c3430a5cc1  node-v6.8.1-linux-armv7l.tar.gz
4db9a34cde67a15680e1bfc1b80bace25475c79e554911ad62535d567b65125f  node-v6.8.1-linux-armv7l.tar.xz
7480f0b371187c3642c39ce058603b662e271823ff8fcb959fd349b580cb694b  node-v6.8.1-linux-ppc64le.tar.gz
952db6f02026b49d3a9210b4324432127e5e73038ac9f9c6dc97e7c304693454  node-v6.8.1-linux-ppc64le.tar.xz
f478521914ea5d46e0280ff5626ed2c9645acae529c4aa8a557de54353936255  node-v6.8.1-linux-ppc64.tar.gz
e0c3a1e2a500c9c4575f85a5f5f884fc765dcc3bc37913f52312d08f2799524f  node-v6.8.1-linux-ppc64.tar.xz
d6d9cd0a3164f687eaf148f37bd0a443fb5492964e5ef48bc61abafaa3fa8ac5  node-v6.8.1-linux-s390x.tar.gz
909f4992a2b5e82b3208aa51cac7289c865bca2f43ec041742ce24b3217b14dd  node-v6.8.1-linux-s390x.tar.xz
8d004e6990926508460495450a4083d40836e81710afca303d6a298e032c6b18  node-v6.8.1-linux-x64.tar.gz
ae027c59efa93823d4f8d0af296f4f0e2f54a168ca11a525f91cbbbd5f30e39e  node-v6.8.1-linux-x64.tar.xz
1247639f19a3e035bc1ec13bc546b0aea651b94836d0d814a5fe52f379c471e5  node-v6.8.1-linux-x86.tar.gz
0cbc3ace4d6fdf69f9d5db8a6f2f7f2e6fdb91e98889648af3381c2bca019479  node-v6.8.1-linux-x86.tar.xz
aa08c2fe5c97040f08935bc3e748a998d1a79205a943fecaf5abbc22726a4756  node-v6.8.1.pkg
49122d54d53ec38062fb6f66a724e28287b4bf6b67361e4020d936b28f207a59  node-v6.8.1-sunos-x64.tar.gz
3b110056957030755667cb5f71152f552cf8a88c46ddb68fdc8715370693f317  node-v6.8.1-sunos-x64.tar.xz
4b18bbaeb1f6cfc89545a5791681c40ca25f506d02170cc2d4e0d1fbbfe1da1c  node-v6.8.1-sunos-x86.tar.gz
9a0cbea79c249d19349aa9d1f0ce8ab99c88c1424118ce72d075882b22f95492  node-v6.8.1-sunos-x86.tar.xz
736f7651f59a78d5a0d88ab2430c93fc29a8efd1c06fd3fb4eb915b262bc2769  node-v6.8.1.tar.gz
a44ff48de369381c506661996dec568085d42998613ed2a23ebb37fddc12c99a  node-v6.8.1.tar.xz
99433a9e86c55dd3d8530e1e2f1a89e3c088ff62400e0cad90f362a236c945b0  node-v6.8.1-win-x64.7z
f0c13669e53682649e7e19008fae4215eff8f798924c98f25483699309bae707  node-v6.8.1-win-x64.zip
2dded7caa140a5b2a80dd98648183dfadf38f7a201a3bdf5fbe283b75a3c1331  node-v6.8.1-win-x86.7z
baacae312978ee54ee1303b9e9eebdadb1c851716890953edbe820c526953c33  node-v6.8.1-win-x86.zip
4600ed0e30a2497b6add2f53cdfccc727cf1cf9c5de6f90e89037085f489e5f4  node-v6.8.1-x64.msi
72b6bcbb0b33639d858a4fc925d2af9e0399ed59511ec7f7ad28ba08b8740866  node-v6.8.1-x86.msi
b30dee0c32a9ec7a282d55be3c8652075377adc88b7197f35f0e5aae003cae4f  win-x64/node.exe
b9038fcb8c5e75b7a6a570317baade24d32efe062defd47dd0bd63bb5438dd94  win-x64/node.lib
bfd6c8821cbe37a8343ba8da8f0b9bd66fb5bcd2ca364482c357918b2ef7a278  win-x64/node_pdb.7z
947d8c502ef60d0fc8070b3b364cff69c7d2b03c438979d721ca270f3b9b803b  win-x64/node_pdb.zip
ff1167133f9a9817248f00c48b07306888132dee2d0d12757e6206feca961cfd  win-x86/node.exe
e7d6eb9778991938228f300510dfe886fefc34590af4c45e5305fb760c049039  win-x86/node.lib
a8220b3d6b525b4104c09213999cdd445ce78d1195b5fdb924e3d42b9a4d4f78  win-x86/node_pdb.7z
7f661e5d555ef2cf177265141e7eb2252fe58e246edeecf99987b454057915b6  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=6B+o
-----END PGP SIGNATURE-----

Node v6.8.0 (Current)

Jeremiah Senkpiel — Wed, 12 Oct 2016 21:04:45 GMT

Notable changes

fs:
- SyncWriteStream now inherits from Stream.Writable. (Anna Henningsen) #8830
  Practically, this means that when stdio is piped to a file, stdout and stderr will still be Writable streams.
- fs.existsSync() has been undeprecated. fs.exists() remains deprecated. (Dan Fabulich) #8364
http: http.request() now accepts a timeout option. (Rene Weber) #8101
module: The module loader now maintains its own realpath cache. (Anna Henningsen) #8100
npm: Upgraded to 3.10.8 (Kat Marchán) #8706
stream: Duplex streams now show proper instanceof Stream.Writable. (Anna Henningsen) #8834
timers: Improved setTimeout/Interval performance by up to 22%. (Brian White) #8661

Commits

[1a6e8983a6] - benchmark: add benchmarks for Buffer.from() (Anna Henningsen) #8738
[882f8b3d6c] - benchmark: use 'yes' instead of echo in a loop (Bartosz Sosnowski) #8721
[999f727bb5] - benchmark: add benchmark for destructuring object (Fangdun Cai (Fundon)) #8680
[5c10898e31] - buffer: fix check for .buffer property (Ojas Shirekar) #8739
[b9c2270502] - buffer: fix performance regression (Michaël Zasso) #8754
[3fcdf4e80a] - buffer: remove unnecessary argument check (Michaël Zasso) #8552
[ee319b739c] - buffer: add isSharedArrayBuffer checks (Ojas Shirekar) #8510
[38fdbcd7f7] - build: make addons build dep. on node_version.h (Anna Henningsen) #8861
[f057d193ec] - build: run cctests as part of test-ci target (Ben Noordhuis) #8034
[a202be6690] - build: don't build icu with -fno-rtti (Ben Noordhuis) #8886
[296254f141] - build: remove VS 2013 switch from vcbuild.bat (Ben Noordhuis) #8067
[a425c4da98] - build: run npm install for doc builds in tarball (Anna Henningsen) #8413
[3d3bce6ca1] - cluster: remove unused backlog argument (Brian White) #8877
[23a851dfe6] - deps: avoid single-byte buffer overwrite in ares_create_query (Daniel Stenberg) #8849
[46af58898c] - deps: make gtest output tap (Ben Noordhuis) #8034
[9d41e8913f] - deps: bump V8 patch to 84 (Myles Borins) #8851
[4d41bd9c68] - deps: hotfix upgrade npm tap version for tests (Kat Marchán) #8706
[9ecfc32fde] - deps: upgrade npm to 3.10.8 (Kat Marchán) #8706
[c4d9b54f75] - dgram: use Buffer.alloc(0) for zero-size buffers (Сковорода Никита Андреевич) #8751
[e1a774d314] - dns: remove internal variable from makeAsync (yorkie) #8800
[787558935c] - dns: tweak regex for IPv6 addresses (Luigi Pinca) #8665
[4e8c03707a] - dns: handle array holes in setServers() (cjihrig) #8567
[5e6be7b4c2] - doc: fix typo in email address in README (Rich Trott) #8941
[72ed6aa205] - doc: make node(1) more consistent with tradition (Alex Jordan) #8902
[2fad4d29b0] - doc: add example for file existence with fs.stat (Christopn Noelke) #8585
[0bdc363205] - doc: add added: information for globals (Luigi Pinca) #8901
[bc2dd3e467] - doc: change ./node to node in debugger.md (AnnaMag) #8943
[b212b9b44b] - doc: add CTC meeting minutes 2016-09-07 (Josh Gavant) #8499
[c31a3178e8] - doc: fixup link in fs.md (ss22ever) #8940
[e7039cdbb8] - doc: fix markdown formatting in url.md (Bryan Bess) #8933
[ff9a84d324] - doc: update punctuation in README.md (Abner Chou) #8892
[c36c8dc3cc] - doc: add documentation for test common module (Paul Grock) #8840
[a604a82186] - doc: recommend using port 0 instead of common.PORT (Niklas Ingholt) #8694
[77fc5caceb] - doc: add CTC meeting minutes 2016-09-14 (Josh Gavant) #8726
[505b88d3c3] - doc: add CTC meeting minutes 2016-09-21 (Josh Gavant) #8727
[3e8c8f90bc] - doc: fix typo in repl doc (Franziska Hinkelmann) #8826
[a00ae75805] - doc: improve documentation for commit subject line (Luigi Pinca) #8546
[aaebbf9708] - doc: encourage 2FA before onboarding (Rich Trott) #8776
[f07054dd49] - doc: add optional step to onboarding doc (Rich Trott) #8774
[dceaa0ba4a] - doc: remove failing workaround in BUILDING.md (Christopher Fujino) #8763
[0522aa0dc0] - doc: add commit formats for release blog posts (fen) #8631
[98e425eed4] - doc: fix title level at tls.md (yorkie) #8782
[e7c0f34f20] - doc: add added: info for crypto.timingSafeEqual() (Marc-Aurèle DARCHE) #8796
[4fb051426c] - doc: enable no-file-name-articles remark-lint rule (Сковорода Никита Андреевич) #8713
[4699e3022b] - doc: enable first-heading-level remark-lint rule (Сковорода Никита Андреевич) #8716
[3aec6a68bf] - doc: improve child_process doc types (yorkie) #8741
[6fab334a73] - doc: fix example in stream doc (Luigi Pinca) #8378
[f13089b834] - doc: update BUILDING.md (rainabba) #8704
[5c014bb532] - doc: standardize on make -j8 (Rich Trott) #8678
[98ca442cae] - doc: add CTC meeting minutes 2016-08-24 (Josh Gavant) #8423
[28264f8da4] - doc: add eugeneo to collaborators (Eugene Ostroukhov) #8696
[85ee89edd6] - doc: add ak239 to collaborators (Aleksey Kozyatinskiy) #8676
[5dd6229aeb] - doc: clarify fs.utimes() arguments (Danny Guo) #8651
[42386d7229] - doc: add link to help repo in README (Rich Trott) #8570
[2f6101ed10] - doc: fix broken link in timers doc (Ltrlg) #8562
[e16f95db4d] - doc: update exercise portion of onboarding doc (Rich Trott) #8559
[a91050c57b] - doc: fix typo in path doc (Kalman Hazins) #8527
[64b79eba42] - doc: remove extra comma in cluster docs (Teddy Katz) #8557
[2d23227060] - doc: fix a formatting error in buffer.md (Сковорода Никита Андреевич) #8553
[eebecef9a4] - doc: link onboarding to contributing guide (Rich Trott) #8529
[8a1f74338c] - doc: remove duplicate content from readline doc (Italo A. Casas) #8497
[71dd4c193a] - doc: capitalize arguments' type names in url doc (yorkie) #8489
[8e28e03fb9] - doc: add gibfahn to collaborators (Gibson Fahnestock) #8533
[c96618f241] - doc: add imyller to collaborators (Ilkka Myller) #8530
[929d9bb222] - doc: standardize rest parameters (Timothy Gu) #8485
[125df45b80] - doc: add not-an-aardvark to collaborators (not-an-aardvark) #8525
[3eb93e1fe8] - doc: add example for running with v8-inspector (Franziska Hinkelmann) #8845
[d6dcbc212b] - doc,tool: add tls.TLSSocket to typeMap (yorkie) #8742
[d69570d5fc] - doc,tool: add ref to Integer (yorkie) #8740
[688abac7b2] - (SEMVER-MINOR) fs: make SyncWriteStream inherit from Writable (Anna Henningsen) #8830
[07d97f4f3e] - fs: fix handling of uv_stat_t fields (Anna Henningsen) #8515
[14e2d67776] - (SEMVER-MINOR) fs,doc: undeprecate existsSync (Dan Fabulich) #8364
[980c1edf63] - (SEMVER-MINOR) fs,module: add module-loader-only realpath cache (Anna Henningsen) #8100
[ee7af01b93] - (SEMVER-MINOR) http: socket connection timeout for http request (Rene Weber) #8101
[7a59449478] - https: fix memory leak with https.request() (Ilkka Myller) #8647
[573d8bcee4] - inspector: fix minor issues (Brian White) #8890
[f4f9cf779f] - inspector: build file cleanup (Eugene Ostroukhov) #8753
[e80ae1350c] - inspector: address race conditions (Eugene Ostroukhov) #8672
[f817875235] - inspector: wait for both sides closing (Eugene Ostroukhov) #8505
[4ed46b47a1] - inspector: report default context (Eugene Ostroukhov) #8502
[b05ce842ce] - inspector: zero out structure members (Eugene Ostroukhov) #8536
[0b90ff7a8d] - inspector: introduce a smoke test (Eugene Ostroukhov) #8429
[3222b66abe] - inspector: fix tests on Windows (Eugene Ostroukhov) #8528
[a1925a7955] - lib: minor improvements to bootstrap_node.js (Rémy MEJA) #8906
[313a45da24] - lib: changed var to const in linkedlist (Adri Van Houdt) #8609
[6cd5588a67] - lib: fix TypeError in v8-polyfill (Wyatt Preul) #8863
[ba361a2aa0] - lib: remove let from for loops (Myles Borins) #8873
[beb288b639] - lib: changed var to const in internal/v8_polyfill (Adri Van Houdt) #8615
[858a7bbacf] - lib: changed var to const in bootstrap_node.js (Adri Van Houdt) #8588
[31232adebb] - module: fix comment from "read-only" to "shallow" (Bryan English) #8887
[0eaf3ff53c] - path: fallback to process cwd when resolving drive cwd (Jason Ginchereau) #8541
[d72a7b3d0c] - path: fix path.relative UNC path result (Jason Ginchereau) #8523
[e0c10f63b0] - process: changed var to const in internal/process.js (Adri Van Houdt) #8614
[37ce6da59a] - process: changed var to const in internal/v8_prof_processor (Adri Van Houdt) #8619
[e8f1cf1bd8] - process: changed var to const in internal/process/promises (Adri Van Houdt) #8620
[4c194ee7bd] - readline: fix concievably typo in readline.js (Miguel Angel Asencio Hurtado) #8953
[8c91a9b848] - repl: improve .help message (Roman Reiss) #8519
[443bedeb68] - src: remove out-of-date TODO comment (Daniel Bevenius) #9000
[59aa103df2] - src: fix typo in #endif comment (Juan Andres Andrango) #8989
[8a2ba6fe83] - src: fix build for older clang (Zach Bjornson) #7645
[d8df78c573] - src: remove unused function declaration (Brian White) #8878
[a6b9ffbf5b] - src: refactor reading of options in contextify (Franziska Hinkelmann) #8850
[324c8b5f7e] - src: fixes misplaced comment (Madhav Gharmalkar) #8860
[86b9db601d] - src: add missing length argument to send comment (Daniel Bevenius) #8816
[aa11205f71] - src: rename CHECK_NOT_OOB() macro (Ben Noordhuis) #8784
[8be818eb07] - src: fix minor typo in comments (Daniel Bevenius) #8736
[41ad6e3965] - src: rename handle_ to handle in HandleWrap (Daniel Bevenius) #8712
[9205edc35c] - src: don't abort when c-ares initialization fails (Ben Noordhuis) #8710
[6ddfe89fdf] - src: remove VS 2013 compatibility hacks (Ben Noordhuis) #8067
[a9491f1604] - src: make ReqWrap req_ member private (Daniel Bevenius) #8532
[5ebce30468] - src: remove unneeded ABORT after CHECK (yorkie) #8593
[2dbef79ca7] - src: handle thrown errors in CopyProperties() (cjihrig) #8649
[52f0f64e79] - src: use MaybeStackBuffer on DoSend/Writev (Paul Kiddie) #8626
[a62999ac70] - src: add /json/protocol endpoint to inspector (Ben Noordhuis) #7491
[4e7c67cf55] - (SEMVER-MINOR) stream: proper instanceof for Writables (Anna Henningsen) #8834
[56951b4367] - test: add coverage for spawnSync() killSignal (cjihrig) #8960
[05f74120e8] - test: refactor assert in internet test-dns.js (Junshu Okamoto) #8980
[1a4207d91d] - test: various test improvements (James M Snell) #8468
[c4f0bb237a] - test: expand test coverage for url.js (Junshu Okamoto) #8976
[4e9b6a0022] - test: fix test-child-process-fork-regr-gh-2847 (Santiago Gimeno) #8954
[b579fcab45] - test: remove FIXME pummel/test-tls-securepair-client (Alfred Cepeda) #8757
[9b0733fd49] - test: run faster and cleanup after run (Wyatt Preul) #8848
[df0211d95e] - test: refactor test-net-server-max-connections (Rich Trott) #8931
[147a06d4a5] - test: enable addons test to pass with debug build (Daniel Bevenius) #8836
[636026a22d] - test: remove blank lines at end of files (Rich Trott) #8920
[93c48743f1] - test: refactor test-file-write-stream (Sudaraka Wijesinghe) #8894
[516486526f] - test: cleanup/update test-dgram-empty-packet.js (Michael Macherey) #8896
[2f0f596e07] - test: fix child-process-uid-gid on Windows (Michaël Zasso) #8924
[52d0424c56] - test: mark test-tick-processor-unknown flaky (Rich Trott) #8900
[424c126742] - test: fix -Wformat warnings in inspector cctest (Ben Noordhuis) #8034
[76f80a3f74] - test: fix running child-process-uid-gid as root (Wyatt Preul) #8864
[11ba56c83d] - test: expand test coverage for url.js (Junshu Okamoto) #8859
[c9450cef1b] - test: clean up test-timers-immediate (Rich Trott) #8857
[17922de555] - test: add and assert readable/writable arguments (Daniel Bevenius) #8815
[bc710ef461] - test: cleanup/update test-os.js (Mike Woods) #8761
[fc42825530] - test: modernize syntax, add strict checks (Lydia Kats) #8841
[72de8594fe] - test: use common.skip for tap skip output (Lydia Kats) #8841
[4fa0fc59cd] - test: stream writable ended state (Italo A. Casas) #8778
[6dbda6aa86] - test: clean up test-buffer-badhex (Jeremiah Senkpiel) #7773
[af092f1fc0] - test: cleanup test-net-server-address.js (Akito Ito) #8586
[af84528d41] - test: replace indexOf, assert.equal, add mustCall() (Richard Hong) #8766
[2e95b0e24b] - test: fixed FIXME in test-repl-persistent-history (Alfred Cepeda) #8756
[76fd7db521] - test: update var to const, use arrow functions (Matt Lang) #8595
[5bd13a3d6c] - test: cleanup parallel/test-fs-readfile-unlink.js (nohmapp) #8764
[f523b82c7b] - test: cleanup parallel/test-file-write-stream2.js (Jenna Vuong) #8770
[9252e7a52d] - test: cleanup parallel/test-fs-realpath.js (mpmckenna8) #8769
[6ba8aa963e] - test: changed var to const, added strict equal checks (Lydia Katsamberis) #8762
[81ed50c5da] - test: add assertions to zero length buffer test (Lauren Spiegel) #8729
[b2aea505df] - test: use Buffer.alloc (Eugene Ostroukhov) #8748
[5e4d8984b4] - test: accept expected AIX result test-stdio-closed (Rich Trott) #8755
[906283837f] - test: skip cpu-intensive tests on slow hosts (Rich Trott) #8652
[aa5a16a8ae] - test: add expectWarning to common (Michaël Zasso) #8662
[b46d8cdcde] - test: cleanup vars to const and '==' to '===' (oogz) #8705
[5540e3d488] - test: fix test-cluster-worker-init.js flakyness (Ilkka Myller) #8703
[ed625fefd2] - test: add tests for add/remove header after sent (Niklas Ingholt) #8682
[e9d1426080] - test: enable cyrillic punycode test case (Ben Noordhuis) #8695
[b62735a302] - test: remove call to net.Socket.resume() (Alfred Cepeda) #8679
[9ca8722203] - test: cleanup stream tests (Italo A. Casas) #8668
[dfd022ff9e] - test: update test/parallel/test-child-process-stdio.js (matzavinos) #8584
[fef4341f46] - test: update test/parallel/test-eval.js (Pavol Otcenas) #8590
[43d6212257] - test: update test/parallel/test-child-process-send-utf8.js (Jonathan Prince) #8594
[6924a4d237] - test: update test/parallel/test-fs-read.js (Richard Walker) #8596
[1b494d3b96] - test: fixup parallel/test-async-wrap-post-did-throw.js (Jermaine Oppong) #8625
[edf9242f56] - test: cleanup test-os.js (delvedor) #8606
[d4ad8d9619] - test: refactor test-dgram-bind-shared-ports.js (Fikret Burak Gazioglu) #8582
[714cbfd46c] - test: update test-child-process-recv-handle (Jonathan Prince) #8648
[c664109c72] - test: improve test-child-process-stdout-flush (Wietse Venema) #8581
[c98d0c984d] - test: cleanup test-child-process-exec-env.js (Yevgen Safronov) #8600
[3269a7d6f5] - test: cleanup test-tls-connect-given-socket.js (Thomas van Lankveld) #8616
[5e5a1c0e3c] - test: cleanup test-child-process-buffering.js (Adri Van Houdt) #8578
[bcba27e8c6] - test: update test-cluster-disconnect-unshared-udp (matt-in-a-hat) #8599
[5a59ca6168] - test: changing equal to strictEqual in path (lrlna) #8628
[3ddf77fc24] - test: modernize js and tighten equality checking (Pavol Otcenas) #8618
[34f24e559d] - test: refactor parallel/test-tcp-wrap-listen (scott stern) #8640
[6fb8ebd98c] - test: cleanup cluster-disconnect-unshared-tcp test (Rachel) #8598
[fd7f87ef40] - test: var variables to const in zlib (Ishan Aditya) #8627
[fc6b4970b5] - test: modernize JS and tighten equality checking (Pavol Otcenas) #8580
[f2f6353bc4] - test: cleanup test-intl.js (Alessandro Metta) #8641
[14025db8c5] - test: cleanup test-child-process-disconnect.js (Pavol Otcenas) #8602
[9032ba60a5] - test: replace var by const test-tls-zero-clear-in (Sébastien Barbieri) #8621
[1aa1740f12] - test: improve coverage of the util module (Michaël Zasso) #8633
[28d009be76] - test: refactored test-crypto-random.js (Tobias Kahse) #8632
[a89deb9c59] - test: cleanup test-c-ares.js (Yevgen Safronov) #8577
[9c3d521d90] - test: improve child_process tests (Dennis Schwartz) #8617
[ba88f5b8f8] - test: improve coverage of the buffer module (Michaël Zasso) #8552
[b10467cde2] - test: improve test-https-agent.js (Dan.Williams) #8517
[82b7894d3b] - test: make test-tick-processor.js non-flaky (Fedor Indutny) #8542
[30e995f714] - test: add coverage for client._addHandle() (Rich Trott) #8518
[ff238c8d15] - test: fix flaky test-force-repl (Rich Trott) #8484
[83ed5085f4] - test: mark test-inspector flaky on windows (Rich Trott) #8835
[5a7dd18699] - test,benchmark: fix lint errors on v6.x (Jeremiah Senkpiel) #9029
[4492cc3e25] - test,lib: align arguments in multiline calls (Rich Trott) #8642
[3a72a606cb] - timers: improve setImmediate() performance (Brian White) #8655
[06c411753e] - timers: improve setTimeout/Interval performance (Brian White) #8661
[02da155e4b] - timers: remove unreachable code (yorkie) #8487
[cf92be6939] - tls: TLSSocket emits 'error' on handshake failure (Mariusz 'koder' Chwalba) #8805
[bee1955f4e] - tls: handle error events with _tlsError (Fedor Indutny) #8889
[d2eaa12a23] - tls: improve createSecureContext in _tls_common (yorkie) #8781
[b0234e7968] - tls: add 'new' keyword for Array constructor call (Mike Ralphson) #8514
[58c55108d2] - tools: disallow extra blank lines at EOF/BOF (Rich Trott) #8920
[336d505dd9] - tools: enable more remark-lint rules (Сковорода Никита Андреевич) #8708
[0310655cda] - tools: update remark configuration (Сковорода Никита Андреевич) #8666
[5c6284a417] - tools: add additional ESLint rules (Teddy Katz) #8643
[73d54a6fc7] - tools: add eslint rule prefer-assert-methods (Dany Shaanan) #8622
[ac6927f549] - tools: make argument alignment linting more strict (Rich Trott) #8642
[8684cea9b7] - tools: make sure links are correctly passed to marked (Timothy Gu) #8494
[a12ff5cc5d] - tools: clean up icu/README.md formatting (Сковорода Никита Андреевич) #8660
[fc68b12bc3] - (SEMVER-MINOR) util: Add format for SharedArrayBuffer (Yosuke Furukawa) #8587
[38be15549e] - util: don't init Debug if it's not needed yet (Bryan English) #8452
[7728f95967] - util: simplify SIMD setup (Dany Shaanan) #8579
[8282d6fc60] - vm: add error message if we abort (Franziska Hinkelmann) #8634
[b83f51a326] - win,msi: mark INSTALLDIR property as secure (João Reis) #8795
[623d3c6eb5] - win,tools: ignore linting for line breaks (João Reis) #8785
[7403aaa13f] - zlib: tighten up dictionary tests (Tarjei Husøy) #8512
[15474951a5] - zlib: fix raw inflate with custom dictionary (Tarjei Husøy) #8512

