Node v4.1.2 (안정 버전)

2015-10-05, 버전 4.1.2 (안정 버전), @rvagg

이번 릴리스에는 CVE-2015-7384, 서비스 거부(Denial of Service, DoS) 버그의 수정이 포함되어 있습니다. 버그에 대한 자세한 내용은 nodejs-sec 그룹에서 볼 수 있습니다. 보안 릴리스에 대한 알림을 받고 싶다면 nodejs-sec을 구독하기 바랍니다.

주요 변경 사항

  • http:
    • 실행을 중단할 수 있는 파이프라인의 잘못된 ‘finish’ 이벤트 버그를 수정해서 DoS 취약점 CVE-2015-7384를 수정했습니다. (Fedor Indutny) #3128
    • 소켓을 멈출 것인지 아닌지 판단하기 위해 단순히 현재 요청의 데이터가 아니라 처리되지 않은 응답 데이터를 사용합니다. (Fedor Indutny) #3128
  • libuv: v1.7.4에서 v1.7.5로 업그레이드 했습니다. 자세한 내용은 릴리스 노트를 참고하세요. (Saúl Ibarra Corretgé) #3010
    • 모든 윈도우 버전에 대해 더 나아진 rwlock 구현체를 사용합니다.
    • AIX 지원이 개선되었습니다.
  • v8:
    • v4.5.103.33에서 v4.5.103.35로 업그레이드 했습니다. (Ali Ijaz Sheikh) #3117
    • 프로미스 과정의 속도를 높이기 위해 v8의 업스트림에서 f782159를 백포트했습니다. (Ben Noordhuis) #3130
    • 포스트-모템 메타데이터에서 JSTypedArray 길이를 추가하도록 v8의 업스트림에서 c281c15를 백포트했습니다. (Julien Gilli) #3031

알려진 이슈

현재 알려진 이슈의 전체 목록은 https://github.com/nodejs/node/labels/confirmed-bug에서 확인할 수 있습니다.

  • beforeExit 중에 참조 해제된 타이머에 대한 문제가 아직 남아 있습니다. #1264
  • REPL에 입력된 서로게이트 페어가 터미널을 얼릴 수 있습니다. #690
  • DNS 질의 진행 중에 호출된 dns.setServers()가 단언문 실패로 프로세스를 크래시시킬 수 있습니다. #894
  • url.resolve가 다른 두 호스트 사이를 해석하는 중 URL의 인증 정보 부분을 교환할 수 있습니다. #1435

Commits

  • [39b8730e8b] - async_wrap: ensure all objects have internal field (Trevor Norris) #3139
  • [99e66074d7] - async_wrap: update providers and add test (Trevor Norris) #3139
  • [7a58157d4e] - benchmark: update comment in common.js (Minwoo Jung) #2399
  • [9e9bfa4dc0] - build: iojs -> nodejs of release-urlbase (P.S.V.R) #3015
  • [8335ec7191] - build: fix some typos inside the configure script (P.S.V.R) #3016
  • [d6ac547d5d] - build,win: fix node.exe resource version (João Reis) #3053
  • [798dad24f4] - child_process: null channel handle on close (Fedor Indutny) #3041
  • [e5615854ea] - contextify: use CHECK instead of if (Oguz Bastemur) #3125
  • [f055a66a38] - crypto: enable FIPS only when configured with it (Fedor Indutny) #3153
  • [4c8d96bc30] - crypto: add more keylen sanity checks in pbkdf2 (Johann) #3029
  • [4c5940776c] - deps: upgrade libuv to 1.7.5 (Saúl Ibarra Corretgé) #3010
  • [5a9e795577] - deps: upgrade V8 to 4.5.103.35 (Ali Ijaz Sheikh) #3117
  • [925b29f959] - deps: backport f782159 from v8’s upstream (Ben Noordhuis) #3130
  • [039f73fa83] - deps: remove and gitignore .bin directory (Ben Noordhuis) #3004
  • [5fbb24812d] - deps: backport c281c15 from V8’s upstream (Julien Gilli) #3031
  • [6ee5d0f69f] - dns: add missing exports.BADNAME (Roman Reiss) #3051
  • [f92aee7170] - doc: fix outdated ‘try/catch’ statement in sync (Minwoo Jung) #3087
  • [c7161f39e8] - doc: add TSC meeting minutes 2015-09-16 (Rod Vagg) #3023
  • [928166c4a8] - doc: copyedit fs.watch() information (Rich Trott) #3097
  • [75d5dcea76] - doc: jenkins-iojs.nodesource.com -> ci.nodejs.org (Michał Gołębiowski) #2886
  • [5c3f50b21d] - doc: rearrange execSync and execFileSync (Laurent Fortin) #2940
  • [4fc33ac11a] - doc: make execFileSync in line with execFile (Laurent Fortin) #2940
  • [a366e84b17] - doc: fix typos in cluster & errors (reggi) #3011
  • [52031e1bf1] - doc: switch LICENSE from closure-linter to eslint (P.S.V.R) #3018
  • [b28f6a53bc] - docs: Clarify assert.doesNotThrow behavior (Fabio Oliveira) #2807
  • [99943e189d] - http: fix out-of-order ‘finish’ bug in pipelining (Fedor Indutny) #3128
  • [fb7a491d1c] - http_server: pause socket properly (Fedor Indutny) #3128
  • [a0b35bfcf3] - i18n: add caller to removal list for bidi in ICU55 (Michael Dawson) #3115
  • [ac2bce0b0c] - path: improve posixSplitPath performance (Evan Lucas) #3034
  • [37cdeafa2f] - smalloc: remove module (Brendan Ashworth) #3099
  • [5ec5d0aa8b] - src: internalize binding function property names (Ben Noordhuis) #3060
  • [c8175fc2af] - src: internalize per-isolate string properties (Ben Noordhuis) #3060
  • [9a593abc47] - src: include signal.h in util.h (Cheng Zhao) #3058
  • [fde0c6f321] - src: fix function and variable names in comments (Sakthipriyan Vairamani) #3039
  • [1cc7b41ba4] - stream_wrap: support empty TryWrites (Fedor Indutny) #3128
  • [9faf4c6fcf] - test: load common.js to test for global leaks (Rich Trott) #3095
  • [0858c86374] - test: fix invalid variable name (Sakthipriyan Vairamani) #3150
  • [1167171004] - test: change calls to deprecated util.print() (Rich Trott) #3083
  • [5ada45bf28] - test: replace deprecated util.debug() calls (Rich Trott) #3082
  • [d8ab4e185d] - util: optimize promise introspection (Ben Noordhuis) #3130

