1. XenForo 1.5.14 中文版——支持中文搜索!现已发布!查看详情
  2. Xenforo 爱好者讨论群:215909318 XenForo专区

新闻 Node v5.1.1/v4.2.3/v0.12.9/v0.10.41 发布 下载

本帖由 漂亮的石头2015-12-04 发布。版面名称:软件资讯

  1. 漂亮的石头

    漂亮的石头 版主 管理成员

    注册:
    2012-02-10
    帖子:
    487,353
    赞:
    47
    Node v5.1.1 (Stable),该版本是重要安全更新发布,主要更新内容如下:


    • http: Fix a bug where an HTTP socket may no longer have an associated parser but a pipelined request triggers a pause or resume, a potential denial-of-service vector. (Fedor Indutny)


    • openssl: Upgrade to 1.0.2e, containing fixes for:


      • CVE-2015-3193 "BN_mod_exp may produce incorrect results on x86_64", an attack may be feasible against a Node.js TLS server using DHE key exchange. Details are available at http://openssl.org/news/secadv/20151203.txt.


      • CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Shigeki Ohtsu) #4134

    • v8: Backport fixes for a bug in JSON.stringify() that can result in out-of-bounds reads for arrays. (Ben Noordhuis)

    详情请看:04 Dec 15Node v5.1.1 (Stable)

    同时更新的版本还有:


    Node v5.1.1/v4.2.3/v0.12.9/v0.10.41 发布下载地址
     
正在加载...