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

6ec44c9dd6e9e7ed5145089aeb4437893873dd4de7cd8dfd7afb875f9b8eeb77  node-v6.8.0-aix-ppc64.tar.gz
4ff13860f6bda86ce1053c673548c7f5d301a42ceb2f103c781024c3b88d2083  node-v6.8.0-darwin-x64.tar.gz
f76d896e9e48d7a7544463492f65b9cfaf15a4ccccf7aff16de5f59f5ea5971b  node-v6.8.0-darwin-x64.tar.xz
1cac1f6816e26982cb652314f84fec76c0494c1fbd080fe86a400f841ef215f1  node-v6.8.0-headers.tar.gz
d6f386113c75d360b36bb70d7a008b00ecd531fe3f8602998412d82969b9de0d  node-v6.8.0-headers.tar.xz
c7524e35bfc1fd4961dfac6bd6d602f474e909d63e3e48f892906a183bd9aa04  node-v6.8.0-linux-arm64.tar.gz
46c3a34f57ebd2f9988223d5c552fdc6f3cd96bd8611cd94f5bc5ddab762e2c6  node-v6.8.0-linux-arm64.tar.xz
2ae978777979c4af49945ce46dd014eba18d50a94520a8555e60d10113308b2f  node-v6.8.0-linux-armv7l.tar.gz
636fb4e5cd2d499cb3feb473f62c1033b5c3621256209aa13952a15c96a4b65d  node-v6.8.0-linux-armv7l.tar.xz
d955c56f404287054bb7433b934636305d8f9788294da1b34e7942288497485c  node-v6.8.0-linux-ppc64le.tar.gz
20609c3ab0c7d4429aace56d9dad43bd79d7cfc45a2134908fc6a5259be6a039  node-v6.8.0-linux-ppc64le.tar.xz
c8bfd55be7f47efa7c6d2d051eef0b99c70d222a2c70c3a013cffb4b171e1808  node-v6.8.0-linux-ppc64.tar.gz
6ef8f001dad55337321b871965816dca880b20d0c6d05a88de93afbfbde256b8  node-v6.8.0-linux-ppc64.tar.xz
76225db134036a6f2426e5c8e854ee62e8e2d4b522d916874e995f88a22ddb14  node-v6.8.0-linux-s390x.tar.gz
854830d5638dcbf448cc87eecec51aed63bafadebe42ce6eb9f1237e6e241896  node-v6.8.0-linux-s390x.tar.xz
9ddd118262cbe27fd668bc17c9c786cdd27c6a291cc712b4937013e4665f6e6d  node-v6.8.0-linux-x64.tar.gz
1db91adb194a2fa65d48311502a13aa2ab9787212364a6925544b9f20b92a97b  node-v6.8.0-linux-x64.tar.xz
d79eccb95911d3d3cf742d059e2d2f7669db33ef8f7f1f38f023c0e553f26d30  node-v6.8.0-linux-x86.tar.gz
30eecdcd99eaa8c2a4fc4c5d2c979878aeaa480b2f937c2b7c34efd1ec1b5de4  node-v6.8.0-linux-x86.tar.xz
05d4ba510fe8e9cd0cacb276979d7327ca613543fe988c668baddcadc60cb2b1  node-v6.8.0.pkg
9346655f3724e81d5fb49140d36097957f5ede725cc5070a22b3be4ce423bf48  node-v6.8.0-sunos-x64.tar.gz
9182c4ce9c9c2084efb1c90be746c87ea0ea4349a37bf326cb1798c84f60bdd7  node-v6.8.0-sunos-x64.tar.xz
7ae4a80269e254791a57b1759d4e5eeb2127a44a431444a36c02d3ff8727ac88  node-v6.8.0-sunos-x86.tar.gz
a86c7a8afcb8df73b9b22f25e5ab7bdaecb5ad566f9bd7fb0cf29f42598645da  node-v6.8.0-sunos-x86.tar.xz
a8a2d4b74734991dd45e5b2b0b13617864f1283f6d6bc262e1e4d30741114352  node-v6.8.0.tar.gz
f832ce5a90a86615c2ab5a4d485e0a60666a800f07411a3244c88c1027ff598d  node-v6.8.0.tar.xz
65f579915f01cbf361f8071e9561cbd151d7a128b1cd7171a12e5d129bf049bb  node-v6.8.0-win-x64.7z
f8ebc521d109bcc9d5b94ffef2922beb05e2e19fe8d7572333acf1b509082c3e  node-v6.8.0-win-x64.zip
b90e68d9e22e11655a9d4ce86327628f31f484108555143c838f46fc7cd57930  node-v6.8.0-win-x86.7z
e94c33550a80c1a92caba5951bfc596bf40e33fcab2fd857d795a88d163829b7  node-v6.8.0-win-x86.zip
e4ebd121116fa2d22cae6a56962b3d8a9b002c775d7db6adcdff3ba6d30ee6b0  node-v6.8.0-x64.msi
2bf4bb535f926138393766ea163af1032d469cfb704f892f5b73a98da67d131a  node-v6.8.0-x86.msi
f052f2093d0d788950a0706a21aa9252e3db19393b33588592dbd6f7052b7cbd  win-x64/node.exe
1fe7ae8725f2d172d54a9d4ae3461686f05144986905f495d6def2ace38c7203  win-x64/node.lib
fdedf887b7ace4596b9ff764a741123a7b783abce3f174a83d458cdc9bfe1d13  win-x64/node_pdb.7z
2208cb79a7c1c8ebb0d4e20cbfa2da0ef1b18da3a303715292e11602ea2eac7f  win-x64/node_pdb.zip
bbb88d6eab73ca0b8d4d5d8c3f1816820c2b3470debfb8bd8ed5b5bd98ea3d4b  win-x86/node.exe
f859a599260092e1022ed9163c2da2a5e0b644d988a7532bd013d14218e5f25e  win-x86/node.lib
de29e3e862c47541ce9bb1d00143f4e6d1fd3e283eaf0472634c7ea45a062e12  win-x86/node_pdb.7z
0d3ffdbb43a7b5b35a10df7a2d9ae76fe10b7fd7728370e61a10a9de0abc36b9  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=oguF
-----END PGP SIGNATURE-----

Node v6.7.0 (Current)

Evan Lucas — Wed, 28 Sep 2016 00:49:35 GMT

This is an important security release. All Node.js users should consult the security release summary at for details on patched vulnerabilities.

Notable changes

Semver Minor:

openssl:
- Upgrade to 1.0.2i, fixes a number of defects impacting Node.js: CVE-2016-6304 ("OCSP Status Request extension unbounded memory growth", high severity), CVE-2016-2183, CVE-2016-2178 and CVE-2016-6306. (Shigeki Ohtsu) #8714
- Upgrade to 1.0.2j, fixes a defect included in 1.0.2i resulting in a crash when using CRLs, CVE-2016-7052. (Shigeki Ohtsu) #8786
- Remove support for loading dynamic third-party engine modules. An attacker may be able to hide malicious code to be inserted into Node.js at runtime by masquerading as one of the dynamic engine modules. Originally reported by Ahmed Zaki (Skype). (Ben Noordhuis) nodejs/node-private#73
http: CVE-2016-5325 - Properly validate for allowable characters in the reason argument in ServerResponse#writeHead(). Fixes a possible response splitting attack vector. This introduces a new case where throw may occur when configuring HTTP responses, users should already be adopting try/catch here. Originally reported independently by Evan Lucas and Romain Gaucher. (Evan Lucas) nodejs/node-private#60

Semver Patch:

buffer: Zero-fill excess bytes in new Buffer objects created with Buffer.concat() while providing a totalLength parameter that exceeds the total length of the original Buffer objects being concatenated. (Сковорода Никита Андреевич) nodejs/node-private#64
src: Fix regression where passing an empty password and/or salt to crypto.pbkdf2() would cause a fatal error (Rich Trott) #8572
tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of *. in the wildcard string. Originally reported by Alexander Minozhenko and James Bunton (Atlassian). (Ben Noordhuis) nodejs/node-private#75
v8: Fix regression where a regex on a frozen object was broken (Myles Borins) #8673

Commits

[8fb8c46303] - buffer: zero-fill uninitialized bytes in .concat() (Сковорода Никита Андреевич) nodejs/node-private#64
[e5998c44b4] - crypto: don't build hardware engines (Ben Noordhuis) nodejs/node-private#73
[ed4cd2eebe] - deps: cherry-pick 34880eb3dc from V8 upstream (Myles Borins) #8673
[f8ad0dc0e2] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
[9181def9d4] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
[2dee4af5c3] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
[4255dc82a9] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #8786
[c08d81df50] - deps: upgrade openssl sources to 1.0.2j (Shigeki Ohtsu) #8786
[2573efc9df] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #8714
[67751f3d7e] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
[4382de338b] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
[cfa00611b0] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
[3e4ea603b3] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #8714
[8937fd0dbb] - deps: upgrade openssl sources to 1.0.2i (Shigeki Ohtsu) #8714
[c0f13e56a2] - http: check reason chars in writeHead (Evan Lucas) nodejs/node-private#60
[743f0c9164] - lib: make tls.checkServerIdentity() more strict (Ben Noordhuis) nodejs/node-private#75
[38bed98a92] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
[a25fc3f715] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
[5902ba3989] - src: Malloc/Calloc size 0 returns non-null pointer (Rich Trott) #8572
[a14d832884] - test: remove openssl options of -no_ (Shigeki Ohtsu) #8714

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

69fab7a1ebeee54d5e3160eb9366e88a61500731fad86dee98c79c4a14b56bc6  node-v6.7.0-darwin-x64.tar.gz
b10270f028be73771fa8536f0c69b33f30e1bb1fd15d9a493a7365cde56af0d2  node-v6.7.0-darwin-x64.tar.xz
42f0fdcd937409842d76a5852782acfdb0b6fa8e3520df6694f2abaa7c9e942c  node-v6.7.0-headers.tar.gz
f6ddea52f8b13bcece38c965d13f6073bd7980dadcfd903b8c1872f6d8bbacb7  node-v6.7.0-headers.tar.xz
45ffd727bcab41a544ad7862fe985f6beac4fcd96c63e116ca467d1147ba6454  node-v6.7.0-linux-arm64.tar.gz
87f59a19d9a44ff938a553425c5c82a46be1f0cd43bf7c256e1c4fb61833a82a  node-v6.7.0-linux-arm64.tar.xz
0f8e0dbaa6bcccd22db75077fed1afb28c2b225b6cdc185913178ae395a68ef9  node-v6.7.0-linux-armv6l.tar.gz
bf07229d718ebe3a8d8bc59cbf06d945b89045285e44f36f516c8e0f65a5302b  node-v6.7.0-linux-armv6l.tar.xz
1e7e138ba8c54d7a0fbf5e3f188442a14a70409dc154b74b17635bcff74e4a81  node-v6.7.0-linux-armv7l.tar.gz
18b6d9df3e2aaba2d72e1f4c3cfdd3b963c23faa64d3ad72d5690959bc3dde08  node-v6.7.0-linux-armv7l.tar.xz
87f7dd1776bffd569d4f619dde99caca215c073f7d26853e16d6f93fcf681113  node-v6.7.0-linux-ppc64le.tar.gz
fc1b70f866a1c1972c55cc5d2a506f0dcc623e749d6cbe470d650c7c631f231e  node-v6.7.0-linux-ppc64le.tar.xz
e8ce540b592d337304a10f4eb19bb4efee889c6676c5f188d072bfb2a8089927  node-v6.7.0-linux-ppc64.tar.gz
6ee874b6567f7f06708f6ccb66a27dc7317b4c493b7a6c3bb49c1e53c4bdf31e  node-v6.7.0-linux-ppc64.tar.xz
e0f2616b4beb4c2505edb19e3cbedbf3d1c958441517cc9a1e918f6feaa4b95b  node-v6.7.0-linux-s390x.tar.gz
647bacc68bd0101b04074d5740492a6511dee69e23a7ff03765674d7a9fa93df  node-v6.7.0-linux-s390x.tar.xz
abe81b4150917cdbbeebc6c6b85003b80c972d32c8f5dfd2970d32e52a6877af  node-v6.7.0-linux-x64.tar.gz
09263a844c31933c6f31e576e580faf01d3bbb056efb8713388dc8d09674f8c2  node-v6.7.0-linux-x64.tar.xz
fa94c93a4a3600d68e003a399f5cf5e109c2d10505b4d9456373c25953eb9bf5  node-v6.7.0-linux-x86.tar.gz
e89a77020bd579186adbc46f6a668d3524f980c5fc75f63e1d5b5362423bcebb  node-v6.7.0-linux-x86.tar.xz
c5d46d0f105ed652c9a353d8411558c9c4610db874f01ef07e57ad613e5d4237  node-v6.7.0.pkg
33f240dac58a1293a08b66ecd01a70849c693e3a9e58a94cb7ee92126a894984  node-v6.7.0-sunos-x64.tar.gz
9df8f3d1048065fccb1c1746cfd1f3a22ef46075399e7dc92d38949e37607de7  node-v6.7.0-sunos-x64.tar.xz
80dacf34a5e17f3eeabe15e212005daeaa189caa424a83a23f302a9fa5996565  node-v6.7.0-sunos-x86.tar.gz
14bdf36ae5510a6565af69e1db651d34e75d2846a363610b6669b8c78e404b2a  node-v6.7.0-sunos-x86.tar.xz
02b8ee1719a11b9ab22bef9279519efaaf31dd0d39cba4c3a1176ccda400b8d6  node-v6.7.0.tar.gz
ceb028324aab1ee8c7ea6a62026f036f3ea71f5ef5212593d0f833f999dd3be5  node-v6.7.0.tar.xz
2eb013b15c718ec2b26768e6a325e73571ed1d2028af411307a1bbd549f709ed  node-v6.7.0-win-x64.7z
59971f8ea9fb1ac4c55ca36303fe32a0714049cf8a10843dbb5924a5d0624659  node-v6.7.0-win-x64.zip
8b4448e56223aed8c316b67336fdd1d94aeee71033934fb6bc071a358c5c8719  node-v6.7.0-win-x86.7z
d75bebea562a1da0965adc8f94d2c5a38a22cfc57959d37c5c1aeec4ea9f1c83  node-v6.7.0-win-x86.zip
2185a16f8a32087b75708b08d7e482a14597765c41d6b3711a8e6ed3a3358213  node-v6.7.0-x64.msi
0801c283200ac263cc0ca014f5d8e0ee531e1ebec6e99645a0bdd04b996c1605  node-v6.7.0-x86.msi
7ab8714273a9a1fa464ded6b543b52b6fb56c7d2c3d08ebe312b1c1be72a1477  win-x64/node.exe
17c521d3b19886f826f818b9806bb4d2af4615d5bf850c257dcdaef897e8ccaa  win-x64/node.lib
fa2f32b9f8ac97d26bb58da59c8a7299de5bd9f25b8879f8787ecd0ffbd36c3b  win-x64/node_pdb.7z
815d202704373b9894c5dc113d2a2812be5e73431f8061707e0fd012cbc0b8cc  win-x64/node_pdb.zip
a2e58867917250e013a49c4210b36aba04715159a71edcfb510c6225e3dab184  win-x86/node.exe
641503fd3d41c1bc04a95ee38e6dc2ffd9c9e5a35b3f5bfecb25965c963f2d17  win-x86/node.lib
36265c44782a8456b289c4776bf5de5ed648982f2b8dc97e17acd76258e249cf  win-x86/node_pdb.7z
2d8a25ba8e212715050ee03e4b0b9f547163ffaeb75288c9508a06e469677ff6  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=+Moe
-----END PGP SIGNATURE-----

Node v4.6.0 (LTS)

Rod Vagg — Wed, 28 Sep 2016 00:47:06 GMT

This is an important security release. All Node.js users should consult the security release summary at for details on patched vulnerabilities.

Notable Changes

Semver Minor:

openssl:
- Upgrade to 1.0.2i, fixes a number of defects impacting Node.js: CVE-2016-6304 ("OCSP Status Request extension unbounded memory growth", high severity), CVE-2016-2183, CVE-2016-6303, CVE-2016-2178 and CVE-2016-6306. (Shigeki Ohtsu) #8714
- Upgrade to 1.0.2j, fixes a defect included in 1.0.2i resulting in a crash when using CRLs, CVE-2016-7052. (Shigeki Ohtsu) #8786
- Remove support for loading dynamic third-party engine modules. An attacker may be able to hide malicious code to be inserted into Node.js at runtime by masquerading as one of the dynamic engine modules. Originally reported by Ahmed Zaki (Skype). (Ben Noordhuis) nodejs/node-private#70
http: CVE-2016-5325 - Properly validate for allowable characters in the reason argument in ServerResponse#writeHead(). Fixes a possible response splitting attack vector. This introduces a new case where throw may occur when configuring HTTP responses, users should already be adopting try/catch here. Originally reported independently by Evan Lucas and Romain Gaucher. (Evan Lucas) nodejs/node-private#46

Semver Patch:

buffer: Zero-fill excess bytes in new Buffer objects created with Buffer.concat() while providing a totalLength parameter that exceeds the total length of the original Buffer objects being concatenated. (Сковорода Никита Андреевич) nodejs/node-private#65
tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of *. in the wildcard string. Originally reported by Alexander Minozhenko and James Bunton (Atlassian). (Ben Noordhuis) nodejs/node-private#63

Commits

[93b10fbec2] - buffer: zero-fill uninitialized bytes in .concat() (Сковорода Никита Андреевич) nodejs/node-private#65
[c214e8847d] - crypto: don't build hardware engines (Ben Noordhuis) nodejs/node-private#70
[af9dda152c] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/node#1836
[6bb9749c33] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) nodejs/node#1389
[5176a8ad57] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) nodejs/node#1389
[aa9ed60a51] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #8786
[0c74e2ad35] - deps: upgrade openssl sources to 1.0.2j (Shigeki Ohtsu) #8786
[8f3d6760cf] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #8714
[e8f29e2ba8] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/node#1836
[01cf5b0ae7] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) nodejs/node#1389
[19ae4e8ae1] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) nodejs/node#1389
[cbed5e64be] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #8714
[e7fdace18f] - deps: upgrade openssl sources to 1.0.2i (Shigeki Ohtsu) #8714
[b5c57ff772] - http: check reason chars in writeHead (Evan Lucas) nodejs/node-private#46
[3ff82deb2c] - lib: make tls.checkServerIdentity() more strict (Ben Noordhuis) nodejs/node-private#63
[7c696e201a] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) nodejs/node#1389
[44e5776c0f] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) nodejs/node#1389
[c7a601c090] - test: remove openssl options of -no_ (Shigeki Ohtsu) #8714

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

525ab42c767525edb7e512c600dedb20d826a6f58e1d6d1b774651a1c782a267  node-v4.6.0-darwin-x64.tar.gz
3c728c25b541fd8b88826568e7867098658df7c45d2389b60877c093a9803bd0  node-v4.6.0-darwin-x64.tar.xz
5eb4b4324d72297066b4b8c91d0b1e7c82cabde9986c986682be66202f37176b  node-v4.6.0-headers.tar.gz
862ce573bcfd592ea0c24861c0097bd23ca842d263e03f5dfa1ce08be888f20f  node-v4.6.0-headers.tar.xz
bf03e7384b727bc80c0c59cf38ba5704d83faa7f455f40fa62a67c8331dde7d6  node-v4.6.0-linux-arm64.tar.gz
7683e664b648c4ec3f86935f4b4f9fbf56f19d171e1e29d5adf687fc4c392b5b  node-v4.6.0-linux-arm64.tar.xz
e7db1c612eb9dd55e3ff246bfa7c35f0b87664e6e2bc7b32891de8cc1e48f5a7  node-v4.6.0-linux-armv6l.tar.gz
766d10a73886bbe1a3abd4b78563a825408cab7e116e590f1bbdc9b88cc3aa09  node-v4.6.0-linux-armv6l.tar.xz
9e46082bef5b521afd483532c8d3715f33d1d4302b7980b904bea3182817275f  node-v4.6.0-linux-armv7l.tar.gz
def976771b4a2a4488b87a06c8295ffea55671f7f42df13e3718341d28bf2d40  node-v4.6.0-linux-armv7l.tar.xz
2aa9518ea637cc06877a01c40d4608cf9a7f1588000cf3e550e4ab24c170aee6  node-v4.6.0-linux-ppc64le.tar.gz
b06c39da4fae47e2d204cae183425a3a77849944c5be47c5807f4f08cef51f64  node-v4.6.0-linux-ppc64le.tar.xz
ee77fb6a1dfbe166c9faee25b4f110af25723c64b0abcb9085507b8445fa2e7b  node-v4.6.0-linux-ppc64.tar.gz
e35955a846c1082e1681fdcbf488a66e43f56fb0aa7205b86a4aa0ce69dfb1eb  node-v4.6.0-linux-ppc64.tar.xz
acf08148cecf245f28126122ac9128ff9909f00938b18d80fc0b92648d1c98a8  node-v4.6.0-linux-x64.tar.gz
a77ceb75a05984153304ad0f09b11d234ca54a67714ba575b52e4298df0343d1  node-v4.6.0-linux-x64.tar.xz
9aab75618de0dca640d747aa25073cbb5a01342dd8aa177df8112e26a39541f4  node-v4.6.0-linux-x86.tar.gz
8994ee2c180a97fc4280bfb390444a4bcb2629290aa8243e7ab6271efab593f4  node-v4.6.0-linux-x86.tar.xz
0359c50c5d7e887c7f17d7ea4f42b1776ac8df263c6471bf8054b5c9f3d42a67  node-v4.6.0.pkg
e9a02da71d0cd6a1874f4a7d227dfcbe6ab9492eba419b5c9a83c8c95065195f  node-v4.6.0-sunos-x64.tar.gz
8ea3d2887b4850fb92f75573f30bbb257b7cd11f71cda12becc34868c535acf8  node-v4.6.0-sunos-x64.tar.xz
f8536a25629ef1ad3228b2d712e2fa43bf66980673d3cdf469da37c0407e9633  node-v4.6.0-sunos-x86.tar.gz
5750a8256356f43c6b80854b7c6ce46d6933e64cf5f2efecdf4841e4fe582a28  node-v4.6.0-sunos-x86.tar.xz
0838f12e329edb252e6e6baddca85632bf5ff2ec900e737e88f9bf9b38946b1b  node-v4.6.0.tar.gz
42910dbd34e49bfc40580e06753947c30d31101455a38e9f0343a23d67c0c694  node-v4.6.0.tar.xz
0c6509c13cfa9795f08b9bf694383de7e4d93cde14a9e8979a92f21736e19498  node-v4.6.0-win-x64.7z
0782bd50251c2a159fba5b874c56fb4a6680f454cc16892cee8e62d17b7d6f60  node-v4.6.0-win-x64.zip
413f98f2b765fe862ff6971724c3f265dbfe5a2cb865dd1894b4447426542c91  node-v4.6.0-win-x86.7z
13a5dcb90a8397f62c55945b65cb1c7b9d7576af3cbfc8d9cb67f72edcf68201  node-v4.6.0-win-x86.zip
80926b2df6e7efc8adda2e1fcb6328b99fe878d728cf93f39b0c710adc1bcb35  node-v4.6.0-x64.msi
5f91bf57512c1fa96d016c8f6236c689998ed926faa13aaf2170154342ca915a  node-v4.6.0-x86.msi
7564472c672e729a724ffe890ba06ec318c9e311684516a25a47b3f1e549504e  win-x64/node.exe
24178152fc3a99b9b83a1620897c5624cb7e0ba0544da38e18ca0cde807435d4  win-x64/node.lib
44dbbec125f3c4804ed5d002628c7ddb8e51cd352af0542b9edebcfd718967b5  win-x64/node_pdb.7z
b92e5e5031f19f201ec4568d7761c263af9a20e02b34bdd9e5f7191750aee3fb  win-x64/node_pdb.zip
7c9287cec4379082393d85af919a36a3512aa6bfcbf3deba3261a472580041f8  win-x86/node.exe
7d5988939f1567a4d7180010f49ec36b8d3897a8eccb78e461a774d8d2de614e  win-x86/node.lib
98f955f69195f12ec429e4cff629c650a6b1dcb43a1c18cef9cf79a11067c88d  win-x86/node_pdb.7z
0d0faf3bf0fcf50a943d8202d24d8eb8bb0695ea99498360c1a8a745c7811fd7  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJX6xhwAAoJEMJzeS99g1RdoksH/139ljOj+Vjc0nVNRn5m2KxC
3gldiKMaNBeefV9JOA3tG1fei3KPvO/PRHVCYogQO8IEEpJ5Yer+zQpsLOg/xGDR
nsg9xOBupnSlUAfALilWhkDkBDgcauuiII3tP98GjDaSS+cH6Pctt08l2XTCROYk
YThc0nonmobDGSsHVf4biv+ySMocmpZGU0h10xS2lRVlrxMpEzsxVuCSv52fRDKy
gD0Hf9ZSFi9i1MIxKOIolYpdIVmrS29c6J0LbjW2WcTk21jIOENXEk1uEl71OWHD
plT4hauehu/3a89FcqsOu10MqLStFuEm0T1CXtmn4/Vm2FhJnZfdiCDT1YABD00=
=LyAk
-----END PGP SIGNATURE-----

Node v0.12.16 (Maintenance)

Rod Vagg — Wed, 28 Sep 2016 00:45:43 GMT

This is an important security release. All Node.js users should consult the security release summary at for details on patched vulnerabilities.

Notable changes:

buffer: Zero-fill excess bytes in new Buffer objects created with Buffer.concat() while providing a totalLength parameter that exceeds the total length of the original Buffer objects being concatenated. (Сковорода Никита Андреевич)
http:
- CVE-2016-5325 - Properly validate for allowable characters in the reason argument in ServerResponse#writeHead(). Fixes a possible response splitting attack vector. This introduces a new case where throw may occur when configuring HTTP responses, users should already be adopting try/catch here. Originally reported independently by Evan Lucas and Romain Gaucher. (Evan Lucas)
- Invalid status codes can no longer be sent. Limited to 3 digit numbers between 100 - 999. Lack of proper validation may also serve as a potential response splitting attack vector. Backported from v4.x. (Brian White)
openssl:
- Upgrade to 1.0.1u, fixes a number of defects impacting Node.js: CVE-2016-6304 ("OCSP Status Request extension unbounded memory growth", high severity), CVE-2016-2183, CVE-2016-6303, CVE-2016-2178 and CVE-2016-6306.
- Remove support for loading dynamic third-party engine modules. An attacker may be able to hide malicious code to be inserted into Node.js at runtime by masquerading as one of the dynamic engine modules. Originally reported by Ahmed Zaki (Skype). (Ben Noordhuis, Rod Vagg)
tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of *. in the wildcard string. Originally reported by Alexander Minozhenko and James Bunton (Atlassian). (Ben Noordhuis)

Commits:

[38d7258d89] - buffer: zero-fill uninitialized bytes in .concat() (Сковорода Никита Андреевич) https://github.com/nodejs/node-private/pull/66
[1ba6d16786] - build: turn on -fno-delete-null-pointer-checks (Ben Noordhuis) https://github.com/nodejs/node/pull/6737
[71e4285e27] - crypto: don't build hardware engines (Rod Vagg) https://github.com/nodejs/node-private/pull/69
[b6e0105a66] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25368
[1caec97eab] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) https://github.com/nodejs/node-v0.x-archive/pull/25654
[734bc6938b] - deps: separate sha256/sha512-x86_64.pl for openssl (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25654
[7cc6d4eb5c] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) https://github.com/nodejs/node/pull/8718
[4a9da21217] - deps: upgrade openssl sources to 1.0.1u (Shigeki Ohtsu) https://github.com/nodejs/node/pull/8718
[6d977902bd] - http: check reason chars in writeHead (Evan Lucas) https://github.com/nodejs/node-private/pull/47
[ad470e496b] - http: disallow sending obviously invalid status codes (Evan Lucas) https://github.com/nodejs/node-private/pull/47
[9dbde2fc88] - lib: make tls.checkServerIdentity() more strict (Ben Noordhuis) https://github.com/nodejs/node-private/pull/61
[db80592071] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25654

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

6e1d0df2fbdb9255b1ad7fd5b4aa96590ced9053406b9ae336535dd587ae1631  node.exe
a0b4c351cc2d3624cf07c68fa9fcec08a7aa146c4436daf1325369345f3ae2ef  node.exp
24b3e250cfa8155d2f002af8328760aaa06ddceff745794e86bb3d0e372a244b  node.lib
cc8fbc5549d4b9dfd44a7cc76619cf635712fba8ab153fcbd37d94fcad130184  node.pdb
c602cbced0d6a2fb9d97f25a72833cf564b35fdf742f8627a93b6cdb5132ea95  node-v0.12.16-darwin-x64.tar.gz
5a91d99d8944ec8f88c2c6b9d51ad4159e84c2fcfcb29ddec6ea8516b05233e0  node-v0.12.16-darwin-x64.tar.xz
2cb0b6d33deab16aa261eeadec9c0da40d23e391b626a096f36b75ded62e471f  node-v0.12.16-darwin-x86.tar.gz
d0feea70fc15b658101b3517fe57c0cc9b3dedf4116f349c4be45e4850251964  node-v0.12.16-darwin-x86.tar.xz
cb30a68fc3a03b8bb98d8b17e389537610c7cf663e7dd113868c13c99fcffee6  node-v0.12.16-headers.tar.gz
84a1b0007dbaad41f5dc15ca2b57e365fa1cd82d4b1b9d744ab62dccd920b29e  node-v0.12.16-headers.tar.xz
d9e1cd239844f2a5641e02e48b3c7955e3e73ff3c3d20629c24b561f08ab8219  node-v0.12.16-linux-x64.tar.gz
7905d4c22aab6d65121a35daeada11d217f5d9608d5bde81007ccd908f3f793f  node-v0.12.16-linux-x64.tar.xz
ea95fb22f07469d79fd0347e4f768267be50889fd6de8854bf2f834c346c93a4  node-v0.12.16-linux-x86.tar.gz
12f2f7fddf5796d07851cb3b923290925c6ca1cf77cd26e67f56e9b8f16df5d3  node-v0.12.16-linux-x86.tar.xz
bc9984523ccd944be1cb8de4f4a454b5c1325b9bfae8db8a024a3be60ea5027f  node-v0.12.16.pkg
817671fe6303a1bf2ea47876e2fbbe271ec3ba721b6e688836117a70cc2631c3  node-v0.12.16-sunos-x64.tar.gz
b59b734777b9f2ab8006f85420d3b8e24634f424b0deb3ee85ab71dd74a4a981  node-v0.12.16-sunos-x64.tar.xz
452ade498e7b4d0050cc8c60bb6aa2dcb16562026441ad78063f473435691984  node-v0.12.16-sunos-x86.tar.gz
ea0867a8df11422f72a313643a49a92a6b161706875bd4ab8c0708662f53b8ee  node-v0.12.16-sunos-x86.tar.xz
312c0b74b0815f0514de9bf00667850d4f6ce184126f02f3d8dbf40fd48235eb  node-v0.12.16.tar.gz
4ce3a862eb28be752fbd65fe032c1d55cbbc1145af39292766eea701f67ba5f6  node-v0.12.16.tar.xz
9c66769c2b40c042658e3505432f8cf3c1c700245e93be98a24c482cec5923ea  node-v0.12.16-x86.msi
92111f120281409f0f41d8afb0746cc328c56227f6264ef610673268486d2043  openssl-cli.exe
b44576e0f9ee304102038491deb77c5b2d44a0499d119d23a0da945ff54308f6  openssl-cli.pdb
16e89836b368c67759ddb115ee5ed70449686cd387918c94bc0fa384120d586f  x64/node.exe
8b0fb2ffe3fa2aedf892a338d8783ce3b49a775335af007f41e0a293e692c436  x64/node.exp
7e060f0c42315dd3267ff4ab3907ab537d6b491c52b2353f4482a39146d73864  x64/node.lib
2bcc5665344c8c625d385d293fad2d520e332d06a327cd8bc1d7ede5ddff91f8  x64/node.pdb
4dd5fb2c022dfc46dd53c68bfb2461d4a8d8d6c79351f82db48af08e6193dd18  x64/node-v0.12.16-x64.msi
a5e97c0142cdffd2ce9dfad8652e2ab52a5503f5a91c8cfdcc653836cbd0e053  x64/openssl-cli.exe
d305298bfc3348bd0b01d84a0de9a16c04ae396261663fd44122c58ba9950c3c  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJX6w2WAAoJEMJzeS99g1RdK88H/iV7CbWaI9/13eez1uKRZZHz
B/gGrcaCY6zihqCX6VT8uK/xhnI+ZRtxkTzwHxMnbYAuTK1V5tf4BJQOOXygm0+U
AsQAlJEZja9vb5D4hA+4wwSct3F39cADdgebpgPpAzdwB/xAkJZDNSrP9qtJs3gC
JjBX+pxepD9UHrfr9Jjka1yntdd+LXIaS4kHbdkolHAfrFGw+iTyjzibnRHndomb
JYC10JB+IGEFletFHylfj2J5znb1F4bHhatkoPDVPjat8KZLvXZCKeCdcLEWmYa5
mSSiw0VDmBcRnxkT648RKw12vULxQOV2ahVxc402Xbc2iMaekXOC0eaW2jfTolE=
=Hxbw
-----END PGP SIGNATURE-----

Node v0.10.47 (Maintenance)

Rod Vagg — Wed, 28 Sep 2016 00:43:22 GMT

This is an important security release. All Node.js users should consult the security release summary at for details on patched vulnerabilities.

Notable changes:

buffer: Zero-fill excess bytes in new Buffer objects created with Buffer.concat() while providing a totalLength parameter that exceeds the total length of the original Buffer objects being concatenated. (Сковорода Никита Андреевич)
http:
- CVE-2016-5325 - Properly validate for allowable characters in the reason argument in ServerResponse#writeHead(). Fixes a possible response splitting attack vector. This introduces a new case where throw may occur when configuring HTTP responses, users should already be adopting try/catch here. Originally reported independently by Evan Lucas and Romain Gaucher. (Evan Lucas)
- Invalid status codes can no longer be sent. Limited to 3 digit numbers between 100 - 999. Lack of proper validation may also serve as a potential response splitting attack vector. Backported from v4.x. (Brian White)
openssl: Upgrade to 1.0.1u, fixes a number of defects impacting Node.js: CVE-2016-6304 ("OCSP Status Request extension unbounded memory growth", high severity), CVE-2016-2183, CVE-2016-2183, CVE-2016-2178 and CVE-2016-6306.
tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of *. in the wildcard string. Originally reported by Alexander Minozhenko and James Bunton (Atlassian) (Ben Noordhuis)

Commits:

[fc259c7dc4] - buffer: zero-fill uninitialized bytes in .concat() (Сковорода Никита Андреевич) https://github.com/nodejs/node-private/pull/67
[35b49ed4bb] - build: turn on -fno-delete-null-pointer-checks (Ben Noordhuis) https://github.com/nodejs/node/pull/6738
[03f4920d6a] - crypto: don't build hardware engines (Rod Vagg) https://github.com/nodejs/node-private/pull/68
[1cbdb1957d] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25368
[c66408cd0c] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) https://github.com/nodejs/node-v0.x-archive/pull/25654
[68f88ea792] - deps: separate sha256/sha512-x86_64.pl for openssl (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25654
[884d50b348] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) https://github.com/nodejs/node/pull/8718
[bfd6cb5699] - deps: upgrade openssl sources to 1.0.1u (Shigeki Ohtsu) https://github.com/nodejs/node/pull/8718
[3614a173d0] - http: check reason chars in writeHead (Evan Lucas) https://github.com/nodejs/node-private/pull/48
[f2433430ca] - http: disallow sending obviously invalid status codes (Evan Lucas) https://github.com/nodejs/node-private/pull/48
[0d7e21ee7b] - lib: make tls.checkServerIdentity() more strict (Ben Noordhuis) https://github.com/nodejs/node-private/pull/62
[1f4a6f5bd1] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) https://github.com/nodejs/node-v0.x-archive/pull/25654
[88dcc7f5bb] - v8: fix -Wsign-compare warning in Zone::New() (Ben Noordhuis) https://github.com/nodejs/node-private/pull/62
[fd8ac56c75] - v8: fix build errors with g++ 6.1.1 (Ben Noordhuis) https://github.com/nodejs/node-private/pull/62

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

cee8789aac9e2e5b96a1e63ae5e43ed757321c565b64a3d5d239472b18254312  node.exe
6010956e477cd2494d7d7decfca672580558519f225e797a5558955a9fbf8419  node.exp
04358767337029cab84cad1e48b95587bdeca628646437b89eae877cb3506f57  node.lib
5533b872d78b6bfb1d19ef482930dae79c3e8a85915d4b26100d2067affee6de  node.pdb
6920608a46761c33056d78e504222a3a42dc8c0cf8ab6ff7497cd4a81b06d090  node-v0.10.47-darwin-x64.tar.gz
e220a658b6d52408398a2c0f88ade702154503c50183f76542292142d9686e75  node-v0.10.47-darwin-x64.tar.xz
0907e94e81dc63e284e9dcb18925ceed102ceffb8a4cefab8f729c203f371c93  node-v0.10.47-darwin-x86.tar.gz
e5d042ee7d695e5e0f5c78c59f98ae3d47de7e5a63230894a0f51010cab2376b  node-v0.10.47-darwin-x86.tar.xz
6587d1040697dc7be7168413910a912f33a73ed95e0c19739abad4a63681b74e  node-v0.10.47-headers.tar.gz
a3ed6bf32e0afae7c676fff35d6819406cc235b24f09972b82f2c15ac90dc7c0  node-v0.10.47-headers.tar.xz
80757ae8f7bc3161fe44615344c784918ebd93a51ca6f789a75e3d472972eb77  node-v0.10.47-linux-x64.tar.gz
c93a84934546d6a0835f053ffc0e6a4273d967e7db442ecbfc731fa40c4b1bc2  node-v0.10.47-linux-x64.tar.xz
3ee003748c6ce90918a909ef58e21376db05a2988ba6fad92fded28541ca4006  node-v0.10.47-linux-x86.tar.gz
b406f6ff4938c36ac327ae00160fa4581f4e3d1e504c2b534136191cc7409026  node-v0.10.47-linux-x86.tar.xz
10f2dba060e184ba274cddd61494f4054a8d6e2062c8b13a461bfb2f08df07c4  node-v0.10.47.pkg
e4c9b4ff3745477c92ebd467606a5b7af2b95a51484f1491c91e1824c7b2b4ae  node-v0.10.47-sunos-x64.tar.gz
ef6dbe022a61aba2a86784ab11463aaf8ed637f2f8a989aef4edbaa620037330  node-v0.10.47-sunos-x64.tar.xz
f79fcd0700367506b6a8a7bf8ac0253146205ecc9617cb376744b108f126b4e3  node-v0.10.47-sunos-x86.tar.gz
0a8eddac8135851b33542ca10994a6ed4911a57584df3872bd259ca7f9120d17  node-v0.10.47-sunos-x86.tar.xz
5281fa7ddff755c34602a09ef8027f0bda0f7851b1e374fd0e0c33da93123056  node-v0.10.47.tar.gz
335bdf4db702885a8acaf2c9f241c70cabd62497361da81aca65c8e8a8e7ff09  node-v0.10.47.tar.xz
3c1aee23a996dcfd853a9fec4df05e898abab5332bac542a6ccf1661e45bf9f5  node-v0.10.47-x86.msi
0ab19d1cb3aea4b3639ce2c124c47344fd9060ce659031426fe96bfa6594b5d5  openssl-cli.exe
95d8bd6120105fd6a0327e44e8556cbdb5d21f5b431451f50eb58cf3f4112b4d  openssl-cli.pdb
20d866978497f83fcf8654576a6ce42bc496096c8407e8f324eb77fa181a8a59  x64/node.exe
ceb9e983cc14076e3737153aa070fc3459e8d6a3dd81b64d5ea3298e96899c9a  x64/node.exp
3ffe2805c1032ac4d636ecae6f322da862809bbaf12344e32b3f7b336b88c04e  x64/node.lib
d42d0a8a090a409428d42aed8987a0160dd3054d8f70e00ce44a1ebdb414d70c  x64/node.pdb
871f488dae2ccf8f1727b9773bdb4c9c0f36188783ae6d403f73c00363d9a9ed  x64/node-v0.10.47-x64.msi
ec2ac36c01d2153fc814f20143d1279aba47d39b68d06753259cf2353057e036  x64/openssl-cli.exe
513827079363c3c9391f1210d224eee91e18da80a69e56e0f238acc96e7f0f0e  x64/openssl-cli.pdb
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJX6w1sAAoJEMJzeS99g1RdN1oH/2XvMEVsuNrG1vh5ADeL2wfB
ZG2iXFKbnydKDLTtqBJuDtt7vNyat5KCzKjUMNW0gGtMp9rzE+AGP8WpuQg5xFLB
xiaGtTyQ6PuXem6g0j5dMz/D9PVRESDHz5D/WeJXHRoebtl+W8TOdVnCY0DatjHf
wCGjx7ngpEo3hN6KxBZFeI3TpK1YkVBRv+hwSsU5kPVwfbMhVQd89H/Y6VO0sydS
HJ+dMPSX/LyGjJ+oH941u5eOrnL+h4skOe1PDy0DD8HjO9oaNt8Blv4vhSdyOX2y
1e3OcS3VWQxvMWkdGEzbBX4xdjsQubs9cw2EejS6iDLrS9a6rwQjPCHQowJDg8k=
=gxlj
-----END PGP SIGNATURE-----

Security updates for all active release lines, September 2016

Rod Vagg — Fri, 23 Sep 2016 10:53:30 GMT

(Update 27-September-2016) Releases available

Updates are now available for all active Node.js release lines. These include the recently published versions of OpenSSL 1.0.1 and 1.0.2 as well as fixes for some Node.js-specific security-related defects.

The OpenSSL security fixes included in these updates that impact Node.js are:

CVE-2016-6304: "OCSP Status Request extension unbounded memory growth"
CVE-2016-2183: "SWEET32 Mitigation"
CVE-2016-6303: "OOB write in MDC2_Update()"
CVE-2016-2178: "Constant time flag not preserved in DSA signing"
CVE-2016-6306: "Certificate message OOB reads"

Details on each of these can be found in the original post below.

Additionally, OpenSSL 1.0.2j was released yesterday and included a fix for CVE-2016-7052. This flaw was introduced in last week's 1.0.2i release, and therefore does not directly impact Node.js.

Node.js-specific security flaws

Also included, are a number of fixes unrelated to the recent OpenSSL releases.

CVE-2016-7099: Wildcard certificates not properly validated

This is a high severity defect that would allow a malicious TLS server to serve an invalid wildcard certificate for its hostname and be improperly validated by a Node.js client. This is due to a flaw in the validation of *. in the wildcard name string.

Originally reported by Alexander Minozhenko and James Bunton (Atlassian).

All versions of Node.js are affected.

CVE-2016-5325: `reason` argument in `ServerResponse#writeHead()` not properly validated

This is a low severity security defect that that may make HTTP response splitting possible under certain circumstances. If user-input is passed to the reason argument to writeHead() on an HTTP response, a new-line character may be used to inject additional responses.

The fix for this defect introduces a new case where throw may occur when configuring HTTP responses. Users should already be adopting try/catch here.

This was originally reported independently by Evan Lucas and Romain Gaucher.

All versions of Node.js are affected.

Remove support for loading dynamic third-party engine modules

This is a low severity security defect. By default, OpenSSL will load a list of third-party engine modules when the ENGINE_load_builtin_engines() function is used. These are normally not present on a user's system. An attacker may be able to make Node.js load malicious code by masquerading it as one of the dynamic engine modules.

This defect primarily impacts Windows due to the standard DLL search paths. However, UNIX users may also be at risk with a poorly configured LD_LIBRARY_PATH environment variable or /etc/ld.so.conf path list.

Originally reported by Ahmed Zaki (Skype).

Node.js v6 (Current) is affected
Node.js v4 (LTS "Argon") is affected
Node.js v0.12 (Maintenance) is affected
Node.js v0.10 (Maintenance) is not affected

Downloads

Please note that this may be the final release of the v0.10 line as support ends in October. Please upgrade to v4 or above if you have not already done so.

Original post is included below

The Node.js project has scheduled updates for all of its active release lines to patch a number of security flaws. These flaws include some of those announced by the OpenSSL project as well as a number of Node.js-specific issues. We do not consider any of these updates to be critical. However, it is strongly recommended that all production instances of Node.js be upgraded when the releases are made available.

We intend to make releases available on or soon after the evening of Tuesday, the 27th of September, 2016, UTC (midday US time).

We consider some of the patches in these releases to be API breaking changes which would normally warrant an increase in the major-version number of Node.js. However, in accordance with our security procedures, we will be delivering these changes in minor-version increases (the y in x.y.z) where appropriate, and patch-version increases in v0.10 an v0.12 releases.

These are the expected version numbers for the releases:

Node.js v6.7.0 (Current)
Node.js v4.6.0 (LTS "Argon")
Node.js v0.12.16 (Maintenance)
Node.js v0.10.47 (Maintenance)

Additional notes:

As per our LTS schedule, support for Node.js v0.10 will cease in October. Therefore, this may be the final release of Node.js v0.10. If you are still using v0.10 in production, it is essential that you plan for a migration to v4 (LTS "Argon") or v6 (LTS to be announced in October) as soon as possible.
In accordance with our security release procedures, we will be limiting changes included in the LTS and Maintenance lines (v4, v0.12, and v0.10) for these updates to only security-related and other critical fixes that provide for maximum stability for users.

Node.js-specific security flaws

Included in these releases will be a number of fixes unrelated to the recent OpenSSL releases. These include:

A high-severity flaw relating to the processing of TLS certificates, impacting all versions of Node.js
A low-severity native code injection vulnerability on Windows, impacting all versions of Node.js
A low-severity HTTP validation error, impacting all versions of Node.js

Full disclosure of fixed vulnerabilities will be provided after all releases are made available for download.

September OpenSSL Releases

The OpenSSL project has announced the general availability of versions 1.0.2i (to be included in Node.js v4 and above) and 1.0.1u (to be included in Node.js v0.10 and v0.12). Our crypto team (Shigeki Ohtsu, Fedor Indutny, and Ben Noordhuis) have performed an analysis of the defects addressed in the OpenSSL releases to determine their impact on Node.js. The results of this analysis are included below.

CVE-2016-6304: OCSP Status Request extension unbounded memory growth

A malicious client can exhaust a server's memory, resulting in a denial of service (DoS) by sending very large OCSP Status Request extensions in a single session.

This flaw is labelled high severity due to the ease of use for a DoS attack and Node.js servers using TLS are vulnerable.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-6305: SSL_peek() hang on empty record

OpenSSL 1.1.0 SSL/TLS will hang during a call to SSL_peek() if the peer sends an empty record.

Node.js is not yet dependent on OpenSSL 1.1.0 so it is not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2183: SWEET32 Mitigation

SWEET32 is a new attack on older block cipher algorithms that use a block size of 64 bits.

As mitigation, OpenSSL has moved DES-based ciphers from the HIGH to MEDIUM group. As Node.js includes HIGH, but not MEDIUM, in its default suite, affected ciphers are no longer included unless the default suite is not used. Node's default TLS cipher suite can be found in the API documentation.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-6303: OOB write in MDC2_Update()

An overflow can occur in MDC2_Update() under certain circumstances resulting in an out of bounds (OOB) error. This attack is impractical on most platforms due to the size of data required to trigger the OOB error.

Node.js is impacted by this flaw but due to the impracticalities of exploiting it and the very low usage of of MDC-2, it is very low severity for Node.js users.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-6302: Malformed SHA512 ticket DoS

If a server uses SHA512 for TLS session ticket HMAC, it is vulnerable to a denial of service (DoS) attack via crash upon receiving a malformed ticket.

Node.js does not use SHA512 for session tickets and is therefore not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2182: OOB write in BN_bn2dec()

An out of bounds (OOB) write can occur in BN_bn2dec() if an application uses this function with an overly large BIGNUM. TLS is not affected because record limits will reject an oversized certificate before it is parsed.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2180: OOB read in TS_OBJ_print_bio()

An out of bounds (OOB) read can occur when large OIDs are presented via TS_OBJ_print_bio().

Node.js does not make use of the Time Stamp Authority functionality in OpenSSL and is therefore believed to be unaffected by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2177: Pointer arithmetic undefined behaviour

This programming flaw is described in the post at https://www.openssl.org/blog/blog/2016/06/27/undefined-pointer-arithmetic/.

It is unlikely that Node.js users are directly impacted by this.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2178: Constant time flag not preserved in DSA signing

A flaw in the OpenSSL DSA implementation means that a non-constant time codepath is followed for certain operations. This has been demonstrated through a cache-timing attack to be sufficient for an attacker to recover the private DSA key.

This is very low severity for Node.js users due to the difficulty in taking advantage of this attack and because DSA is very rarely used.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-2179: DTLS buffered message DoS

In a DTLS connection where handshake messages are delivered out-of-order, those messages that OpenSSL is not yet ready to process will be buffered for later use. This can be exploited to cause a denial of service (DoS) via memory exhaustion.

As Node.js does not support DTLS, users are not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-2179: DTLS replay protection DoS

A flaw in the DTLS replay attack protection mechanism that would allow an attacker to force a server to drop legitimate packets for a DTLS connection, resulting in a denial of service (DoS) for that connection.

As Node.js does not support DTLS, users are not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-6306: Certificate message OOB reads

Some missing message length checks can result in out of bounds (OOB) reads of up to 2 bytes beyond an allocated buffer. There is a theoretical denial of service (DoS) risk. This only impacts a client or a server which enables client authentication.

Node.js is impacted by this low severity flaw.

Assessment: All versions of Node.js are affected by this vulnerability.

CVE-2016-6307: Excessive allocation of memory in tls_get_message_header()

Excessive allocation of memory in OpenSSL 1.1.0 can be achieved by manipulating the length component of a TLS header.

Node.js is not yet dependent on OpenSSL 1.1.0 so it is not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

CVE-2016-6308: Excessive allocation of memory in dtls1_preprocess_fragment()

A flaw that is similar to CVE-2016-6307 but impacting DTLS.

Node.js is not yet dependent on OpenSSL 1.1.0, nor does it implement DTLS, so it is not impacted by this flaw.

Assessment: All versions of Node.js are believed to be unaffected by this vulnerability.

Contact and future updates

Please monitor the nodejs-sec Google Group for updates: https://groups.google.com/forum/#!forum/nodejs-sec or the Node.js website for release announcements: https://nodejs.org/en/blog/

The current Node.js security policy can be found at https://nodejs.org/en/security/.

Please contact security@nodejs.org if you wish to report a vulnerability in Node.js.

Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organisation.

Node v6.6.0 (Current)

Jeremiah Senkpiel — Thu, 15 Sep 2016 21:00:36 GMT

Notable changes

crypto: Added crypto.timingSafeEqual(). (not-an-aardvark) #8304
events: Made the "max event listeners" memory leak warning more accessible. (Anna Henningsen) #8298
promises: Unhandled rejections now emit a process warning after the first tick. (Benjamin Gruenbaum) #8223
repl: Added auto alignment for .editor mode. (Prince J Wesley) #8241
util: Some functionality has been added to util.inspect():
- Returning this from a custom inspect function now works. (Anna Henningsen) #8174
- Added support for Symbol-based custom inspection methods. (Anna Henningsen) #8174

Commits

[2ecc8c4c23] - async_wrap: add a missing case to test-async-wrap-throw-no-init (yorkie) #8198
[00f4bc3105] - benchmark: add benches for fs.stat & fs.statSync (Anna Henningsen) #8338
[7cc1391287] - benchmark: fix off-by-one error in fs benchmarks (Anna Henningsen) #8338
[6e3db283ed] - buffer: fix ArrayBuffer checks (Brian White) #8453
[dd51b1f428] - buffer,string_decoder: consolidate encoding validation logic (James M Snell) #7207
[a830e37dc9] - build: don't require processing docs for nightlies (Johan Bergström) #8325
[836bfc188b] - build: fix dependencies on AIX (Michael Dawson) #8285
[bc9d2fb543] - build: fix dependencies on AIX (Michael Dawson) #8272
[206b105b1e] - build: add missing files to zip and 7z packages (Richard Lau) #8069
[afb9917f16] - (SEMVER-MINOR) crypto: add crypto.timingSafeEqual() (not-an-aardvark) #8304
[1640e7a4da] - crypto: fix getDecoder() encoding check (atstojanov) #8301
[49f996f4f6] - crypto: make malloc failure check cross-platform (Rich Trott) #8352
[9c460d7475] - deps: add back no-op harmony shipping flags (Ali Ijaz Sheikh) #8445
[c8bcf1b591] - deps: workaround clang-3.4 ICE (Ali Ijaz Sheikh) #8343
[ac3471ca23] - deps: v8_inspector update (Eugene Ostroukhov) #8150
[f829660c71] - deps: cherry-pick 8ed65b97 from V8's upstream (Anna Henningsen) #8411
[c48cb2de48] - doc: link SIGTSTP / SIGCONT events in readline doc (Italo A. Casas) #8475
[ce1a46c02d] - doc: update onboarding PR landing info (Rich Trott) #8479
[92acff82ea] - doc: add CTC meeting minutes 2016-08-31 (Josh Gavant) #8424
[53877357fc] - doc: fix link on timers.md (yorkie) #8488
[09da5756e5] - doc: add added: information for crypto (Luigi Pinca) #8281
[19df5cef3b] - doc: fix example in repl documentation (Franziska Hinkelmann) #8469
[3ce6eaa3b9] - doc: note that listening on SIGSEGV & co is unsafe (Anna Henningsen) #8410
[c7771e6fbc] - doc: clarify sentence in event loop doc (Luigi Pinca) #8400
[2c45782b12] - doc: add CI help/support info to onboarding doc (Rich Trott) #8407
[cffe7b731d] - doc: add 2016-08-17 CTC meeting minutes (Josh Gavant) #8245
[fdd59cc04c] - doc: update BUILDING.md (Rich Trott) #8398
[d0a92be798] - doc: add 2016-08-10 CTC meeting minutes (Josh Gavant) #8229
[ca31187087] - doc: update CI content in onboarding doc (Rich Trott) #8374
[44983b1fdc] - doc: update authors list (James M Snell) #8346
[ee83f5d541] - doc: add return type of clientRequest.setTimeout (Mike Ralphson) #8356
[1695c84240] - doc: fix a wrong link,add '.md' to the link (Alexis374) #8315
[65096de443] - doc: fix typos (Mike Ralphson) #8370
[6d421a2ee2] - doc: fix broken link in dgram doc (Brian White) #8365
[fbabd36de9] - doc: update targos email in readme per request (James M Snell) #8389
[76a3050c34] - doc: update landing pr info in onboarding doc (Rich Trott) #8344
[372e4f3f79] - doc: bad/better examples for fs.access() and fs.exists() (Dan Fabulich) #7832
[9f18878eee] - doc: fix typo in stream doc (Hubert Mine) #8326
[59e96bb1af] - doc: adding danbev to collaborators (Daniel Bevenius) #8359
[b553e57f5f] - doc: clarify that path on windows accepts / and \ (James M Snell) #8291
[feab3d4c25] - doc: add lpinca to collaborators (Luigi Pinca) #8331
[d2b2abe9d9] - doc: doc that listen can be called multiple times (James M Snell) #8294
[54d76137cd] - doc: readline write() is processed as input (James M Snell) #8295
[48be8bc4e1] - doc: 'ipc' is required with fork stdio option (James M Snell) #8290
[47ecd21133] - doc: improve fs.truncate functions' documentation (Sakthipriyan Vairamani) #7648
[d565183c37] - doc: add added: information for modules (Luigi Pinca) #8250
[b6f5104145] - doc: fix onReadable reentry after unshift called (Zwb) #8200
[93ac875d53] - doc: add added: information for dgram (Luigi Pinca) #8196
[260663fbfa] - doc: add Myles Borins to the CTC (Rod Vagg) #8260
[a7c21759d9] - doc: fix buf.readUIntBE, buf.readUIntLE examples (David Keeler) #8240
[e4fcf55701] - doc: fix "timout" typo in timeout (Fangshi He) #8231
[03f5297ccd] - doc: include the optional options parameter (Sakthipriyan Vairamani) #7842
[605db31fe7] - (SEMVER-MINOR) events: make memory leak warning more accessible (Anna Henningsen) #8298
[fa4c4d655a] - http: fix connection upgrade checks (Brian White) #8238
[b603ac24cb] - inspector: use script name for target title (Eugene Ostroukhov) #8243
[13a522ac39] - inspector: make sure all messages are dispatched (Eugene Ostroukhov) #8264
[250a380231] - inspector: simplify buffer management (Eugene Ostroukhov) #8257
[354166c061] - inspector: use new inspector headers (Eugene Ostroukhov) #8150
[3ef8ba8bdc] - net: make holding the buffer in memory more robust (Anna Henningsen) #8252
[180867d6a6] - (SEMVER-MINOR) promise: warn on unhandled rejections (Benjamin Gruenbaum) #8223
[408308f2e6] - (SEMVER-MINOR) readline: key interval delay for \r & \n (Prince J Wesley) #8109
[6f20f477c4] - (SEMVER-MINOR) repl: Auto alignment for .editor mode (Prince J Wesley) #8241
[0d24247e50] - src: pull AfterConnect from pipe_wrap and tcp_wrap (Daniel Bevenius) #8448
[16202264d1] - src: remove unneeded Environment error methods (Ben Noordhuis) #8427
[8cbbb47e39] - src: update f function call comment (Daniel Bevenius) #8416
[d1d1433b02] - src: normalize malloc, realloc (Michael Dawson) #7564
[2c2a21ab56] - src: unbreak build when compiling against uclibc (Ben Noordhuis) #8308
[4e368c58ff] - src: moving f function call comment (Daniel Bevenius) #8405
[0f2c619f55] - src: avoid duplicate AtExit functions (Ali Ijaz Sheikh) #8273
[3358861470] - test: refector parallel/test-http.js (Junshu Okamoto) #8471
[2ce364ad10] - test: modernize JS and tighten equality checking (Peter Ogilvie) #8476
[1a30fe563d] - test: swapped == and equal to === and strictEqual (Christopher Dunavan) #8472
[d2b6b66037] - test: refactor test-net-pipe-connect-errors (Rich Trott) #8473
[3294c2c82b] - test: skip pseudo-tty/no_dropped_stdio test (Michael Dawson) #8470
[5baa4e0156] - test: clean up net server try ports test (Thomas Hunter II) #8458
[d0e61d4cc3] - test: make crypto.timingSafeEqual test less flaky (not-an-aardvark) #8456
[154d6893b0] - test: add test-debug-protocol-execute (Rich Trott) #8454
[6c30dddc36] - test: exercise EE function type checking paths (cjihrig) #8168
[d536d6d334] - test: increase _debugger coverage (Rich Trott) #8403
[6d07e57a36] - test: mark pseudo-tty/no_dropped_stdio as flaky (Michael Dawson) #8385
[680a4c8b8e] - test: test non-buffer/string with zlib (Rich Trott) #8350
[f0300eda27] - test: fix test-cluster-dgram-1 flakiness (Santiago Gimeno) #8383
[b8fa7c949d] - test: fix ::1 error in test-dns-ipv6 (Gibson Fahnestock) #8254
[c07e063dd9] - test: fix fs-watch-recursive flakiness on OS X (Santiago Gimeno) #4629
[1aa7168e91] - test: refactor/cleanup a number of cluster tests (James M Snell) #8261
[39cf7bf24d] - test: refactor parallel/test-process-env.js (Rich Trott) #8324
[40e84218a0] - test: add test for zlib.create*Raw() (Rich Trott) #8306
[cc61d1a3ba] - test: cleanup test require symlink (Paul Grock) #8305
[cde0a1edfd] - test: refactor test-debug-signal-cluster (Rich Trott) #8289
[bc6a7ca8e7] - test: additional refactoring/cleanup of buffer tests (James M Snell) #8283
[5d43131af4] - test: add known issue test for path parse issue #6229 (James M Snell) #8293
[d2179bd6f1] - test: make sure over truncation of file zero fills (Sakthipriyan Vairamani) #7648
[5cff625d6a] - test: add check in test-signal-handler (Rich Trott) #8248
[0b0a1ceac3] - test: clean up / refactor buffer tests, remove duplication (James M Snell) #8256
[0f977f9797] - test: mark test-child-process-fork-dgram as flaky (Michael Dawson) #8274
[6f269bed99] - test: refactor test-util-inspect (Rich Trott) #8189
[eff771f399] - tickprocessor: apply c++filt manually on mac (Fedor Indutny) #8480
[f47ce9d9f8] - tools: replace custom ESLint rule with built-in (Rich Trott) #8478
[36235ac323] - tools: update ESLint to 3.5.0 (Rich Trott) #8478
[ef5cb129ae] - tools: fix new-parens violations (Rich Trott) #8478
[773e1c1304] - tools: enable caching for jslint task (Rich Trott) #8296
[54f689fc1e] - tools: update ESLint to 3.4.0 (Rich Trott) #8296
[f840bc87d6] - url: fix off-by-one error in loop handling dots (Luigi Pinca) #8420
[6ae7af0fa3] - url: keep auth in url.resolve() if host matches (Ilkka Myller) #8215
[eec5d02266] - url: url.format() encodes all # in search (Ilkka Myller) #8072
[d67ece2f68] - util: improve function signature of util._extend (Sakthipriyan Vairamani) #8187
[e9c4805c1f] - (SEMVER-MINOR) util: allow returning this from custom inspect (Anna Henningsen) #8174
[4cb55ff392] - (SEMVER-MINOR) util: allow symbol-based custom inspection methods (Anna Henningsen) #8174
[151d1ea6a6] - vm: change ContextifyScript to Script in comment (Daniel Bevenius) #8415
[f346dee940] - win,build: forward release_urlbase to configure (João Reis) #8430
[6bb057ec6a] - win,build: exit when addons fail to build (João Reis) #8412
[14d356d0ab] - win,build: skip finding VS when not needed (João Reis) #8412
[81d063e174] - win,build: fail on invalid option in vcbuild (João Reis) #8412

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

c8d1fe38eb794ca46aacf6c8e90676eec7a8aeec83b4b09f57ce503509e7a19f  node-v6.6.0-darwin-x64.tar.gz
e5e6248714618a81595cc2c04d3420535cd8a26d74274013a0eb61e0b3d23f5f  node-v6.6.0-darwin-x64.tar.xz
60b81c7276105a51e71ad8bc7f59163105e7c5dd1d992b173b5b66449b6df3fc  node-v6.6.0-headers.tar.gz
b3b6989c12cdf3652253c1b87d4328d151576a2ff4b189e05ebcba99ed84896c  node-v6.6.0-headers.tar.xz
9abae64e411d8ea1541a4776e78d9cf53ad8e20e8b34cf77d9b3579e8edb6f65  node-v6.6.0-linux-arm64.tar.gz
fce02f2fc7bdc79899de4696395d02f3e7209e4ab4053336db790b8f58cce385  node-v6.6.0-linux-arm64.tar.xz
d311754cddc9b387a2798226ecb5487e515c555e050fdd08ef3d6665c3c0d336  node-v6.6.0-linux-armv6l.tar.gz
b6a5dce140b0795da61a9936454670887b431922e56326b53f1900e72e2ac48d  node-v6.6.0-linux-armv6l.tar.xz
e4dc3295f6602b0f4cd3433a6e520294743e2c342692b4fad388d33910cdd465  node-v6.6.0-linux-armv7l.tar.gz
a3a1aac41c21d216ef380269b80225c658188f9182fc087e1823afe66935e3e1  node-v6.6.0-linux-armv7l.tar.xz
b38ff6058f0213567d31a5d194d669ce75894336f6d0324426f01722c989d3c4  node-v6.6.0-linux-ppc64le.tar.gz
c25c106ee0540f13cd119e47b85191f8a362e48d636a9e8398f5db42ac30d755  node-v6.6.0-linux-ppc64le.tar.xz
90d483c63fdbc6594185b3e143bf8d5627812288a029f02f578363d6dd505285  node-v6.6.0-linux-ppc64.tar.gz
3a2cbd56384217df585ad81eff7ddb92cf3601374152b05eafe27a2c7ef02fa9  node-v6.6.0-linux-ppc64.tar.xz
a2f109eb0fec81d90206e9c0bca05327c706b244b5d7c5bd247ac140f811e54e  node-v6.6.0-linux-s390x.tar.gz
aa181bdba1a4f8d06e61fb5496be202c271dadc46a0ef6ecb4b7b4454f1909c4  node-v6.6.0-linux-s390x.tar.xz
c22ab0dfa9d0b8d9de02ef7c0d860298a5d1bf6cae7413fb18b99e8a3d25648a  node-v6.6.0-linux-x64.tar.gz
fdf4377ea4dc9ba2f09d81d9ad1eae42e7eb870c4b1b69f2761f22f28cb5ba31  node-v6.6.0-linux-x64.tar.xz
05f3bfdfe8e1911e66b4bf645a439480212767e71664b8c97f0cba46671e8160  node-v6.6.0-linux-x86.tar.gz
e6fcca4783491c7b5866e7f969e93b66f47380e9cc92c08607d7683cfa200775  node-v6.6.0-linux-x86.tar.xz
7a9af7bf1eb98f8c206037a0dbbcd797c5684e2570d6acc8d915351bad4a5571  node-v6.6.0.pkg
21b05b3664c338b76ec8c139a7ae80fb9b1c65215ee2da6d899dcbd6c6d67554  node-v6.6.0-sunos-x64.tar.gz
b57733493ca428b859ca6f371f6fc0f93bca77926e81e80ddabe1c5d240431e8  node-v6.6.0-sunos-x64.tar.xz
ffa81fc834a7f24958b3c1bf07dc668f6d0e0cda48582a23bc749abca42cae8c  node-v6.6.0-sunos-x86.tar.gz
3572cbe039cb4a791d4f1db3ed855250cb06c4136a5af0eb277aa27a75469c29  node-v6.6.0-sunos-x86.tar.xz
11b957de855a392ceaa8b300ec66236d6f9c6baa184837d00bdaba2da4aefe91  node-v6.6.0.tar.gz
640485d2b672d3313203eae164576539e61f1e55d68122ff2c7fb59896e21a33  node-v6.6.0.tar.xz
92d708377519f9c4cb6b6006ab50118fe98ea3b7fa49ecb8a1c02f2c13c8ab92  node-v6.6.0-win-x64.7z
5b1c49f8fd36bd9c277259773f42832db74c41f87033deaccfbd82e15330bae4  node-v6.6.0-win-x64.zip
3a3eaa4690ead41631e761f24f0e0cf2d66d1378f07a59153e397abdf470273d  node-v6.6.0-win-x86.7z
95862922b8469e00a7ae5f1f82d51c739fdc6ee12a8e1d46c0f100f2ea18c082  node-v6.6.0-win-x86.zip
675f5088021b99c53136d9f7306ba93f2a126df75777f0b97fb6013da2e5c539  node-v6.6.0-x64.msi
8ce48431e7d0182d21efc398fcc478f8852b96df8a7287dd40db9ef53cca01a3  node-v6.6.0-x86.msi
1cd746e30ce1af03495858ee3f8c3e1c18350b8a8259e560b5ac25e95bc5b5de  win-x64/node.exe
efd924b61fe3f6ba67c28ac605c13304ac16976e020a57480f555cffd0a9741d  win-x64/node.lib
84b27e00d6c562dbc6d68f32c9755874c7f29932ebc04a57580cc05aac64d78b  win-x64/node_pdb.7z
238b24d1b7c24ab7ba3c964fda775500965dbcf1dd1484fa3397eded5e9d3d94  win-x64/node_pdb.zip
708a825e7c5fdb1015ea3ca56e257c74fc5ec602a83e8794ea3ab4e100c38f0b  win-x86/node.exe
461fd40ecd79bbea9710d0a940f4d143fc344ffff62309cd86ee414ccfd3916c  win-x86/node.lib
7161b5361d67279a74d2564195be9bf5a9bb2d332d9c9dde6b59a2926bfb1636  win-x86/node_pdb.7z
2394477a698c40ae08bcb9ec01ea7ed7efe9f32498212c511bd9d67103662acc  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=xwUE
-----END PGP SIGNATURE-----

Node.js Foundation Announces Schedule for Second Annual Node.js Interactive North America

Node.js Foundation — Mon, 12 Sep 2016 16:00:00 GMT

IBM, Netflix, Microsoft, and leading community experts to showcase the current and future of Node.js

SAN FRANCISCO, September 12, 2016 — The Node.js Foundation, a community-led and industry-backed consortium to advance the development of the Node.js platform, today announced the keynotes and agenda for Node.js Interactive North America, November 29 - December 2, 2016, in Austin, TX. The event attracts enterprise users, developers, and community stakeholders, providing them with the tools and training they need to optimize the Node.js platform.

With almost 5 million users a month and adoption across numerous industries, Node.js is a universal platform for web applications, IoT, enterprise application development, and microservice architectures. Its liberal contribution policies have also allowed the platform to increase the number of contributors working on the project by a sustained 100% year-over-year growth for the last several years.

Node.js Interactive offers a unique mix of skill-building and knowledge-sharing sessions, panels, and workshops to help developers accelerate their use of Node.js. It is the only vendor-neutral event that offers the community better insight into Node.js and its working groups, combined with best practices and instruction on how to improve performance, debugging, security, and tooling for mainstream enterprise users.

The event is designed to appeal to both experienced and new developers and architects with a NodeSchool event happening during the conferences. Additionally, NodeTogether, a beginner tutorial event that also aims to improve diversity within the Node.js community, is holding a special teachers training at the event.

“Node.js has clearly become a high-priority platform for digital transformation. Node.js Interactive will have a roster of expert technical and community speakers who will discuss the future of Node.js and new growth in areas like artificial intelligence, cloud native architectures, container-packaged applications and more,” said Mikeal Rogers, community manager of the Node.js Foundation.

Keynotes for the conference will provide an update and future look at Node.js and its growing ecosystem of related modules. A sampling of keynotes includes:

“The Road Forward on Education and Diversity” - Tracy Hinds of the Node.js Foundation and Emily Rose of Salesforce
“npm State of the Union” - Ashley Williams of npm
“Node.js State of the Union” - Rod Vagg of NodeSource and Technical Steering Committee Director of Node.js Foundation
“Express State of the Union” - Doug Wilson, Express lead maintainer

Experts from the leading open source projects and enterprises will share their expertise with Node.js and JavaScript in areas ranging from artificial intelligence to full stack development. Highlights include:

Node.js Everywhere

“Node.js Releases, How Do They Work?” - Myles Borins of IBM
“Slaying Monoliths with Docker and Node.js” - Yunong Xiao of Netflix
“Instrumentation and Tracing in Node.js” - Thomas Watson of Opbeat
“Surviving Web Security Using Node.js” - Gergely Nemeth of RisingStack
“Writing Secure Node Code: Understanding and Avoiding the Most Common Node.js Security Mistakes” - Guy Podjarny of Snyk

Cloud and Back End

“Hitchhiker’s Guide to ‘Serverless’ Javascript” - Steven Faulkner of Bustle
“Making Magic in the Cloud with Node.js at Google” - Justin Beckwith of Google
“Buzzword Bingo: Architecting a Cloud-Native Internet Time Machine” - Ross Kukulinski of NodeSource

Diagnosing, Debugging, and DevOps

“Building and Shipping Node.js Apps with Docker” - Mano Marks of Docker
“The Morality of Code” - Glen Goodwin of SAS Institute, Inc.

Machine Learning, Big Data, Artificial Intelligence

“Real-Time Machine Learning with Node.js” - Phillip Burckhardt of Carnegie Mellon University
“Math in V8 is Broken and How We Can Fix It” - Athan Reines of Fourier

Node.js Core

“Contributing to Node.js: Coding Not Required” - William Kapke of Kap Co, LLC
“A Beginner’s Guide To Reading Node.js Core Source” - Rich Trott of University of California, San Francisco
“Node.js and ChakraCore” - Arunesh Chandra of Microsoft
“Implementing HTTP/2 for Node.js Core” - James Snell of IBM

The New Full Stack

“Serverless Front-End Deployments using npm” - Charlie Robbins of GoDaddy
“API Design Through the Lens of Photography” - Bryan Hughes of Microsoft
“JavaScript will Let Your Site Work without JavaScript” - Sarah Meyer of Buzzfeed
“Nodifying the Enterprise” - Shweta Sharma from To The New
“Full Stack Testing with Node.js” - Stacy Kirk of Quality Works

IoT

“IoT & Developer Happiness” - Emily Rose of Salesforce
“Taking on Genetically Evolving Cellular Automata with JavaScript” - Irina Shestak of Small Media Foundation

Operations and Performance

“Scaling State” - Matteo Collina of nearForm
“Don't Let Just Node.js Take the Blame!” - Daniel Khan of Dynatrace

Workshops

“Games as Conversational Interfaces” - Kevin Zurawel of Braintree
“Agile Security for Web Developers” - Kim Carter of BinaryMist
“Science Meets Industry: Online Behavioral Experiments with nodeGame” - Stefano Balietti of Northeastern University
“Building Desktop Applications With Node.js Using Electron” - Steve Kinney of Turing School of Software and Design

Free onsite childcare for attendees is available as well as ASL, interpretation and transcription assistance upon request. Please email events@node.js for more information.

Node.js Interactive is made possible by support from Platinum Sponsors IBM and Google Cloud Platform; Gold Sponsors nearForm and NodeSource; Silver Sponsors GoDaddy, Langa, Opbeat, Rollbar, and Sauce Labs; and Bronze Sponsors Codiscope, Sqreen, and Stormpath. If you are interested in sponsoring please contact Todd Benzies at tbenzies@linuxfoundation.org.

For attendees who register before November 14, the standard registration fee is $600; registration increases to $800 after November 14. Visit here to register.

About the Node.js Foundation

Node.js is used by tens of thousands of organizations in more than 200 countries and amasses more than 4.5 million active users per month. It is the runtime of choice for high-performance, low latency applications, powering everything from enterprise applications, robots, API engines, cloud stacks, and mobile websites.

The Foundation is made up of a diverse group of companies including Platinum members IBM, Intel, Joyent, Microsoft, PayPal, and Red Hat. Gold members include GoDaddy and NodeSource, and Silver members include Apigee, AppDynamics, Cars.com, Codefresh, DigitalOcean, Dynatrace, Fidelity, Google, Groupon, nearForm, New Relic, npm, Opbeat, RisingStack, Sauce Labs, SAP, StrongLoop (an IBM company), Sphinx, YLD, and Yahoo!. Get involved here: https://nodejs.org.

Media Contact

Zibby Keaton Node.js Foundation zkeaton@linuxfoundation.org

Farewell to Node.js v5, Preparing for v7

Rod Vagg — Tue, 06 Sep 2016 23:36:16 GMT

You may have missed it but at the end of June, the Node.js project said a final farewell to version 5. There will be no more patches, critical or otherwise, for this branch. To those who have been using Node.js for some time this may seem anomalous, shouldn't major versions stick around for years?

We have a plan!

Last year, the core team devised a Long-term Support (LTS) and release plan to balance the various wants and needs expressed by Node.js users. Chief among those were:

Stability
Progress

The io.js diversion was useful for many reasons, including the opportunity we had to lean into this "progress" thing. We learned that there is a necessary trade-off between "stability" and the rapid iteration of the platform. Some of it was manageable but much was unavoidable. Breaking the entire C++ add-on ecosystem each time we upgraded V8 turned out to be quite painful for the Node.js package ecosystem. This is due to the heavy reliance on compiled native components in Node.js userland and the difficulty Node.js has had in maintaining API and ABI stability while upgrading V8.

On the flip side, it was clear that v0.10 went on far too long and the slow downward trend in release frequency was hurting the platform's reputation for being innovative and modern and was preventing iteration on the features and fixes that Node.js actually needed. This was one of the key reasons io.js even existed.

So, all this experience and history put us in a position to try and formulate a plan for combining both stability and progress. We didn't just find a compromise, we found a way that these often competing goals could coexist.

Which brings me to Node.js v5.

Every 6 months, we plan to release a new major version of Node.js. The version is major in the semver sense in that we hold back breaking changes on our master branch until the 6 month point where we can release them together in a batch. The creation of these new release lines occur during April and October each year. Even version numbers happen to come in the April release while odd version numbers are in the October release.

Each major version of Node.js has an active life of 6 months in what we are now calling "Current". During this period we ship most of the active work that goes in to the Node.js codebase except for some items that we reserve for the next major release. Node.js version 5 was first released in October last year, so its "Current" period ended in April this year. At the end of this 6 month period, something different happens for odd and even versioned release lines. The even versions turn in to LTS and receive another 30 months of life; this happened for version 4 in October last year and will happen for version 6 in October this year. The odd versions, however, don't get this extended life. Instead, as a transitionary measure, we provide another 2 months of support where we'll ensure that important fixes make it into that release line.

And this is exactly what happened to version 5. It lived as Current for 6 months from October, 2015 to April, 2016 and then in a special Maintenance phase for another 2 months until June, 2016. At the end of June, we ceased supporting Node.js version 5 and it will no longer receive any fixes or updates from the core team (although you're welcome to play with the v5.x branch on the Node.js repository if it's important to you!)

The core team is focusing all of its activities on the following release lines:

v0.10 which will receive occasional critical fixes during its current Maintenance phase and will cease to be supported in October this year.
v0.12 which will receive occasional critical fixes during its current Maintenance phase and will cease to be supported in December this year.
v4 which is in Active LTS and is receiving more regular patches and occasional important feature additions, this will continue until October 2017 where it will switch to Maintenance and operate in a manner similar to v0.10 and v0.12 until April 2018.
v6 which is still a Current release, due to become our second LTS release in October where its life will continue under Active LTS and Maintenance until April 2019.
v7 is being planned for a release in October this year at the same time that we switch v6 to LTS. You can already try out nightly builds from our master branch at https://nodejs.org/download/nightly but expect to see a focus on quality and stability of these in the coming months as we create a v7.x branch and becoming more choosy about what gets to make it in to v7.0.0.

It sounds like a lot, but once we move beyond the legacy v0.12 and v0.10 release lines we expect the steady cadence of major versions and their various releases to become easier to understand.

Armed with this knowledge, what's next for you? We suggest you make a judgement on the stability and quality requirements for your own use of Node.js and pick a release line that suits. For production deployments of Node.js we generally recommend version 4 where stability is taken very seriously. For everyday development, non-critical deployments and where Node.js is used as part of a toolchain (e.g. for building frontend components), a Current release should work just fine. We'd love your help testing nightly builds of the next major version of Node.js and while we do continuous unit testing and smoke testing of our master branch, we can't provide any assurances of stability or quality of these nightly builds, so buyer beware.

Node v6.5.0 (Current)

Evan Lucas — Mon, 29 Aug 2016 13:56:26 GMT

Notable changes

buffer: Fix regression introduced in v6.4.0 that prevented .write() at buffer end (Anna Henningsen) #8154
deps: update V8 to 5.1.281.75 (Ali Ijaz Sheikh) #8054
inspector:
- fix inspector hang while disconnecting (Aleksei Koziatinskii) #8021
- add support for uncaught exception (Aleksei Koziatinskii) #8043
repl: Fix saving editor mode text in .save (Prince J Wesley) #8145
Revert "repl,util: insert carriage returns in output" (Evan Lucas) #8143

Commits

[5bc311909f] - assert: remove code that is never reached (Rich Trott) #8132
[e371545dfe] - buffer: allow .write() offset to be at buffer end (Anna Henningsen) #8154
[dcd065522e] - (SEMVER-MINOR) build: don't include V8 from node.gyp (Michaël Zasso) #7016
[92ecbc4edc] - build: cherry pick V8 change for windows DLL support (Stefan Budeanu) #8084
[4e4c091542] - build: windows sharedlib support (Stefan Budeanu) #8084
[f4c3456610] - build: do not lint src dir for JS errors (Rich Trott) #8128
[71343b6caa] - child_process: reuse existing no-op function (cjihrig) #8164
[0884c70535] - child_process: workaround fd passing issue on OS X (Santiago Gimeno) #7572
[8eb6e71758] - configure: reword help for --without-npm (BlackYoup) #7471
[c406ad8258] - debugger: use arrow function for lexical this (Guy Fraser) #7415
[723fa9637c] - deps: cherry-pick de5aaad from V8's upstream (Michaël Zasso) #8099
[fc2a89ccb7] - deps: V8: cherry-pick 588e15c, c0d4bb8 (epertoso) #8038
[cd77ca397a] - deps: cherry-pick 6f68f30 from v8 upstream (Stefan Budeanu) #7802
[b4f11efafa] - deps: cherry-pick a51f429 from V8 upstream (Franziska Hinkelmann) #7833
[4a20869714] - deps: cherry-pick a76d133 from v8 upstream (Matt Loring) #7689
[3b2f692b23] - deps: cherry-pick b93c80a from v8 upstream (Matt Loring) #7689
[c4401d283b] - deps: cherry-pick 2b4c9c1 from v8 upstream (Joran Siu) #7771
[0ac21bc860] - deps: cherry-pick 1f53e42 from v8 upstream (Ben Noordhuis) #7612
[fc442e0f43] - deps: cherry-pick d721121 from v8 upstream (Ben Noordhuis) #7632
[9a4b338f0c] - deps: remove extra field from v8::HeapStatistics (Anna Henningsen) #7526
[2c46e23969] - (SEMVER-MINOR) deps: bring in V8 5.1 - 5.0 ABI compatibility (Matt Loring) #7016
[06a6c03e57] - (SEMVER-MINOR) deps: revert removal of V8::PromiseEvent (Matt Loring) #7016
[a91f6b8433] - deps: backport IsValid changes from 4e8736d in V8 (Michaël Zasso) #6544
[b2f7c32a9f] - deps: cherry-pick 1ef7487b from v8 upstream (Michael Dawson) #6218
[7af2f63f10] - deps: limit regress/regress-crbug-514081 v8 test (Michael Dawson) #6678
[abbad66126] - (SEMVER-MINOR) deps: update V8 to 5.1.281.75 (Ali Ijaz Sheikh) #8054
[08e2b0408a] - deps: cherry-pick 7bd24767 from v8 upstream (v6.x) (Franziska Hinkelmann) #8078
[d0cb52b967] - dns: remove makeAsync() function check (cjihrig) #8170
[70648f47ca] - dns: lookupService() callback must be a function (cjihrig) #8170
[d9142b4bd6] - doc: add added: information for util (Luigi Pinca) #8206
[c2f5471f6d] - doc: remove "feature branch" jargon (Rich Trott) #8194
[7f34cc3e03] - doc: correct argument type for process.cpuUsage (Simen Bekkhus) #8158
[0c9960b3c5] - doc: remove outdated LTS info from ROADMAP.md (Rich Trott) #8161
[afbe4d8ebd] - doc: add es6 code example in util.md (Shahid Shaikh) #8183
[4a8aca7f94] - doc: script with spaces spawn example for windows (Bartosz Sosnowski) #8035
[82329b6e8f] - doc: fix variable scoping bug in server example code (lazlojuly) #8124
[d7ab1baed2] - doc: update release announce instruction to tweet (Tracy Hinds) #8126
[5d37b49f90] - doc: add @joshgav to collaborators (Josh Gavant) #8146
[31653a5006] - doc: update Reviewing section of onboarding doc (Rich Trott)
[bf5c5f3ce0] - doc: fix "hashOwnProperty" typo in querystring (Ben Gourley) #8107
[b1922e7b5b] - dtrace: fix ustack helper for V8 5.1 (Ali Ijaz Sheikh) #6482
[92de0bc1a6] - inspector: fix inspector hang while disconnecting (Aleksei Koziatinskii) #8021
[bfd8265ec2] - inspector: add support for uncaught exception (Aleksei Koziatinskii) #8043
[089a1cbecb] - net: add length check when normalizing args (Brian White) #8112
[17b8381585] - net: remove unnecessary variables (Brian White) #8112
[fbc5805e65] - readline: keypress trigger for escape character (Prince J Wesley) #7382
[66e66e59a4] - (SEMVER-MINOR) repl: fix repl after V8 upgrade (Ali Ijaz Sheikh) #7016
[60c50468e3] - repl: Failed to save editor mode text in .save (Prince J Wesley) #8145
[ffb2db8285] - Revert "repl,util: insert carriage returns in output" (Evan Lucas) #8143
[4118598dbb] - src: don't include a null character in the WriteConsoleW call (Nikolai Vavilov) #7764
[d863619a30] - src: clean up PER_ISOLATE_STRING_PROPERTIES, v2 (Ben Noordhuis) #8207
[d3950a2013] - src: clean up PER_ISOLATE_STRING_PROPERTIES, v1 (Ben Noordhuis) #8207
[8f9fb8154d] - src: updating references to the old node.js file (Daniel Bevenius) #8092
[091ba2c511] - src: fix build break for !NODE_USE_V8_PLATFORM (Kunal Pathak) #8114
[1bf80a0a3f] - stream: avoid caching prepend check (Calvin Metcalf) #8018
[cda8bfc3c8] - test: fix tests after V8 upgrade (Ali Ijaz Sheikh) #6482
[441e8fe566] - test: refactor test-timers-linked-list.js (Rich Trott) #8193
[bb6d6a677c] - test: fix flaky test-child-process-pass-fd (Santiago Gimeno) #8212
[b0619e8dff] - test: comparison operator now more strict (Jason Hedrick) #8190
[923a61774d] - test: refactor test-tick-processor (Rich Trott) #8180
[b9b762f308] - test: add test for invalid cert string (Rich Trott) #8179
[a6f83797df] - test: add assert.notDeepStrictEqual() tests (Rich Trott) #8177
[29a71965c0] - test: favor === over == in crypto tests (Rich Trott) #8176
[c568dfad39] - test: refactor pummel/test-dtrace-jsstack (Rich Trott) #8175
[cfbafd7c7d] - test: favor strict equality in test-exec (Rich Trott) #8173
[b8f5a2b789] - test: favor === over == in vm test (jun-oka) #8191
[498238f462] - test: test sending over a closed IPC channel (cjihrig) #8160
[15bd48986b] - test: add test for attempted multiple IPC channels (cjihrig) #8159
[4deb05434f] - test: add assert.notDeepEqual() tests (Rich Trott) #8156
[3d0cf9e4f1] - test: add missing assert.deepEqual() test case (Rich Trott) #8152
[6abbe17ab2] - test: favor strict equality in http tests (Rich Trott) #8151
[cc9bb34120] - test: favor strict equality in pummel net tests (Rich Trott) #8135
[4b6ed24f02] - test: confirm that assert truncates long values (Rich Trott) #8134
[e5a8790727] - test: favor === over == in test-timers.js (Rich Trott) #8131
[086e57f404] - test: favor strict equality check (Rich Trott) #8130
[9a393a7ff4] - test: fix assertion in test-watch-file.js (Rich Trott) #8129
[4f09886dce] - test: fix flaky fs-watch tests (Santiago Gimeno) #8115
[d401e5575a] - test: add an zlib binding addon test (Anna Henningsen) #8039
[6bdc0e54b4] - test: use strict equality in regression test (Rich Trott) #8098
[be41f584f3] - test: remove extraneous space (Rich Trott) #8097
[853f605de4] - test: add test for assert.notStrictEqual() (Rich Trott) #8091
[f4698f3568] - test: add uncaught exception test for debugger (Rich Trott) #8087
[c26b9af1e2] - tls: copy the Buffer object before using (Sakthipriyan Vairamani) #8055
[cdcf23ab7f] - tools: update ESLint to 3.3.0 and enable rules (Rich Trott) #8097
[14c7dcbbcd] - url: fix inconsistent port in url.resolveObject (Ilkka Myller) #8214
[1f9fbade4c] - util: fix deprecated class prototype (Bryan English) #8105
[44f781d06a] - v8: warn in Template::Set() on improper use (Ben Noordhuis) #6277
[a146e683dd] - win,msi: add zh-CN translations for the installer (Minqi Pan) #2569

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

352cee438dc55942aebac054e8a2e14b6784056c66465105e2b3bfc55832927f  node-v6.5.0-darwin-x64.tar.gz
ab34b3f0eb4cf8015f66c6301462ab45b0438a7603f8917d0de2e530499251df  node-v6.5.0-darwin-x64.tar.xz
e69e5cfbd610a624161ed2f7c11ea61c4ea7187dc42bca1dedc434da1901f4c8  node-v6.5.0-headers.tar.gz
e5cf641c8180c5156ca3d64ef4fc1f9ba74b36418e7132067bc22f71391fed28  node-v6.5.0-headers.tar.xz
e3d208d3b054301e2bd572d71c7c325ddc0a7e4c2cc4278053e2375e841f6d99  node-v6.5.0-linux-arm64.tar.gz
d6480ab5bcfd124f471c7b535e6c2211addfc4f8c0dfa3d8777452f766c3f6ab  node-v6.5.0-linux-arm64.tar.xz
fff3d363117b8c9beff3c4a89fd48d51dfd55b9dc2e9c2957be79a3c20bd570f  node-v6.5.0-linux-armv6l.tar.gz
9925f224715bd1473eaee3d2167c3c4bd4da9bbb7ff04b4f458b06ffce9e19ca  node-v6.5.0-linux-armv6l.tar.xz
ea03725d8cee9528d75fdb2060f62ce96a719bc0f5f35f5ad2dd982bb09c1429  node-v6.5.0-linux-armv7l.tar.gz
b667b914cfe46116a32fe9a369409282c48a0831542381f6d256be4200f824c8  node-v6.5.0-linux-armv7l.tar.xz
36c7e7449db335a591fc55b77d7eab13576a296ec3be5ea557c8e7a54c061928  node-v6.5.0-linux-ppc64le.tar.gz
52ad6d5030be62ac6072d08e0ee8fa25e50c3295107e1ff34abd3d31b1d67db4  node-v6.5.0-linux-ppc64le.tar.xz
0330b57d8161d06d68b5d86b8b8a924f48c7266a70816c2c1d306196246cea21  node-v6.5.0-linux-ppc64.tar.gz
6f93a0756a2036da183320d8dd1abc8ffd908b6d2258aa1e4d47dd12ba49816d  node-v6.5.0-linux-ppc64.tar.xz
575638830e4ba11c5afba5c222934bc5e338e74df2f27ca09bad09014b4aa415  node-v6.5.0-linux-x64.tar.gz
8737539ff6e9341add78bf2e72932d62e8d830fc59449f97350dc60cc7c19805  node-v6.5.0-linux-x64.tar.xz
12d5b79b8b914c2439b6aa542b47f28c0d6dc9c5438eeda629f26021eb839dac  node-v6.5.0-linux-x86.tar.gz
192c71b5d821471b424846eb1fa1ce40432b5e7e4afc3e5d07d9a91bf264923f  node-v6.5.0-linux-x86.tar.xz
bc79776fa04870cbdb3cc874d91b22c506caa6fc218cdcf1e2538e3de2248957  node-v6.5.0.pkg
71ae256a6bd8bb8c7e1af88ec4702022eecf911cea786e6dac21b25bc5f1ece7  node-v6.5.0-sunos-x64.tar.gz
fa8efe91f25084bce9a2dd3205fb7ced930dd0dc4175e98079098c23945c5bf8  node-v6.5.0-sunos-x64.tar.xz
e1ce32adfd7e205ed949f0a372bd75d1bbb404274de667e30ef2a99386f30a71  node-v6.5.0-sunos-x86.tar.gz
ddd7fbeafdf1e64d94d682a042c2a5bda079341d0a040b2df43d9ec960d35634  node-v6.5.0-sunos-x86.tar.xz
d7742558bb3331e41510d6e6f1f7b13c0527aecc00a63c3e05fcfd44427ff778  node-v6.5.0.tar.gz
ddf2056a9164c723db707b6c016f9e617f17166298dc88c5a7cb1d7d5ddb1290  node-v6.5.0.tar.xz
e00570c8e40b8d0564c5735554a5c5128d1c442e08d16539cb9b26bee2aae632  node-v6.5.0-win-x64.7z
0c0962800916c7104ce6643302b2592172183d76e34997823be3978b5ee34cf2  node-v6.5.0-win-x64.zip
979bce12ca20761b5c13af8a0d30da65432878014d787e9c3487e2ae97d8becd  node-v6.5.0-win-x86.7z
36f2aa668018db296fafa7e6b330a32124145e54254403e63fa5efb44c9b900f  node-v6.5.0-win-x86.zip
2a269b0b9fee2c502d4a81168f12315e9d55396641522249931f0f88e02638c4  node-v6.5.0-x64.msi
93db364a5f519e8a29bb2279b470da7708f3869bcb4f8d597121f58f12f9b0fc  node-v6.5.0-x86.msi
fa8e6336dec13f79341b0b69430f96372eb44fce4cdc451aa7fb6d3c9783cf42  win-x64/node.exe
ee4e1a0d686ec4db73f2b3798cb8e5896945fc8f45b3693d83898df3ebebc857  win-x64/node.lib
d055f32f2fbd020c4142319668a5d4bbbc68a6a4eeb2e0f2decd44c1f11925e9  win-x64/node_pdb.7z
bd5d83ed60b9bc68c42a006443f1b33e61a41f9ffacc7822d540305101e3d4f1  win-x64/node_pdb.zip
a808a2322508e6f629426c7d7267710577113918f8c156534a7611df3f4e35e1  win-x86/node.exe
f8269a2e0d2e05380b8f94686504b9e7eefbc91db6379839d24a02b8d0ecc30d  win-x86/node.lib
a7fffce30ed9442997b9f3f19a5c482594fddb9f2ddf8e1250b918146b939d35  win-x86/node_pdb.7z
2ba0106d5c7bb82560846b90f0826f3bc605157680d83afe34ec8e3c635c95a5  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJXxD66AAoJELY7U1pMIGypRpMP/Rgy2gvIoYJ1MilGjR/ygZd0
2u+5noks4NMcRl+e1NGAJNez7zPmnxW+3icarhPhwFxP6XSYLTIMlQKf6VR5yIRW
utwpDonxOd+xL5elhfsLx2bPdHVE/L2mIZbIlHgoBdXBo1YdBlXCxi1U31JMG8u3
ckrG9o5IP69zuWA+M4D0yEu3K+6TeWPksVPQMNKJU9S+sLgbgkZN1BMgsG+JHz4/
/5t6fOhf8mbYYas8BXY/jTvrLAGn3/BQDHh553Ap/0gQd66k1dAY0jmhyVsssrqg
C4AnBiCc55fy4zQYR47i4DhYiJ06SQZk+woCpfaLfWrb5rqsyW8Fy7D4AdFOJMcP
EqDkUnMbYwnPYtKatXRT+NUXtMXYzSIDQAQo1N9E4nsVKkR+Ka1GC6d3lRUPYD1K
xL4FEsL8aCd0mxkRikzd31no+NgzkORqRuK46tFAfbBykJR9E30lN6cx7gQWuiNM
+EfKkc4EvKMamvhzOC8okDCsY+v/M2aVL/vVOB7SlTQeTmB8nWFtr5i7BUk7zgLC
NLETY0k+DRWqhPa8L6xlCacPcji9zad3wHOcty3dMTtEv8chjHtMpoGsWKFwlYPA
yG1irBagemHetAEbzdFEDJQFlt+/IxrIpOLHjkH6BZ7bkvunMmbF3QxNFKGfm7ZS
iIPARMq27v97O038HKlq
=qM+Q
-----END PGP SIGNATURE-----

Cars.com and Dynatrace join the Foundation to support the stability and success of the Node.js platform

Node.js Foundation — Wed, 17 Aug 2016 12:00:00 GMT

New Node.js Foundation Members Drive Enterprise Growth

SAN FRANCISCO, Aug. 17, 2016 — The Node.js Foundation, a community-led and industry-backed consortium to advance the development of the Node.js platform, today announced Cars.com and Dynatrace have joined the Foundation as Silver Members.

An ecosystem of tools and services for enterprises is rapidly coalescing around Node.js, giving it a boost as a universal platform powering everything from enterprise applications, robots, API engines, cloud stacks and mobile websites. The JavaScript runtime environment is resource-efficient, high-performing and well-suited to scalability, making it an increasingly mainstream technology in startups and enterprises alike for application development and microservice architectures. Furthermore, Node.js ranks among the Top 10 languages for full stack, frontend and backend developers surveyed by StackOverflow in its 2016 developer survey.

More about today’s new Node.js Foundation members:

Launched in 1998 and headquartered in Chicago, Cars.com is a leading online destination that offers information from experts and consumers to help car shoppers and owners buy, sell and service their vehicles. The site offers millions of new and used vehicle listings, an extensive database of consumer reviews, research and pricing tools, unbiased expert content, and multiple options to sell a vehicle. Cars.com uses Node.js to help scale its high-trafficked website to meet its users’ demands and service expectations.

“Prior to Node.js, we were using older content management solutions that were not allowing us to effectively meet the demands of Cars.com, which receives around 30 to 35 million visits to its web properties each month,” said Darrell Pratt, director of software development at Cars.com. “Node.js provides the necessary utility to allow us to grow and change to a microservice infrastructure. There is so much potential in the future of Node.js through its community, extensive libraries, and excellent tooling, and we are excited to help fuel that growth through the Node.js Foundation.”

Dynatrace, a digital performance management software company, believes Node.js is a core component for its enterprise customers. As more enterprises begin to go through digital transformations and implement microservice-type architectures, Node.js is a key technology that ties frontend and backend systems together to provide an end-to-end view of application performance with the help of Dynatrace offerings.

“Digital transformation is constantly changing how companies do business, something we see first-hand working directly with enterprises to meet their performance monitoring needs,” said Alois Reitbauer, chief technology strategist at Dynatrace. “Node.js very often plays a key role in their transformation process, so we are excited to actively contribute to the Node.js platform and help developers improve their monitoring capabilities.”

“By joining the Node.js Foundation, companies are investing in the stability of Node.js and helping to accelerate the widespread adoption and development of Node.js,” said Mikeal Rogers, community manager at the Node.js Foundation. “New members like Cars.com and Dynatrace are incredibly important to the Foundation's work to develop services, education, training and events that support the needs and demands of enterprise users.”

The Node.js Foundation will be holding Node.js Interactive Europe in Amsterdam September 15-18; and Node.js Interactive North America in Austin, Texas, November 29 - December 2. This is the only vendor-neutral event that offers an in-depth look at the future of Node.js from the developers who are driving the code forward. Node.js Core contributors will offer insights into new developments, while enterprise users and vendors will share best practices around tools, training and other services needed to optimize Node.js.

About the Node.js Foundation

Node.js is used by tens of thousands of organizations in more than 200 countries and amasses more than 4 million active users per month. It is the runtime of choice for high-performance, low latency applications, powering everything from enterprise applications, robots, API engines, cloud stacks and mobile websites.

The Foundation is made up of a diverse group of companies including Platinum members IBM, Intel, Joyent, Microsoft, PayPal and Red Hat. Gold members include GoDaddy and NodeSource, and Silver members include Apigee, AppDynamics, Cars.com, Codefresh, DigitalOcean, Dynatrace, Fidelity, Google, Groupon, nearForm, New Relic, npm, Opbeat, RisingStack, Sauce Labs, SAP, StrongLoop (an IBM company), Sphinx, YLD, and Yahoo!. Get involved here: https://nodejs.org.

Node v4.5.0 (LTS)

Myles Borins — Tue, 16 Aug 2016 16:13:31 GMT

Notable Changes

Semver Minor:

buffer:
- backport new buffer constructor APIs to v4.x (Сковорода Никита Андреевич) #7562
- backport --zero-fill-buffers cli option (James M Snell) #5745
build:
- add Intel Vtune profiling support (Chunyang Dai) #5527
repl:
- copying tabs shouldn't trigger completion (Eugene Obrezkov) #5958
src:
- add node::FreeEnvironment public API (Cheng Zhao) #3098
test:
- run v8 tests from node tree (Bryon Leung) #4704
V8:
- Add post mortem data to improve object inspection and function's context variables inspection (Fedor Indutny) #3779

Semver Patch:

buffer:
- ignore negative allocation lengths (Anna Henningsen) #7562
crypto:
- update root certificates (Ben Noordhuis) #7363
libuv:
- upgrade libuv to 1.9.1 (Saúl Ibarra Corretgé) #6796
- upgrade libuv to 1.9.0 (Saúl Ibarra Corretgé) #5994
npm:
- upgrade to 2.15.9 (Kat Marchán) #7692

Commits

[a4888926a2] - assert: remove unneeded arguments special handling (Rich Trott) #7413
[39e24742f8] - assert: allow circular references (Rich Trott) #6432
[271927f29e] - async_wrap: pass uid to JS as double (Trevor Norris) #7096
[747f107188] - async_wrap: don't abort on callback exception (Trevor Norris) #5756
[c06e2b07b6] - async_wrap: notify post if intercepted exception (Trevor Norris) #5756
[0642a146b3] - async_wrap: setupHooks now accepts object (Trevor Norris) #5756
[75ecf8eb07] - async_wrap: add parent uid to init hook (Andreas Madsen) #4600
[e10eebffa5] - async_wrap: make uid the first argument in init (Andreas Madsen) #4600
[13d465bcf6] - async_wrap: add uid to all asyncWrap hooks (Andreas Madsen) #4600
[046d651118] - benchmark: fix child-process-exec-stdout on win (Bartosz Sosnowski) #7178
[4b464ce4bf] - benchmark: remove unused variables (Rich Trott) #7600
[b95e5d7948] - benchmark: add benchmark for url.format() (Rich Trott) #7250
[1bd62c7c34] - benchmark: add benchmark for Buffer.concat (Anna Henningsen) #7054
[08cd81b050] - benchmark: add util.format benchmark (Evan Lucas) #5360
[7dbb0d0084] - buffer: fix dataview-set benchmark (Ingvar Stepanyan) #6922
[200429e9e1] - buffer: ignore negative allocation lengths (Anna Henningsen) #7562
[709048134c] - (SEMVER-MINOR) buffer: backport new buffer constructor APIs to v4.x (Сковорода Никита Андреевич) #7562
[fb03e57de2] - (SEMVER-MINOR) buffer: backport --zero-fill-buffers cli option (James M Snell) #5745
[236491e698] - build: update build-addons when node-gyp changes (Lance Ball) #6787
[8a7c5fdbd2] - build: add REPLACEME tag for version info in docs (Ben Noordhuis) #6864
[da1e13fde7] - build: add Make doc-only target (Jesse McCarthy) #3888
[0db3aa9afa] - build: remove unused files from CPPLINT_FILES (Ben Noordhuis) #7462
[5290c9d38c] - build: use BUILDTYPE when building V8 in Makefile (Michaël Zasso) #7482
[79bd39c202] - build: add v8 requirement to test-v8* in Makefile (Michaël Zasso) #7482
[65b75b51a6] - build: unbreak configure with python 2.6 (Ben Noordhuis) #6874
[8513232c82] - build: split CI rules in Makefile (João Reis) #7317
[13d0e463b0] - build: enable compilation for linuxOne (Michael Dawson) #5941
[834ea2c5c0] - (SEMVER-MINOR) build,src: add Intel Vtune profiling support (Chunyang Dai) #5527
[ea20796e9d] - build,test: fix build-addons dependency chain (Ben Noordhuis) #6652
[6a08535dd1] - child_process: preserve argument type (Rich Trott) #7391
[fd05b0b289] - Revert "child_process: measure buffer length in bytes" (Rich Trott) #7391
[8eb18e4289] - child_process: measure buffer length in bytes (Rich Trott) #6764
[4ee863d956] - child_process: allow buffer encoding in spawnSync (cjihrig) #6939
[0b8124f205] - child_process: emit IPC messages on next tick (cjihrig) #6909
[20d3378969] - cluster: reset handle index on close (Santiago Gimeno) #6981
[09349a8b92] - cluster: don't send messages if no IPC channel (Santiago Gimeno) #7132
[6ece2a0322] - cluster: rewrite debug ports consistently (cjihrig) #7050
[8cba3b2f72] - cluster: guard against undefined message handlers (cjihrig) #6902
[f152adf5b7] - cluster: close ownerless handles on disconnect() (cjihrig) #6909
[65624440bf] - crypto: allow GCM ciphers to have longer IV length (Michael Wain) #6376
[1e0cede3a6] - crypto: update root certificates (Ben Noordhuis) #7363
[3be5cdcd43] - debugger: remove obsolete setTimeout (Rich Trott) #7154
[74a5e911c0] - debugger: propagate --debug-port= to debuggee (Ben Noordhuis) #3470
[af4940d63b] - deps: upgrade npm in LTS to 2.15.9 (Kat Marchán) #7692
[da7b74b9bc] - deps: upgrade libuv to 1.9.1 (Saúl Ibarra Corretgé) #6796
[94eb980ca5] - deps: upgrade libuv to 1.9.0 (Saúl Ibarra Corretgé) #5994
[4107b5d200] - deps: backport 22c5e46 from V8 (Julien Gilli) #7584
[e06ab64705] - deps: update to http-parser 2.7.0 (Fedor Indutny) #6279
[1164f542db] - deps: fix segfault during gc (Ali Ijaz Sheikh) #7303
[d9e9d9fb11] - deps: backport e7cc609 from upstream V8 (Ali Ijaz Sheikh) #7303
[9809992436] - (SEMVER-MINOR) deps: backport 9c927d0f01 from V8 upstream (Myles Borins) #7451
[da9595fc47] - (SEMVER-MINOR) deps: cherry-pick 68e89fb from v8's upstream (Fedor Indutny) #3779
[e9ff0f8fb2] - doc: make doc-only -> fallback to user binary (Robert Jefe Lindstaedt) #6906
[b869cdb876] - doc: fix deprecation warnings in addon examples (Ben Noordhuis) #6652
[ec25f38120] - doc: add added: information for buffer (Anna Henningsen) #6495
[1e86d16812] - doc: buffers are not sent over IPC with a socket (Tim Kuijsten) #6951
[5c1d8e1f0f] - doc: add added: information for http (Anna Henningsen) #7392
[60c054bc11] - doc: add information for IncomingMessage.destroy() (Rich Trott) #7237
[1a5c025f32] - doc: remove superfluos backticks in process.md (Anna Henningsen) #7681
[fcb4e410e4] - doc: add added: information for process (Bryan English) #6589
[9b8565c42a] - doc: add added: information for tls (Italo A. Casas) #7018
[fd4aa6c16a] - doc: correct added: information for fs.access (Richard Lau) #7299
[1e9d27cbcc] - doc: add added: information for fs (Anna Henningsen) #6717
[2244a3c250] - doc: adds 'close' events to fs.ReadStream and fs.WriteStream (Jenna Vuong) #6499
[88f46b886a] - doc: add added: information for timers (Anna Henningsen) #7493
[a53253a232] - doc: add added: information for zlib (Anna Henningsen) #6840
[7abfb6e8dc] - doc: add added: information for vm (Anna Henningsen) #7011
[3e3471fb5f] - doc: add added: information for v8 (Rich Trott) #6684
[1758f02ec1] - doc: add added: information for url (Bryan English) #6593
[3c8f19fcdf] - doc: add added: in for tty (Rich Trott) #6783
[5b50b1c255] - doc: add added: info for string_decoder (Rich Trott) #6741
[4474e83b78] - doc: add added: information for repl (Anna Henningsen) #7256
[e6d7bfcbe7] - doc: add added: information for readline (Julian Duque) #6996
[eec0c635ee] - doc: add added: information for querystring (Bryan English) #6593
[a870cdcd1f] - doc: add added: information for punycode (Daniel Wang) #6805
[f1a37ad749] - doc: add added: information for path (Julian Duque) #6985
[8b53f4b27c] - doc: add added: information for os (Bryan English) #6609
[78d361b22b] - doc: add added information for net (Italo A. Casas) #7038
[b08ff33c01] - doc: add added: information for https (Anna Henningsen) #7392
[1d99059bb1] - doc: add added: information for dns (Julian Duque) #7021
[a0ca24b798] - doc: add added: information for console (Adrian Estrada) #6995
[eb08c17a20] - doc: add added: data for cli.md (Rich Trott) #6960
[ec9038478f] - doc: add added: information for child_process (Anna Henningsen) #6927
[e52b2b07d7] - doc: add added: information for assert (Rich Trott) #6688
[75e4f74c54] - doc: fix cluster worker 'message' event (cjihrig) #7309
[de5e2357fc] - doc: dns.resolve fix callback argument description (Quentin Headen) #7532
[0f903bb722] - doc: add benchmark who-to-CC info (Rich Trott) #7604
[700c6d9be8] - doc: added information on how to run the linter. (Diosney Sarmiento) #7534
[537f33351e] - doc: fix minor style issues in http.md (Rich Trott) #7528
[33a08b0414] - doc: add bartosz sosnowski to colaborators (Bartosz Sosnowski) #7567
[186af29298] - doc: fix detached child stdio example (cjihrig) #7540
[066cefb6de] - doc: improve usage of zero/0 (Rich Trott) #7466
[6c94c67b73] - doc: fix "sign.verify" typo in crypto doc. (Ruslan Iusupov) #7411
[35ee35cba2] - doc: clarify child_process stdout/stderr types (sartrey) #7361
[71ef71cff8] - doc: add CTC meeting minutes 2016-06-15 (Josh Gavant) #7320
[13d60cab7c] - doc: add lance to collaborators (Lance Ball) #7407
[9122b3b665] - doc: update "who to cc in issues" chart (Jeremiah Senkpiel) #6694
[ccb278d330] - doc: mention http request "aborted" events (Kyle E. Mitchell) #7270
[868af29f2b] - doc: add RReverser to collaborators (Ingvar Stepanyan) #7370
[f8fe474825] - doc: fixing minor typo in AtExit hooks section (Daniel Bevenius) #7485
[4a7e333287] - doc: use Buffer.byteLength for Content-Length (kimown) #7274
[85f70b36e4] - doc: clarify use of 0 port value (Rich Trott) #7206
[57ba51ec46] - doc: fix IRC link (Ilkka Myller) #7210
[ef37a2e80f] - doc: add internal link in GOVERNANCE.md (Rich Trott) #7279
[c9ef04a1b2] - doc: fix events typo (Greyson Parrelli) #7329
[0013af61de] - doc: fix header depth of util.isSymbol (James M Snell) #7138
[96de3f8820] - doc: Add CII Best Practices badge to README.md (David A. Wheeler) #6819
[146cba1f60] - doc: improve debugger doc prose (Rich Trott) #7007
[694e34458b] - doc: fix typos in WORKING_GROUPS.md (Joao Andrade) #7032
[fbdc16a8a4] - doc: update labels and CI info in onboarding doc (Rich Trott) #7006
[1c65f1e3f6] - doc: add info on what's used for fswatch on AIX (Michael Dawson) #6837
[72e8ee570a] - doc: improve server.listen() documentation prose (Rich Trott) #7000
[649d201d63] - doc: improve server.address() doc text (Rich Trott) #7001
[e2e85ced1d] - doc: clarified use of sexual language in the CoC (Bryan Hughes) #6973
[f395f6f5b2] - doc: add yorkie to collaborators (Yazhong Liu) #7004
[c5051ef643] - doc: add firedfox to collaborators (Daniel Wang) #6961
[2ef08323c6] - doc: add bmeck to collaborators (Bradley Meck) #6962
[d1a0a146b3] - doc: Add CTC meeting minutes for 2016-05-04 (Michael Dawson) #6579
[0a85987899] - doc: update build instructions for Windows (João Reis) #7285
[629a76f9fb] - doc: remove cluster.setupMaster() myth (cjihrig) #7179
[5b807ac791] - doc: specify how to link issues in commit log (Luigi Pinca) #7161
[350f4cf292] - doc: server.listen truncates socket path on unix (Jean Regisser) #6659
[7813af7f16] - doc: Add resolveNaptr and naptr rrtype docs (Doug Wade) #6586
[5380743208] - doc: document socket.destroyed (Tushar Mathur) #6128
[f0edf87df1] - doc: add vm example, be able to require modules (Robert Jefe Lindstaedt) #5323
[9121e94e62] - doc: note that process.config can and will be changed (James M Snell) #6266
[c237ac3d68] - doc: git mv to .md (Robert Jefe Lindstaedt) #4747
[6324723cc1] - doc,dgram: fix addMembership documentation (Santiago Gimeno) #7244
[15bb0beab2] - doc,test: add How to write a Node.js test guide (Santiago Gimeno) #6984
[9d13337183] - http: wait for both prefinish/end to keepalive (Fedor Indutny) #7149
[ece428ea63] - http: fix no dumping after maybeReadMore (Fedor Indutny) #7211
[07fd52e5aa] - http: skip body and next message of CONNECT res (Fedor Indutny) #6279
[6f312b3a91] - http_parser: use MakeCallback (Trevor Norris) #5419
[373ffc5bad] - installer: don't install node_internals.h (Ben Noordhuis) #6913
[5782ec2427] - module: don't cache uninitialized builtins (Anna Henningsen) #6907
[c8e9adb135] - repl: fix tab completion for defined commands (Prince J Wesley) #7364
[a3fa5db5ca] - (SEMVER-MINOR) repl: copying tabs shouldn't trigger completion (Eugene Obrezkov) #5958
[d86332799c] - src: clean up string_search (Brian White) #7174
[3eea55167d] - src: fix memory leak in WriteBuffers() error path (Ben Noordhuis) #7374
[23797eb037] - src: remove obsolete NOLINT comments (Ben Noordhuis) #7462
[5aff60e832] - src: lint v8abbr.h (Ben Noordhuis) #7462
[42e7c9d266] - src: lint node_lttng_tp.h (Ben Noordhuis) #7462
[27c2d25be6] - src: lint node_win32_perfctr_provider.cc (Ben Noordhuis) #7462
[4f4d3e77ef] - src: fix whitespace/indent cpplint warnings (Ben Noordhuis) #7462
[066064d65f] - src: fix whitespace/blank_line cpplint warnings (Ben Noordhuis) #7462
[44cbe0356d] - src: fix runtime/references cpplint warnings (Ben Noordhuis) #7462
[f530a36c65] - src: fix runtime/int cpplint warnings (Ben Noordhuis) #7462
[d6595adcdb] - src: fix runtime/indentation_namespace warnings (Ben Noordhuis) #7462
[68db091aba] - src: fix readability/nolint cpplint warnings (Ben Noordhuis) #7462
[4748bed736] - src: fix readability/namespace cpplint warnings (Ben Noordhuis) #7462
[785211702a] - src: fix readability/inheritance cpplint warnings (Ben Noordhuis) #7462
[c90ae7fb72] - src: fix readability/constructors cpplint warnings (Ben Noordhuis) #7462
[16f2497994] - src: fix readability/braces cpplint warnings (Ben Noordhuis) #7462
[c8f78a2682] - src: fix build/header_guard cpplint warnings (Ben Noordhuis) #7462
[ccc701e1d5] - src: fix build/c++tr1 cpplint warnings (Ben Noordhuis) #7462
[dda81b44b0] - src: unify implementations of Utf8Value etc. (Anna Henningsen) #6357
[db2b23f06f] - src: fix sporadic deadlock in SIGUSR1 handler (Ben Noordhuis) #5904
[53a67ed6d7] - src: fix bad logic in uid/gid checks (Ben Noordhuis) #7374
[e6a27a70d8] - src: fix use-after-return in zlib bindings (Ben Noordhuis) #7374
[61de6e9b47] - src: remove deprecated HMAC_Init, use HMAC_Init_ex (Ben Noordhuis) #7374
[7305e7b9d2] - src: remove duplicate HMAC_Init calls (Ben Noordhuis) #7374
[38baf6a0b7] - src: remove unused md_ data members (Ben Noordhuis) #7374
[e103044b68] - src: remove unused data member write_queuesize (Ben Noordhuis) #7374
[67937bca0a] - src: guard against starting fs watcher twice (Ben Noordhuis) #7374
[c03bd57ac6] - src: check uv_async_init() return value (Ben Noordhuis) #7374
[2b0dce5a5b] - src: don't use locale-sensitive strcasecmp() (Ben Noordhuis) #6582
[9c31c738fc] - src: remove unused #include statement (Ben Noordhuis) #6582
[426aa0a5e8] - src: fix Windows segfault with --eval (Bryce Simonds) #6938
[b21d145c2a] - (SEMVER-MINOR) src: add node::FreeEnvironment public API (Cheng Zhao) #3098
[b9136c0c03] - src: add process.binding('config') (James M Snell) #6266
[c3d87eee49] - src: reword command and add ternary (Trevor Norris) #5756
[68f391bf3b] - src: remove unnecessary check (Brian White) #5233
[981bbcd925] - src: remove TryCatch in MakeCallback (Trevor Norris) #4507
[48b7b71352] - src: remove unused TickInfo::in_tick() (Trevor Norris) #4507
[d77b28c6b3] - src: remove unused of TickInfo::last_threw() (Trevor Norris) #4507
[cb291d5c7f] - src: add AsyncCallbackScope (Trevor Norris) #4507
[2eb097f212] - src: fix MakeCallback error handling (Trevor Norris) #4507
[63356df39c] - src,http: fix uncaughtException miss in http (Trevor Norris) #5591
[ee7040568d] - src,http_parser: remove KickNextTick call (Trevor Norris) #5756
[9a8acad6ff] - test: use random ports where possible (Brian White) #7045
[223c0e2010] - test: skip doctool tests when js-yaml is missing (Anna Henningsen) #7218
[3681b9b868] - test: refactor doctool tests (Rich Trott) #6719
[686d7b329c] - test: build addons with V8_DEPRECATION_WARNINGS=1 (Ben Noordhuis) #6652
[8404e34665] - Revert "test: mark test-vm-timeout flaky on windows" (Anna Henningsen) #7373
[eab9ced2ee] - test: fix flaky test-vm-timeout (Anna Henningsen) #7373
[a31d3161f5] - test: add test for exec() known issue (Rich Trott) #7375
[1baa145a16] - test: remove internet/test-tls-connnect-cnnic (Ben Noordhuis) #7363
[e3097b7cdf] - test: test isFullWidthCodePoint with invalid input (Rich Trott) #7422
[f0b0fc49f9] - test: update weak module for gc tests (Rich Trott) #7014
[1d100f6853] - test: remove unused vars from http/https tests (Rich Trott) #7598
[3241536d95] - test: remove unused var in net-server-try-ports (Rich Trott) #7597
[7bd7c235fa] - test: remove unused var from stream2 test (Rich Trott) #7596
[4d36a67738] - test: remove unused var from child-process-fork (Rich Trott) #7599
[b5e516a42c] - test: remove unused var in test-tls-server-verify (Rich Trott) #7595
[db35efa6c1] - test: fix flaky test-net-write-slow (Rich Trott) #7555
[8273824ca3] - test: remove common.PORT from http tests (Rich Trott) #7467
[5129f3f2cd] - test: mark test-vm-timeout flaky on windows (Rich Trott) #7359
[79b45886c1] - test: add tests for some stream.Readable uses (Anna Henningsen) #7260
[65b5cccee9] - test: fix spawn on windows (Brian White) #7049
[96ed883d2f] - test: enable test-debug-brk-no-arg (Rich Trott) #7143
[8724c442f3] - test: add test for uid/gid setting in spawn (Rich Trott) #7084
[042e858dfb] - test: make test-child-process-fork-net more robust (Rich Trott) #7033
[2a59e4e73d] - test: improve debug-break-on-uncaught reliability (Rich Trott) #6793
[77325d585e] - test: remove disabled eio race test (Rich Trott) #7083
[5b1f54678b] - test: remove non-incremental common.PORT changes (Rich Trott) #7055
[44228dfdef] - test: remove common.PORT from gc tests (Rich Trott) #7013
[644bfe14a6] - test: fix test-debug-port-numbers on OS X (Santiago Gimeno) #7046
[cde3014f78] - test: remove modifcation to common.PORT (Rich Trott) #6990
[8c412af7ac] - test: verify cluster worker exit (cjihrig) #6993
[7d6acefbcc] - test: listen on and connect to 127.0.0.1 (Ben Noordhuis) #7524
[ecf5c1cb25] - test: refactor spawnSync() cwd test (cjihrig) #6939
[9cccaa3c80] - test: fix component printing on windows (Ben Noordhuis) #6915
[af4b56d6be] - test: pass python path to node-gyp (hefangshi) #6646
[7c55f59214] - test: make stdout buffer test more robust (Rich Trott) #6633
[3aef9b813f] - test: unmark test-http-regr-gh-2928 as flaky (Rich Trott) #6540
[2259e5db69] - test: avoid test-cluster-master-* flakiness (Stefan Budeanu) #6531
[5f444ed6a3] - test: add tests for stream3 buffering using cork (Alex J Burke) #6493
[01b314d165] - test: test TTY problems by fakeing a TTY using openpty (Jeremiah Senkpiel) #6895
[55f8689711] - test: add test for responses to HTTP CONNECT req (Josh Leder) #6279
[9aec1ddb4f] - test: test cluster worker disconnection on error (Santiago Gimeno) #6909
[c0a42bc040] - test: verify IPC messages are emitted on next tick (Santiago Gimeno) #6909
[9606f768ea] - (SEMVER-MINOR) test: run v8 tests from node tree (Bryon Leung) #4704
[efdeb69c9a] - test: work around debugger not killing inferior (Ben Noordhuis) #7037
[e3f9bc893f] - test: use strictEqual consistently in agent test (Ben Noordhuis) #6654
[1186b7a401] - test: add addons test for MakeCallback (Trevor Norris) #4507
[8f76d7db03] - test,tools: test yaml parsing of doctool (Anna Henningsen) #6495
[e544b1c40c] - test,win: skip addons/load-long-path on WOW64 (Alexis Campailla) #6675
[b956635e41] - tls: catch certCbDone exceptions (Fedor Indutny) #6887
[06327e5eed] - tls: use process.binding('config') to detect fips mode (James M Snell) #7551
[c807287e80] - tls,https: respect address family when connecting (Ben Noordhuis) #6654
[9ef6e23088] - tools: make sure doctool anchors respect includes (Anna Henningsen) #6943
[f9f85a006f] - tools: restore change of signatures to opts hashes (Jesse McCarthy) #6690
[607173bbac] - tools: fix regression in doctool (Myles Borins) #6680
[ed193ad8ae] - tools: fix tools/doc/addon-verify.js regression (Anna Henningsen) #6652
[8b88c384f0] - tools: lint for object literal spacing (Rich Trott) #6592
[96b5aa8710] - tools: update marked dependency (Daniel Wang) #6396
[ea137637b7] - tools: allow multiple added: version entries (Anna Henningsen) #6495
[2832a60426] - tools: parse documentation metadata (Tristian Flanagan) #6495
[0149cb0577] - tools: add mock-y js-yaml dependency to doctool (Anna Henningsen) #6495
[68e9fd47c6] - tools: fix -Wunused-variable warning (Ben Noordhuis) #7462
[4a2bd2d515] - tools: allow cpplint to run outside git repo (Ben Noordhuis) #7462
[09e98a4457] - tools: add back --mode=tap to cpplint (Ben Noordhuis) #7462
[e74f199fe2] - tools: disable unwanted cpplint rules again (Ben Noordhuis) #7462
[391fc80487] - tools: update cpplint to r456 (Ben Noordhuis) #7462
[efadf7639f] - tools: update certdata.txt (Ben Noordhuis) #7363
[d7ce99214d] - tools: update ESLint, fix unused vars bug (Rich Trott) #7601
[242d6c7323] - tools: remove unused variable (Rich Trott) #7594
[7182f5f876] - tools: fix license builder to work with icu-small (Myles Borins) #7119
[140b84dd7d] - tools: print stderr on bad test.py vmArch check (Jeremiah Senkpiel) #6786
[4c423e649c] - tools: explicit path for V8 test tap output (Myles Borins) #7460
[d50f16969d] - tools,doc: add example usage for REPLACEME tag (Anna Henningsen) #6864
[b07c3a6ea6] - tty: use blocking mode on OS X (Jeremiah Senkpiel) #6895
[a1719a94e9] - udp: use libuv API to get file descriptor (Saúl Ibarra Corretgé) #6908
[7779639a11] - unix,stream: fix getting the correct fd for a handle (Saúl Ibarra Corretgé) #6753
[d0bf09d3ad] - util: improve format() performance further (Brian White) #5360
[72fb281961] - util: improve util.format performance (Evan Lucas) #5360
[855759757a] - vm: don't print out arrow message for custom error (Anna Henningsen) #7398
[b9dfdfe1d3] - vm: don't abort process when stack space runs out (Anna Henningsen) #6907
[0bfedd13a9] - win,build: add creation of zip and 7z package (Bartosz Sosnowski) #5995
[7d66752f1f] - zlib: release callback and buffer after processing (Matt Lavin) #6955

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

d171f0c859e3895b2430c317001b817866c4de45211ad540c59658ee6a2f689f  node-v4.5.0-darwin-x64.tar.gz
61b570d0744bed2725a4d64ab28f641acb1206fee8760035df36f8ee63e54da3  node-v4.5.0-darwin-x64.tar.xz
12ee966eef2abc928f6d7fcf9cfcf2913ef0e59ae07e2dcc20726246ab174fd8  node-v4.5.0-headers.tar.gz
7a83d8e11089c16824dfcd82ca3f5cb9f727545a39f7138d034b67ed95fb922c  node-v4.5.0-headers.tar.xz
ecdbb3cb55d0a87aeb10334b47310f1823393abe6273f1ce7c97bcb509051e68  node-v4.5.0-linux-arm64.tar.gz
9034e67629e1912d6dc0632627528565d9e412c6eba410d171f9fd80f700f84f  node-v4.5.0-linux-arm64.tar.xz
87c6fb8269475d385a9b923c647890def45079f8e30b55c4737d70558fd36418  node-v4.5.0-linux-armv6l.tar.gz
bc3e33872b009e18f084efb9a595cc12cf8314df125ce80c2e8bde1c2213b5f1  node-v4.5.0-linux-armv6l.tar.xz
99d222ede2f38041c55a64da8e6a669e0128cfb40d40f968cae74d80e52ad566  node-v4.5.0-linux-armv7l.tar.gz
c01482d423b646542ba037cb5ce646cb26518aa2dc9f7728520e7ac1247932b3  node-v4.5.0-linux-armv7l.tar.xz
a517a56b5550567225c6820f99e44fc84ac9953e2fe9db67f3bab7a8d7661e9f  node-v4.5.0-linux-ppc64le.tar.gz
e01cb29c51f05dd56e15e0a25918fe4a2ad10cf4b83c4eee89fb0a3598728e50  node-v4.5.0-linux-ppc64le.tar.xz
46bebb806e4e8273e66e02faf5f25145f5351958bda75d9aa49bee9df7ccafec  node-v4.5.0-linux-ppc64.tar.gz
f910ffa6ff0dbe32d2e3dea7e73b4f83c37f8a7a0d4078d53f3d3b426e30a8cf  node-v4.5.0-linux-ppc64.tar.xz
5678ad94ee35e40fc3a2c545e136a0dc946ac4c039fca5898e1ea51ecf9e7c39  node-v4.5.0-linux-x64.tar.gz
c6ee1f4303353e3605ff70de180431417eb594fe08daf612e692216236750c55  node-v4.5.0-linux-x64.tar.xz
a11ef26fa700eff8ea7acfa491fd362dd362590da2967335d87932e7036a06fd  node-v4.5.0-linux-x86.tar.gz
0f5e51d913867eaf71332cd20fd9a98aeb3576b8a22a52e8e1cd97c89cf51feb  node-v4.5.0-linux-x86.tar.xz
370b65e6cd27943afc18e517f86c7fc801c0d256cb40ca75b2ff01051223cbb6  node-v4.5.0.pkg
47f0f3c9e33d02a49a6c467d8a12539b0bb3c5bf8e1916bd938eaa956afb47bb  node-v4.5.0-sunos-x64.tar.gz
0b83935c6e6decf11c347c1dcaeb1face825a6a103a04117c868239d226de492  node-v4.5.0-sunos-x64.tar.xz
190ff116905ce94291a7122779cbdf493af1ba415432a9a12a32263816b90ccd  node-v4.5.0-sunos-x86.tar.gz
2d49973241a67c1a2da747ad469ba43299a84e8e9f7e2d147b08d22084d73c15  node-v4.5.0-sunos-x86.tar.xz
74ced83b8d890d90e2a8b0d54b0d0e9b5e01d6fd6148cec6e9911ff6eaf0cf21  node-v4.5.0.tar.gz
97b99d378c56802444208409568e2e66c46332897f06aead74d1ffbe733bd488  node-v4.5.0.tar.xz
e80a7bf9afb91a422b2955c95a6dd35fec3a7019e5adc21763ed18c9fa6c67a6  node-v4.5.0-win-x64.7z
16aab15b29e79746d1bae708f6a5dbed8ef3c87426a9408f7261163d0cda0f56  node-v4.5.0-win-x64.zip
9d68e8f4c8650b60dfc0955185d867302a9e63b0bd4ee39b8296fc473b033879  node-v4.5.0-win-x86.7z
f79c11ecc0eb6ecb4e95e27744753eaa6db8c255b6c808bc660722c72d45a892  node-v4.5.0-win-x86.zip
367a1872bac36bfd398b89027df80c9c0e604a466185ad4631c167ba1a5d24c8  node-v4.5.0-x64.msi
489e84902243b1adeb7218322bc0e87091c5e758c669e088ac20b4267a8d165d  node-v4.5.0-x86.msi
ff1d2bbbc55b15fa3d23dc3d359224674b8d1f20b7f387c1e814099b9801288d  win-x64/node.exe
5e54f544fd8ea5cc0a76ccc8b3942e4783de7a174f7cdcd04664a990905395cb  win-x64/node.lib
b3c93cfa8155fc58ce86cdd64d28b2254d00b1d46bd3b69cdd965ffa0afa4493  win-x64/node_pdb.7z
973a47686ee5e3c30e986bcc5df5cecdd643d492ef689d33d801e35e912cd869  win-x64/node_pdb.zip
aa0458966999005a5df9d9d74a415022f92ba02ce641bd582cd46e93cd4b8a90  win-x86/node.exe
7e2ff7208dbe2612b55cc5f11be7e17c00b58b410580b3705cb86e7cba09cc97  win-x86/node.lib
a4e089ae072cf15ef247d16a4b7fb8177855e41bc595f395640dbb68d19a6738  win-x86/node_pdb.7z
355ea7df33f95a5d10377276cc7bf4e89b80457f16923b22fb6dad66ea77d3f5  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJXszriAAoJEJM7AfQLXKlGQuEH/Rvw85bg3uDqCTgXxWaxlwLb
Ua/j3UOEJpqG+bdUn3Zvm0RvhyTWDyJkelb5NOdZhbzHd9/F4x8pPO1ZJa3uF7BF
vgBOxcpLIvL4UgpIelZXs/oLBfsD6RVHPIBNCGgeno0ryyEZp7tSrYbVmDO1zr8W
FqMNRN+E07fFbK+bTc9lMQVyclbdb2QHr4s4GmKrMg2i0GRWOndHfr+mQX3pcK9a
dP6dOKguLPAEOThFiPzks/dbMs++Zq/iWUAPXYzRkXZAvF7vVGOBYeAT7z49rlWT
J1qjH0RPlNzfLIHkTyhha9D6EV/4ZuPtDL+1wsXeCkHHWVa631IxhV1OMdFIivU=
=6paR
-----END PGP SIGNATURE-----

Node v6.4.0 (Current)

Colin Ihrig — Tue, 16 Aug 2016 14:55:11 GMT

Notable changes

build: zlib symbols and additional OpenSSL symbols are now exposed on Windows platforms. (Alex Hultman) #7983 and #7576
child_process, cluster: Forked child processes and cluster workers now support stdio configuration. (Colin Ihrig) #7811 and #7838
child_process: argv[0] can now be set to arbitrary values in spawned processes. (Pat Pannuto) #7696
fs: fs.ReadStream now exposes the number of bytes it has read so far. (Linus Unnebäck) #7942
repl: The REPL now supports editor mode. (Prince J Wesley) #7275
util: inspect() can now be configured globally using util.inspect.defaultOptions. (Roman Reiss) #8013

Commits

[06a0a053ea] - 2016-08-15, Version 6.4.0 (Current) (cjihrig) #8070
[342a85b1a7] - Working on v6.3.2 (Evan Lucas) #7782
[f135a4c3d1] - 2016-07-21, Version 6.3.1 (Current) (Evan Lucas) #7782
[57043aad33] - assert: fix deepEqual/deepStrictEqual on equivalent typed arrays (Feross Aboukhadijeh) #8002
[f6713bfabd] - bench: add bench for fs.realpath() fix (Trevor Norris) #7899
[0d4b04659f] - benchmark: favor === over == (Rich Trott) #8000
[98f51ffeb6] - buffer: fix unintended unsigned overflow (Fedor Indutny) #7494
[28071a130e] - buffer: introduce latin1 encoding term (Trevor Norris) #7111
[b0a557eef7] - build: add correct shared library naming on OS X (Stewart Addison) #7687
[6ed4ea8fd6] - build: turn on thin static archives (Ben Noordhuis) #7957
[c843e58914] - (SEMVER-MINOR) build: export zlib symbols on Windows (Alex Hultman) #7983
[889c62fec1] - build: fix dependency on missing header file (Ben Noordhuis) #7945
[a4394b8745] - build: fix typo in non-essential source file name (Ben Noordhuis) #7945
[636cf2236a] - build: adding config.gypi dep to addons/.buildstamp (Daniel Bevenius) #7893
[ddf292fc32] - build: don't link against liblog on host system (Ben Noordhuis) #7762
[f0312e6560] - (SEMVER-MINOR) build: export more openssl symbols on Windows (Alex Hultman) #7576
[e561895275] - (SEMVER-MINOR) child_process: control argv0 for spawned processes (Pat Pannuto) #7696
[da481c634f] - (SEMVER-MINOR) child_process: support stdio option in fork() (cjihrig) #7811
[a4f0b13e2b] - (SEMVER-MINOR) cluster: support stdio option for workers (cjihrig) #7838
[5f3ab3ffd1] - (SEMVER-MINOR) crypto: fix undefined behavior in ParseExtension (Fedor Indutny) #7494
[60d6e048f0] - (SEMVER-MINOR) deps: v8_inspector: console support (Aleksei Koziatinskii) #7988
[a9fe85ee9c] - deps: v8_inspector update (Ali Ijaz Sheikh) #8014
[4d81362b99] - deps: v8_inspector: remove jinja2 tests (Ali Ijaz Sheikh) #7796
[57312fc0c5] - deps: remove jinja.el from deps/v8_inspector (Ali Ijaz Sheikh) #7796
[507c65d94a] - deps: update v8_inspector (Ali Ijaz Sheikh) #7796
[3f46b5c18e] - deps: float gyp patch for long filenames (Anna Henningsen) #7963
[e6887e2ceb] - deps: cherry-pick a76d133 from v8 upstream (Matt Loring) #7689
[a03e3d3cff] - deps: cherry-pick b93c80a from v8 upstream (Matt Loring) #7689
[75b37a6bac] - deps: cherry-pick 43547df from V8 upstream (Franziska Hinkelmann) #7863
[af63871593] - deps: cherry-pick a51f429 from V8 upstream (Franziska Hinkelmann) #7834
[e82e80417b] - deps: backport 2bcbe2f from V8 upstream (ofrobots) #7814
[51a2041b90] - (SEMVER-MINOR) dgram: generalized send queue to handle close (Matteo Collina) #7066
[7eb95f6faa] - doc: minor updates to onboarding doc (Rich Trott) #8060
[5259322e62] - doc: add POST_STATUS_TO_PR info to onboarding doc (Rich Trott) #8059
[1903275963] - doc: update windows prerequisites (Ben Noordhuis) #8049
[3fe122f57e] - doc: update licenses (Ali Ijaz Sheikh) #7796
[14b762f81f] - doc: move orangemocha to collaborators list (Rich Trott) #8062
[ffbead92a0] - doc: Add fhinkel to collaborators (Franziska Hinkelmann) #8052
[96d15e2f3c] - doc: fix cluster message event docs (Zach Bjornson) #8017
[4a8b8048f2] - doc: add added: information for cluster (Anna Henningsen) #7640
[38255080db] - doc: remove spurious new line in CHANGELOG_V6.md (Luigi Pinca) #8009
[9f78c3f64f] - doc: fix typo in vm.runInNewContext() description (Luigi Pinca) #8005
[c4765a1b66] - doc: Clean up roff source in manpage (Alhadis) #7819
[cbcd03c912] - doc: add CTC meeting minutes 2016-08-03 (Josh Gavant) #7980
[7d0e5a0622] - doc: clarify collaborators & ctc members relationships (yorkie) #7996
[dedfcb7858] - doc: clarify fd closing by fs.readFile etc. (kibertoad) #7561
[ce776d22f9] - doc: fix a markdown error in CTC meeting minutes (Сковорода Никита Андреевич) #7729
[b20518a013] - doc: add added: information for events (Luigi Pinca) #7822
[7fa4be0f87] - doc: improve server.listen() random port (Phillip Johnsen) #7976
[7c427bdccc] - doc: clarify "Reviewed-By" iff "LGTM" (Bryan English) #7183
[cdbeae9adc] - doc: add CTC meeting minutes 2016-07-13 (Josh Gavant) #7968
[2245e843cc] - doc: add CTC meeting minutes 2016-07-20 (Josh Gavant) #7970
[cb0baca982] - doc: use consistent markdown in README (Rich Trott) #7971
[3d1a06451a] - doc: use git-secure-tag for release tags (Fedor Indutny) #7603
[e116cf96a0] - doc: use blockquotes for Stability: markers (Anna Henningsen) #7757
[c934f51aa4] - doc: fix default encoding mention in crypto.md (hugnosis) #7805
[df35ae6246] - doc: fix minor formatting issue in 0.10 changelog (Сковорода Никита Андреевич) #7727
[5f12807c46] - doc: remove extra indentation in iojs changelog (Сковорода Никита Андреевич) #7727
[abd0bc0523] - doc: *.md formatting fixes in the top-level dir (Сковорода Никита Андреевич) #7727
[c72019b75a] - doc: convert tabs to spaces (Сковорода Никита Андреевич) #7727
[0fbb83a67b] - doc: piscisaureus has stepped-down from the CTC (James M Snell) #7969
[48422c240a] - doc: add @addaleax to the CTC (Anna Henningsen) #7966
[0094adc0b2] - doc: add CTC meeting minutes 2016-06-22 (Josh Gavant) #7390
[fd9b7b4c5a] - doc: add CTC meeting minutes 2016-07-06 (Josh Gavant) #7570
[4616261110] - doc: add CTC meeting minutes 2016-06-29 (Josh Gavant) #7571
[bb90867339] - doc: add CTC meeting minutes 2016-07-27 (William Kapke) #7900
[7d0c1bf781] - doc: fix path markdown formatting (Joey Cozza) #7817
[04ec64aacc] - doc: add missing semicolon (Ravindra barthwal) #7915
[8d8d70d826] - doc: fill in missing V8 version (Timothy Gu) #7878
[6ce9c80ccb] - doc: remove extra spaces and concats in examples (Joe Esposito) #7885
[23b6468667] - doc: add information about CTC quorum rules (Rich Trott) #7813
[0645c3d0c4] - doc: align breakEvalOnSigint - repl option (Prince J Wesley) #7849
[14a0c3181c] - doc: remove platform assumption from CONTRIBUTING (Bethany N Griggs) #7783
[5c4b938665] - doc: minor typo fixes in stream docs (Alex Perkins) #7763
[57fb0d2ee2] - doc: add/fix version metadata for Buffer methods (Brian White) #7784
[49a669bcda] - doc: improve function parameter descriptions (Brian White) #7784
[bdc8690610] - doc: add missing properties in Buffer docs (Brian White) #7784
[a8e7c7f2bf] - doc: improve wording and style of Buffer docs (Brian White) #7784
[9a4a00bcdb] - doc: improve links in Buffer docs (Brian White) #7784
[0103d9dcea] - doc: reorganize Buffer link references (Brian White) #7784
[17ae49a055] - doc: improve Buffer code examples (Brian White) #7784
[0ffeddb5b4] - doc: various documentation formatting fixes (Сковорода Никита Андреевич) #7637
[1fa9330ac6] - doc: add princejwesley to collaborators (Prince J Wesley) #7877
[715ac62670] - doc: clarify that the node.js irc channel is not under tsc oversight (James M Snell) #7810
[edb877da65] - doc: fix added: date for NODE_REPL_HISTORY (Anna Henningsen) #7775
[27f92efaee] - doctool: improve the title of pages in doc (yorkie) #7939
[18a3064937] - fs: restore JS implementation of realpath (Bartosz Sosnowski) #7899
[0bb9d21f0e] - (SEMVER-MINOR) fs: add bytesRead to ReadStream (Linus Unnebäck) #7942
[db3a7e83eb] - http: specify _implicitHeader in OutgoingMessage (yorkie) #7949
[b75ca50c90] - inspector: Do not crash if the port is n/a (Eugene Ostroukhov) #7874
[7dc66f82e3] - lib: remove double check of string type (Franziska Hinkelmann) #7985
[5cc4b0ed15] - meta: clarify process for breaking changes (Rich Trott) #7955
[79ecfb5183] - meta: include a minimal CTC removal policy (Rich Trott) #7720
[376d73b3b9] - meta: provide example activities (Rich Trott) #7744
[ccbb46378f] - module: fix node_modules search path in edge case (hefangshi) #6670
[2f32191686] - (SEMVER-MINOR) process: save original argv[0] (Pat Pannuto) #7696
[d9c9e46780] - repl: disable Ctrl+C support on win32 for now (Anna Henningsen) #7977
[61e57e06a6] - repl: don't override all internal repl defaults (cjihrig) #7826
[4875aa2aa2] - (SEMVER-MINOR) repl: Add editor mode support (Prince J Wesley) #7275
[fc3ba2ff4f] - (SEMVER-MINOR) repl: Use displayErrors for SyntaxError (Prince J Wesley) #7589
[b3164ae22e] - (SEMVER-MINOR) repl: add support for custom completions (Diosney Sarmiento) #7527
[980f4da8c4] - repl: prevent undefined ref in completion (Evan Lucas) #7718
[6e6cf36761] - repl: default useGlobal to true (cjihrig) #7795
[08e6eeee70] - repl,util: insert carriage returns in output (JungMinu) #8028
[fb8840cac2] - src: use RAII for mutexes in node_watchdog.cc (Anna Henningsen) #7933
[780395ffca] - src: fix use-after-free in inspector agent (Ben Noordhuis) #7907
[9d45569ed4] - src: avoid manual memory management in inspector (Ben Noordhuis) #7906
[a20336e708] - src: remove unused using decls (Haojian Wu) #7990
[317ae96c33] - src: make EnvDelete behave like the delete operator (Franziska Hinkelmann) #7975
[1ab796fa96] - src: do not copy on failing setProperty() (Franziska Hinkelmann) #7908
[cf65a7ce9e] - src: unifying PipeConnectWrap and TCPConnectWrap (Daniel Bevenius) #7501
[63c62cce35] - src: Only use TR1 type_traits on OSX<10.9 (Ehsan Akhgari) #7778
[d7143095cb] - src: fix build on CentOS (Rich Trott) #7873
[303f4102d3] - src: pull OnConnection from pipe_wrap and tcp_wrap (Daniel Bevenius) #7547
[c967af8c07] - src: suppress coverity message (cjihrig) #7587
[f3e5b39696] - src: guard against overflow in ParseArrayIndex() (Ben Noordhuis) #7497
[c730a5d026] - src: move ParseArrayIndex() to src/node_buffer.cc (Ben Noordhuis) #7497
[da9bd2fc48] - src: alias BINARY to LATIN1 (Ben Noordhuis) #7284
[7ba0f860a6] - src: fix erroneous fallthrough in ParseEncoding() (Ben Noordhuis) #7262
[a059aea9a2] - src: remove final trace of raw encoding (Trevor Norris) #7111
[2db26cb165] - test: add test for debug usage message (Rich Trott) #8061
[2e435998eb] - test: mark test failing on AIX as flaky (Michael Dawson) #8065
[554b0f9d91] - test: fix failing inspector cctest (Eugene Ostroukhov) #8019
[c565c17636] - test: fix memory leaks in inspector tests (Ben Noordhuis) #7906
[5d68e4ba9b] - test: console constructor missing new keyword (Rich Trott) #8003
[9735accd3e] - test: allow globals to be whitelisted (cjihrig) #7826
[a385277eb5] - test: fix flaky test-vm-sigint-existing-handler (Anna Henningsen) #7982
[b5beae2529] - test: remove internal headers from addons (Gibson Fahnestock) #7947
[02b12fe880] - test: improve chained property readability (Rich Trott) #7920
[d94063a22b] - test: fix test-vm-sigint flakiness (Santiago Gimeno) #7854
[facd7dade1] - test: don't hard code deprecation count (Prince J Wesley) #7927
[4aee970d92] - test: decrease inconsistency in the common.js (Vse Mozhet Byt) #7758
[10f0c94c35] - test: fix flaky test-tls-wrap-timeout (Rich Trott) #7857
[ccfa6bf4d4] - test: speed up test-net-reconnect-error (Rich Trott) #7886
[577adc74cd] - test: ensure stream preprocessing order (Vse Mozhet Byt) #7741
[8f51e36898] - test: use common platform helpers everywhere (Santiago Gimeno) #7845
[2f45941807] - test: handle IPv6 localhost issues within tests (Rich Trott) #7766
[e56db1477c] - test: fix flaky test-*-connect-address-family (Rich Trott) #7605
[1ab6df6b04] - test: make import common as the first line (Sakthipriyan Vairamani) #7786
[0daceffd38] - test,assert: add deepEqual/deepStrictEqual tests for typed arrays (Feross Aboukhadijeh) #8002
[4416ffab8a] - test,util: fix flaky test-util-sigint-watchdog (Anna Henningsen) #7933
[4535149794] - timers: remove unused repeat param in timer_wrap (Jan Schär) #7994
[381aef8145] - timers: fix cleanup of nested same-timeout timers (Erin Spiceland) #7827
[e611c293bb] - tools: enable rest-spread-spacing (Rich Trott) #8073
[7eb0e7a479] - tools: favor === over == in license2rtf.js (Rich Trott)
[583a2515da] - tools: update license-builder.sh for v8_inspector (Ali Ijaz Sheikh) #7796
[97934f99bb] - tools: enable linting for chained properties (Rich Trott) #7999
[60ff991c09] - tools: update to ESLint 3.2.2 (Rich Trott) #7999
[d37a17ec5f] - tools: add remark-lint configuration in .remarkrc (Сковорода Никита Андреевич) #7729
[cb16e97e9f] - tools: add .vscode folder to .gitignore (Josh Gavant) #7967
[fecf611ca8] - tools,test: show signal code when test crashes (Santiago Gimeno) #7859
[2f20910e24] - tty: set the handle to blocking mode (Jeremiah Senkpiel) #6816
[cfec3ae5fd] - (SEMVER-MINOR) util: add inspect.defaultOptions (Roman Reiss) #8013
[295d1ea016] - util: support classes in util.deprecate() (vladimir) #7690
[0a07201ca1] - util: fix formatting of objects with SIMD enabled (Anna Henningsen) #7864
[f1c50a8c5e] - win,msi: fix inclusion of translations (João Reis) #7798
[dbbcb9dbd9] - win,msi: Added Italian translation (Matteo Collina) #4647
[909254c901] - zlib: remove unneeded property (Jan Schär) #7987

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

4d04f11e12a360a0d5c6da5cd393fbe75a13f111a492c2a12185992b83542f9c  node-v6.4.0-darwin-x64.tar.gz
ffbb7c4f65a262bb682d60b04ad822f195e90c263d4a13ce27d59d84067e1269  node-v6.4.0-darwin-x64.tar.xz
6e094188a1c6dda967d160a92ec55ff9b46120a2207291eb067404dbf9cbd6c6  node-v6.4.0-headers.tar.gz
e6eff7186e51a9defa51088bb53a32e7f821000b4879ee5bb2c1c0eda9feb979  node-v6.4.0-headers.tar.xz
42493fcd0266949b219bb4a0f36e1e765f266aed104c594cff012b906dcc53c1  node-v6.4.0-linux-arm64.tar.gz
8c7bfba97061f15d567a5e5725ebeb795192a055074d7266d9de36a8acb3ab9a  node-v6.4.0-linux-arm64.tar.xz
94e97543f4f32f6b8368d37c6ea8eebcbf43dd2fa170e02166d9887646d42ec4  node-v6.4.0-linux-armv6l.tar.gz
b55b65a1918b321ead91af1ae9b50517ad8bed5358a9efcdaa18019c6e73f41e  node-v6.4.0-linux-armv6l.tar.xz
51fddefc79a2e8303b975345eea10128a2180a3f40c06238c77daa3c0009b8c4  node-v6.4.0-linux-armv7l.tar.gz
48b9db9e41d7832afeafb48a0b95b11ec736ac881a60742b82819bdefe1ea48e  node-v6.4.0-linux-armv7l.tar.xz
9e28554ec3f4f18d675d952f00f1f06535254c9513b5cde3d6f9241be4ef063a  node-v6.4.0-linux-ppc64le.tar.gz
7d2a0e86ffeace9e1650255fc88637518666ed4a983bf39a68fedddb800cbcb1  node-v6.4.0-linux-ppc64le.tar.xz
43b3091418816b3576b48d6a462bc96eec1d2cb107164631d8b5887a597b1992  node-v6.4.0-linux-ppc64.tar.gz
b3259edbdeb88773799b3b5fdd34e8e58741cf2ab15528f5d0a6600102c9df92  node-v6.4.0-linux-ppc64.tar.xz
990636e44b9f7a270cf82f988e5faecb5850fcda9580da65e5721b90ed3dddb2  node-v6.4.0-linux-x64.tar.gz
54ecdb5578cac005ef179f07d421e70bd8a966bc50b5a319188a7b36cf3e441c  node-v6.4.0-linux-x64.tar.xz
3630f172fee9c30ef95df3972ae9b2b234273ad504f245e0db363797fa2c08f4  node-v6.4.0-linux-x86.tar.gz
26d8de42de0599d33e893522f9ca389eacc6afc2c28f3fdd91505c3ceafed0d0  node-v6.4.0-linux-x86.tar.xz
4d27bd28de1b5cfdc1305915855d6024ac9e2b16bc443829ff93b796a880a3aa  node-v6.4.0.pkg
16f316b4195f480a0b318c27c30d84f60f9a0cf567b4f083aad0db733a64aaec  node-v6.4.0-sunos-x64.tar.gz
87933629f7e4897abf388ee40a5d077791238cd0d93994d106c063a4a56e1df3  node-v6.4.0-sunos-x64.tar.xz
96b24de07ad692e74a8543df3e965bb9ee337130a5c2cf2531c6290e934cda54  node-v6.4.0-sunos-x86.tar.gz
e26276a5f9798a421b17abfc530273edf8e70e3fd07c85024229b4a137ec6c1b  node-v6.4.0-sunos-x86.tar.xz
a58c930618cf5b0862aa329a626e850519036acfcd746983010c9946df1797d0  node-v6.4.0.tar.gz
49b6882db88a9b08939b1d06e4e926bec0d6f4f67eee3bdb475e3487c6bd7dac  node-v6.4.0.tar.xz
3dd69f45fba97337f57481cb167696822b5d2657740fc6eff2cfea1a017a546f  node-v6.4.0-win-x64.7z
bb994370e43c1539e11588a86e69064459141b6984b705f1c79a1a13181193b9  node-v6.4.0-win-x64.zip
765cc4330e5efbbd099d095430ad945fc150b90f888fb77f33f72ad2b2e0693e  node-v6.4.0-win-x86.7z
5709ddfb479522632f9f1246f1e328a22341e61b44174d60e63996f558a5453d  node-v6.4.0-win-x86.zip
c2f9970ff7402078f4210f981f96672c28bba018b4390517cbc4a1a785a4b7b7  node-v6.4.0-x64.msi
35df69a68e14e9029589b22d79211c4b73cdf70a6df42777ad86e1e5b0fb759a  node-v6.4.0-x86.msi
150ea62e87a087390172aa0e97030658faf5622c2ade2c7ee12acc8d336c40e3  win-x64/node.exe
479666193acab8c4e730e9a8a2d4754353b0d7d72f653f971b749ce74ed2c722  win-x64/node.lib
e82cc3aa5820bd76c6829839dd602ca77814cd0870b21557ab5fa991d36085f6  win-x64/node_pdb.7z
8d133f15030a453b14dd96166d7d63da79c6c143c3d4f190cd5bbb3110ef8db1  win-x64/node_pdb.zip
2401cead2af0d68f3d7aa7b65f57d0a512aa825e2c3cd8e02ac8ec208ee4f5e6  win-x86/node.exe
6bc07f4adfc312e538fe1ce0ca9d59da1f299a11e20ad2daf4f114f6dd196a78  win-x86/node.lib
2ffc4b2ddf0efd32e6fe75ceda06baec12e8e183c9d2da09f63e6c7a90964144  win-x86/node_pdb.7z
eee8297bec4cb4ac5be35a9dacc08a45491a596229a802d5d1083ed5256f3097  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJXsyeVAAoJEHQ0OQvb6bnFc0QP/irn694UVjab4jILQeeFQNT1
BzoCPcm7MN75dxMGu/2tzpnkEyQLTlqb69Ikhixy7edqzpI3oj8X7TRdduSkZgwD
/JzwbKSoXcUHdqNBbyuGq0AWfG03/VqJJ1V5fSmKDETdPAvqwKdedwMD+geXKlZw
0NcMpa4qtIq+5waVeQOUyEpDS8UpveZDlb8Ih1q6cddhiBmu0QvxmUB7ehXc2n6p
B/MQAaUKurYpz2m+HQI5M7G6htDFWNomAXoMgBnjdn3Sj2e+32QwvhYleVR4pIGW
wjXhkbIRyIiHUwTq1clBWWovFW1wx/nvYHSAonNFfab1SwRUIyMEAcgyLDLBXaE7
HKpqrdsSA2AwqwIE/5lKOZMPX7SrPGUzMvgRT0X3lfg2MxDGYwxP+w5dudM8v4r9
TX5IP1SiSykf5/EwcH0DLRFkATo5gBGEh2DnV37zv8aSgeCqAG1Yq4O5PLPIBHfk
vK0r9r7G2o5Hq0fsQC7nuf3vAuImc64p2RHvGRkPKJQcFfo6RBFtBd/0+AAgPg2p
ywk4HRP1vj3WxzrN4MIj3K8Id36NwGu9fFZHwTuzyHXkGsxMlVHLCT9Lh4g5o7if
bh4i/AnZJYUzrqyQ/7wpbKrRIwpQl99SGii2ZNjajDCp/bT8xM6czKTRV3A4npjH
GKimGdNeYQ7iUigdekY7
=nn+Y
-----END PGP SIGNATURE-----

Weekly Update - August 15th, 2016

Minwoo Jung (github.com/JungMinu) — Mon, 15 Aug 2016 12:00:00 GMT

Node v6.4.0 Proposal

Node v6.4.0 Proposal. Complete changelog from previous releases can be found on GitHub.

Implement HTTP/2 in Node.js core

proposal: Implement HTTP/2 in Node.js core.

This is the beginnings of a proposal to implement HTTP/2 in Node.js core. There are still many details that need to be worked out, but this outlines the basic direction.

Node.js Interactive Registration

Node.js Interactive Registration: Visit here to register.

Community Updates

Monitoring Node.js Applications: you can learn how to get started with Node.js and deliver software products using it.

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

NodeConf EU 2016: Sunday 16th - Thursday 20th October, Lyrath Estate Kilkenny
NodeConf Barcelona 2016: 18th November 2016 · Barcelona Mobile World Centre
NodeConf Argentina: 18 - 19 November, 2016

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

Weekly Update - July 22nd, 2016

Minwoo Jung (github.com/JungMinu) — Fri, 22 Jul 2016 12:00:00 GMT

Node v6.3.1 (Current)

Node v6.3.1 (Current). Complete changelog from previous releases can be found on GitHub.

Node.js Foundation Announces Keynotes and Programming for Node.js Interactive Europe

Event will showcase workshops, community and technical talks, and use cases that will inform the future development of Node.js and JavaScript.

See https://nodejs.org/en/blog/announcements/interactive-2016-ams/ for more information.

Community Updates

Node Hero - Node.js Security Tutorial: In this Node.js security tutorial, you are going to learn how to defend your applications against the most common attack vectors.

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

NodeConf EU 2016: Sunday 16th - Thursday 20th October, Lyrath Estate Kilkenny
NodeConf Barcelona 2016: 18th November 2016 · Barcelona Mobile World Centre
NodeConf Argentina: 18 - 19 November, 2016

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

Node v6.3.1 (Current)

Evan Lucas — Thu, 21 Jul 2016 22:41:46 GMT

Notable changes

buffer:
- Improve performance of Buffer.from(str, 'hex') and Buffer#write(str, 'hex'). (Christopher Jeffrey) #7602
- Fix creating from zero-length ArrayBuffer. (Ingvar Stepanyan) #7176
deps:
- Upgrade to V8 5.0.71.xx. (Ben Noordhuis) #7531
- Backport V8 instanceof bugfix (Franziska Hinkelmann) #7638
repl: Fix issue with function redeclaration. (Prince J Wesley) #7794
util: Fix inspecting of boxed symbols. (Anna Henningsen) #7641

Commits

[3747d910ec] - benchmark: remove unused variables (Rich Trott) #7600
[41582722c8] - buffer: optimize hex_decode (Christopher Jeffrey) #7602
[4a3300e66b] - buffer: fix creating from zero-length ArrayBuffer (Ingvar Stepanyan) #7176
[71f84b5e6c] - build: add conflict marker check during CI lint (Brian White) #7625
[4480b14fda] - build: use BUILDTYPE when building V8 in Makefile (Michaël Zasso) #7482
[94a486a388] - build: add v8 requirement to test-v8* in Makefile (Michaël Zasso) #7482
[e5627278f1] - build: add --enable-d8 configure option (Ben Noordhuis) #7538
[933ff62fa5] - build: respect --shared-* flags for inspector deps (Сковорода Никита Андреевич) #7569
[9bb1024dc3] - child_process: Check stderr before accessing it (Robert Chiras) #6877
[f574bd4cec] - cluster: remove bind() and self (cjihrig) #7710
[164981af5f] - deps: bump V8 patchlevel for instanceof cherry-picks (Franziska Hinkelmann) #7638
[287006149b] - deps: cherry-pick 5b5d24b for X87 from V8 upstream (Franziska Hinkelmann) #7638
[e5cce7acfe] - deps: cherry-pick 3a903c4 for PPC from V8 upstream (Franziska Hinkelmann) #7638
[e23904523f] - deps: cherry-pick 2aa070be from V8 upstream (Franziska Hinkelmann) #7638
[d3f0a6a52f] - deps: cherry-pick 1f53e42 from v8 upstream (Ben Noordhuis) #7612
[cf8a4889db] - deps: v8_inspector no longer depends on wtf (Ali Ijaz Sheikh) #7751
[939cf6ddb2] - deps: no /safeseh for ml64.exe (Fedor Indutny) #7759
[abf86adee1] - deps: back-port d721121 from v8 upstream (Ben Noordhuis) #7633
[dbdcded866] - deps: upgrade to V8 5.0.71.54 (Ben Noordhuis) #7531
[4839ef37a9] - doc: correcting misspelling (Vitaly Tomilov) #7797
[3343d46f2c] - doc: general improvments to events documentation (Sakthipriyan Vairamani) #7480
[e8a6a223ec] - doc: update readme with andrasq as a collaborator (Andras) #7801
[59ed303612] - doc: update CTC governance information (Rich Trott) #7719
[4b320adb49] - doc: correct sample output of buf.compare (Hargobind S. Khalsa) #7777
[9847f8459c] - doc: add added: information for stream (Italo A. Casas) #7287
[1f003590d6] - doc: fix inconsistencies in code style (saadq) #7745
[9c274e32fd] - doc: Warn against uncaughtException dependency. (Lance Ball) #6378
[fc4df0df6c] - doc: fix typo in stream doc (Kevin Donahue) #7738
[2a023bfd00] - doc: removed old git conflict markers from fs.md (Jaime Hidalgo García) #7590
[1d07d29bfe] - doc: fix typo in the CHANGELOG_V6 (vsemozhetbyt) #7568
[f15d2d6dae] - doc: fix util.deprecate() example (Evan Lucas) #7674
[58b70d34ee] - doc: link and highlight Object.assign (Sakthipriyan Vairamani) #7670
[cc7fdf429e] - doc: grammar fixes to event loop guide (Ryan Lewis) #7479
[a81ff702cc] - doc: dns.resolve fix callback argument description (Quentin Headen) #7532
[f0c335c347] - doc: add benchmark who-to-CC info (Rich Trott) #7604
[9e0cba0552] - doc: added information on how to run the linter. (Diosney Sarmiento) #7534
[e13ee29cbd] - doc: delete non-existing zlib constants (Franziska Hinkelmann) #7520
[663b103bc5] - doc: fix minor style issues in http.md (Rich Trott) #7528
[6c4d4596cc] - doc: updating REPLACEME tag during release (Gibson Fahnestock) #7514
[b4547340ee] - doc: fix detached child stdio example (cjihrig) #7540
[0f7b4efaaf] - doc: add bartosz sosnowski to colaborators (Bartosz Sosnowski) #7567
[77afeb2ec7] - doc,dgram: fix addMembership documentation (Santiago Gimeno) #7244
[11d6f1af59] - fs: rename event to eventType in fs.watch listener (Claudio Rodriguez) #7506
[989a2a1c92] - inspector: Unify event queues (Eugene Ostroukhov) #7271
[fc0ed2e8c7] - lib,benchmark,test: implement consistent braces (Rich Trott) #7630
[80ca0630a6] - net: export isIPv4, isIPv6 directly from cares (Sakthipriyan Vairamani) #7481
[72fc4ebca2] - repl: Mitigate vm #548 function redefinition issue (Prince J Wesley) #7794
[f97aa4be39] - src: remove unnecessary HandleScopes (Ben Noordhuis) #7711
[78dcf0d641] - src: fix handle leak in UDPWrap::Instantiate() (Ben Noordhuis) #7711
[dc766e6a6f] - src: fix handle leak in BuildStatsObject() (Ben Noordhuis) #7711
[96882e14d1] - src: fix handle leak in Buffer::New() (Ben Noordhuis) #7711
[fbc9ef84b8] - src: disable stdio buffering (Ben Noordhuis) #7610
[44c9a72aad] - test: add regression test for instanceof (Franziska Hinkelmann) #7638
[2e05e65916] - test: add known issue test for #7788 (cjihrig) #7793
[7fb4794e19] - test: increase RAM requirement for intensive tests (Rich Trott) #7772
[61542e82c1] - test: ensure callback runs in test-vm-sigint (Rich Trott) #7768
[9e9d499b8b] - test: use mustCall() for simple flow tracking (cjihrig) #7753
[83cbf3175c] - test: avoid usage of mixed IPV6 addresses (Gireesh Punathil) #7702
[39f5d9ca7a] - test: fix flaky test-http-server-consumed-timeout (Rich Trott) #7717
[3ed0204f23] - test: s/assert.fail/common.fail as appropriate (cjihrig) #7735
[f7651d24d4] - test: improve error message in test-tick-processor (Rich Trott) #7693
[acb976ac26] - test: cleanup IIFE tests (cjihrig) #7694
[432cb353e1] - test: add common.rootDir (cjihrig) #7685
[9797969ad4] - test: fix old tty tests (Jeremiah Senkpiel) #7613
[37dc7954d8] - test: move parallel/test-tty-* to pseudo-tty/ (Jeremiah Senkpiel) #7613
[5192bed68c] - test: remove unused var from child-process-fork (Rich Trott) #7599
[e1aedbf671] - test: remove unused vars from http/https tests (Rich Trott) #7598
[64e2eed662] - test: remove unused var in test-tls-server-verify (Rich Trott) #7595
[8e50413b7e] - test: fix flaky test-fs-read-buffer-tostring-fail (Rich Trott) #7575
[447a8f26e1] - test: remove unused var in net-server-try-ports (Rich Trott) #7597
[326006527d] - test: remove unused var from stream2 test (Rich Trott) #7596
[97167291e7] - test: fix flaky test-net-write-slow (Rich Trott) #7555
[657fd7aee9] - test: skip doctool tests when js-yaml is missing (Anna Henningsen) #7218
[1576730ef3] - test,doc: clarify buf.indexOf(num) input range (Anna Henningsen) #7611
[49a6ea1b73] - timers: fix processing of nested timers (Jeremy Whitlock) #3063
[5a2ce3633f] - tools: consistent .eslintrc formatting (silverwind) #7691
[2a84da5d09] - tools: increase lint coverage (Rich Trott) #7647
[a82573d480] - tools: enforce JS brace style with linting (Rich Trott) #7630
[8efca46e78] - tools: fix broken format string (Sakthipriyan Vairamani) #7620
[2bef583f8a] - tools: cleanup no-build and build-only options (Sakthipriyan Vairamani) #7620
[df697c486e] - tools: update ESLint, fix unused vars bug (Rich Trott) #7601
[1a360d63db] - tools: remove unused variable (Rich Trott) #7594
[fa99dadda4] - tools: remove unnecessary imports and assignments (Sakthipriyan Vairamani) #7483
[0858e620e9] - util: inspect boxed symbols like other primitives (Anna Henningsen) #7641

Shasums (GPG signing hash: SHA512, file hash: SHA256):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

de6d45f63ab281b7454977d8dbf5494015e63a1cd9c9d8fe6f67e2431684f34f  node-v6.3.1-darwin-x64.tar.gz
5a4e891e6ade214915f4907223955ba37ceff385bd650e8031a1f32fe589df32  node-v6.3.1-darwin-x64.tar.xz
2d7a69f69e9d45453fed9ad68302edf4969e64b870b2e40f9b3d5f98ed44587c  node-v6.3.1-headers.tar.gz
aa9c783846e9339b9fe1fac0eb108bbce2a34da87faca2b16867968765a87264  node-v6.3.1-headers.tar.xz
66ef087709f7709f0bf066904df06815ac7ad213181d6dcc2adb4f9dc831704f  node-v6.3.1-linux-arm64.tar.gz
219e4182a2901af94d6fb907714995e240c6916f1dd3c196eab2478cc10eb219  node-v6.3.1-linux-arm64.tar.xz
fe6722b20b71e117be020792e7e69b124adeeae46ed666a406ac3a132870c418  node-v6.3.1-linux-armv6l.tar.gz
6632fdf08afbc2753635fc2698aaab9bffac0b258cb3b3f066469b90195b655c  node-v6.3.1-linux-armv6l.tar.xz
633fc62c5bb2cff7e2746ee5351494b97021468365d5d290f275f56db920337a  node-v6.3.1-linux-armv7l.tar.gz
426efe8025df70d6feb862a034669fd26aaad5c09707ce8a0f2b9a87d20cf412  node-v6.3.1-linux-armv7l.tar.xz
b760514341a29a684b86c9d6754a5b8d576a6b8cf1ec00cea012a38ba7ada7dd  node-v6.3.1-linux-ppc64le.tar.gz
c32c0588be391f23de70c1fbe9f56af520dd47dcbd29a4508a185bc5d703f62b  node-v6.3.1-linux-ppc64le.tar.xz
740824dd86eda983b3c7873e56a952585917f3d8770363f66f8593241009c273  node-v6.3.1-linux-ppc64.tar.gz
09e3d065dba1d80fab9bfaafa01bad57309f93107e0bc41c66a93b1f5b016afc  node-v6.3.1-linux-ppc64.tar.xz
eccc530696d18b07c5785e317b2babbea9c1dd14dbab80be734b820fc241ddea  node-v6.3.1-linux-x64.tar.gz
bf1d9c39fb6f9e4bd471673882e00c1c48b4c78fa7e13492a484a641a104e022  node-v6.3.1-linux-x64.tar.xz
23f07c6467f69c7e572e71a712bbc9c78be14ccad32f694edd52bc45b272a638  node-v6.3.1-linux-x86.tar.gz
2144c4288e9227fb3223d0c6158dc91b8eedc195045682bf28b333f2340043d5  node-v6.3.1-linux-x86.tar.xz
da6bbe14781266dc46c697b4223ed21c22766223989a5dff8f2eb05da53ca219  node-v6.3.1.pkg
a1e8f130b2edab12181a254dcd2cf65c72c4d121aacd0e06037b1a23437f3406  node-v6.3.1-sunos-x64.tar.gz
e40f34a52d9e40f2e7ee70fa1358f4bdeac08461c802765f4170fc8d6cc2709a  node-v6.3.1-sunos-x64.tar.xz
95c0c2d00068976bd96f2fab0dfabd3be0ea7ba7a7b4aaee4d30c7d1849d0e42  node-v6.3.1-sunos-x86.tar.gz
12e2f47999e973579a8bae53ddcb23797f942c0d97cf46fb9dd6857e3dcbe519  node-v6.3.1-sunos-x86.tar.xz
3f6144dcf13c210b11c83dc0b0a841219347a769b5a3b883b20f7ab8dc4008f6  node-v6.3.1.tar.gz
6fe584814b70d5e715be23f54545490609cdf1693372c2cdf47c76c798b02a1b  node-v6.3.1.tar.xz
9574885ea4acfe3ca8773e98e692cc9950dd86223364c808cc8a73122a922c34  node-v6.3.1-win-x64.7z
149addc6b65f7b22ded3c44cd2c720f44ededf4ca4578f105993a846bfa1e0c8  node-v6.3.1-win-x64.zip
57bfe0b948722fd4637193444c94e306b6016063ec53773f430be8c24234bac2  node-v6.3.1-win-x86.7z
d1a13d946f42201bbe827962ac666271210b760548387ee712762ea270b87d95  node-v6.3.1-win-x86.zip
d41bb2d45bbd2dde7539c7c7e4f80865979f0bb15e6af0e7ee9460d9ad47c8ec  node-v6.3.1-x64.msi
ed6c7ef60a0d04bfc5f766b7886c5f5dd3c79041bd2a00df6832fb416237f976  node-v6.3.1-x86.msi
2ab05a292e12f16bc0fef2dc7b3b5df0de2e81dd6a5c12f67d776f144d8e24ac  win-x64/node.exe
efe1403e3ab1cd17527c53a80f5e2736e1dc2b143baa60db9e77e26ce011bee8  win-x64/node.lib
72dc3089935b4a5e0a52e5768ac326ab775a9b14ec8019b634e0e9d4b3567f3a  win-x64/node_pdb.7z
e5d7045e1791d3e3ebebbe978f10f894abc08ec146c4f1112e0c43ed0fbe42b8  win-x64/node_pdb.zip
a1cadd824ac1894d35bb15c00e5ba86f1b96867606925a18666c8dbbec36a312  win-x86/node.exe
9b5322eab3d8af92e581887b80699d75208a40946a0f195589645007a0b37fb0  win-x86/node.lib
203bf697f8936b0d981427865fba20f133ad80deb8d9879f1b27ee1fc7ee4fdf  win-x86/node_pdb.7z
497094669a7fb59d9237c4c687e3a7a7c2ec713ab7abd5e9acf950232bef3d12  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=L52s
-----END PGP SIGNATURE-----

Weekly Update - July 16th, 2016

Minwoo Jung (github.com/JungMinu) — Sat, 16 Jul 2016 12:00:00 GMT

Node v4.5.0 proposal

Node Version 4.5.0 'Argon' (LTS). Complete changelog from previous releases can be found on GitHub.

Node.js Foundation Announces Keynotes and Programming for Node.js Interactive Europe

Event will showcase workshops, community and technical talks, and use cases that will inform the future development of Node.js and JavaScript.

See https://nodejs.org/en/blog/announcements/interactive-2016-ams/ for more information.

Community Updates

Node Hero - Node.js Security Tutorial: In this Node.js security tutorial, you are going to learn how to defend your applications against the most common attack vectors.

If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

NodeConf EU 2016: Sunday 16th - Thursday 20th October, Lyrath Estate Kilkenny
NodeConf Argentina: 18 - 19 November, 2016

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

Weekly Update - July 8th, 2016

Minwoo Jung (github.com/JungMinu) — Fri, 08 Jul 2016 12:00:00 GMT

Node v6.3.0 (Current) Release

Node v6.3.0 (Current). Complete changelog from previous releases can be found on GitHub.

Node.js Foundation Announces Keynotes and Programming for Node.js Interactive Europe

Event will showcase workshops, community and technical talks, and use cases that will inform the future development of Node.js and JavaScript.

See https://nodejs.org/en/blog/announcements/interactive-2016-ams/ for more information.

Binaries for Linux on Power Systems

Community downloads now include binaries for Linux on Power Systems with big endian in addition to the existing little endian binaries.

See https://nodejs.org/en/download/.

Community Updates

Node Hero - Debugging Node.js Applications: you can learn how to get started with Node.js and deliver software products using it. If you have spotted or written something about Node.js, do come over to our Evangelism team repo and suggest it on the Issues page, specifically the Weekly Updates issue.

Upcoming Events

NodeConf EU 2016: Sunday 16th - Thursday 20th October, Lyrath Estate Kilkenny
NodeConf Argentina: 18 - 19 November, 2016

Have an event about Node.js coming up? You can put your events here through the Evangelism team repo and announce it in the Issues page, specifically the Weekly Updates issue.

Node.js Blog

October security releases and v6 LTS "Boron" security inclusions

Node.js v6 LTS security inclusions

CVE-2016-5180 "ares_create_query single byte out of buffer write"

Node v6.8.1 (Current)

Notable changes

Commits

Node v6.8.0 (Current)

Notable changes

Commits

Node v6.7.0 (Current)

Notable changes

Commits

Node v4.6.0 (LTS)

Notable Changes

Commits

Node v0.12.16 (Maintenance)

Notable changes:

Commits:

Node v0.10.47 (Maintenance)

Notable changes:

Commits:

Security updates for all active release lines, September 2016

(Update 27-September-2016) Releases available

Node.js-specific security flaws

CVE-2016-7099: Wildcard certificates not properly validated

CVE-2016-5325: reason argument in ServerResponse#writeHead() not properly validated

Remove support for loading dynamic third-party engine modules

Downloads

Node.js-specific security flaws

September OpenSSL Releases

CVE-2016-6304: OCSP Status Request extension unbounded memory growth

CVE-2016-6305: SSL_peek() hang on empty record

CVE-2016-2183: SWEET32 Mitigation

CVE-2016-6303: OOB write in MDC2_Update()

CVE-2016-6302: Malformed SHA512 ticket DoS

CVE-2016-2182: OOB write in BN_bn2dec()

CVE-2016-2180: OOB read in TS_OBJ_print_bio()

CVE-2016-2177: Pointer arithmetic undefined behaviour

CVE-2016-2178: Constant time flag not preserved in DSA signing

CVE-2016-2179: DTLS buffered message DoS

CVE-2016-2179: DTLS replay protection DoS

CVE-2016-6306: Certificate message OOB reads

CVE-2016-6307: Excessive allocation of memory in tls_get_message_header()

CVE-2016-6308: Excessive allocation of memory in dtls1_preprocess_fragment()

Contact and future updates

Node v6.6.0 (Current)

Notable changes

Commits

Node.js Foundation Announces Schedule for Second Annual Node.js Interactive North America

Node.js Everywhere

Cloud and Back End

Diagnosing, Debugging, and DevOps

Machine Learning, Big Data, Artificial Intelligence

Node.js Core

The New Full Stack

IoT

Operations and Performance

Workshops

About the Node.js Foundation

Media Contact

Farewell to Node.js v5, Preparing for v7

We have a plan!

Which brings me to Node.js v5.

Node v6.5.0 (Current)

Notable changes

Commits

Cars.com and Dynatrace join the Foundation to support the stability and success of the Node.js platform

About the Node.js Foundation

Node v4.5.0 (LTS)

Notable Changes

Commits

Node v6.4.0 (Current)

Notable changes

Commits

Weekly Update - August 15th, 2016

Node v6.4.0 Proposal

Implement HTTP/2 in Node.js core

Node.js Interactive Registration

Community Updates

CVE-2016-5325: `reason` argument in `ServerResponse#writeHead()` not properly validated