Windows 32-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v4.1.2/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v4.1.2/win-x64/node.exe

Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2.pkg

Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-darwin-x64.tar.gz

Linux 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-x86.tar.gz

Linux 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-x64.tar.gz

SunOS 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-sunos-x86.tar.gz

SunOS 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-sunos-x64.tar.gz

ARMv6 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-armv6l.tar.gz

ARMv7 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-armv7l.tar.gz

ARMv8 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-arm64.tar.gz

Source Code: https://nodejs.org/dist/v4.1.2/node-v4.1.2.tar.gz

Other release files: https://nodejs.org/dist/v4.1.2/

Documentation: https://nodejs.org/docs/v4.1.2/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

058a5b07c9bda34074f4acad75ce03319402592a0482221f574e2fc4aed60131 node-v4.1.2-darwin-x64.tar.gz
ea5495dab4139c291ecec2cfd618adea14e7df6794ce60873db3783d5897f7fd node-v4.1.2-darwin-x64.tar.xz
e8e17c8dc5afbf42d9533b37d32d7b44f105c425f13be4840c9e20cfcd251e78 node-v4.1.2-headers.tar.gz
33651643226584cc83753633a61ad83e02ba399537e428468b793e06f1f3a188 node-v4.1.2-headers.tar.xz
ae74c245b9592d52f8632a249a0bdd2eb664dcf7aaf5089d061f9c5b051f101a node-v4.1.2-linux-arm64.tar.gz
5a805fb6e3f3650c2048ac4eafb7654df12b34f1bcc94bd58ad93fc015ded9da node-v4.1.2-linux-arm64.tar.xz
834b36fa7e397f27f63f8fd56b77c15de4d9297c23f70679d0ceabd83662d950 node-v4.1.2-linux-armv6l.tar.gz
32f0958afef2ebeb390a10e9e5e12a99ddba41a8cd17ad26038a8b27fd2e26d1 node-v4.1.2-linux-armv6l.tar.xz
a8e38b1fae35c9b13f0c8cc57991d20a0267603c820028290236508930a522b0 node-v4.1.2-linux-armv7l.tar.gz
d1fccdbedd27ab77aed20861f2dc0dcefb91512f198957ef9574bfe8d9329a0e node-v4.1.2-linux-armv7l.tar.xz
c39aefac81a2a4b0ae12df495e7dcdf6a8b75cbfe3a6efb649c8a4daa3aebdb6 node-v4.1.2-linux-x64.tar.gz
b2d072cf2c87e368ae41931e8ef855d825d66a39f3092cd61e7e60123ad1b471 node-v4.1.2-linux-x64.tar.xz
843599c40d3aabb1f60e33144647e6ead92bcfcefa7efca8396651ab92b5f3b9 node-v4.1.2-linux-x86.tar.gz
4429573a7d26b4103c92f06a4a1384a0ad9476baffdfb081434f95248e1cfe41 node-v4.1.2-linux-x86.tar.xz
d1e6e59bea645b4de42ca0b45f302eea32b0af55bccd7fee8da112eaebf6f221 node-v4.1.2.pkg
5a783eb6b4feaee29f447fe6ea4bfd1b745bee2f00b48d5bbb78f6a2a6488e59 node-v4.1.2-sunos-x64.tar.gz
9c6a3361deddf0712a87a751f679425451692453c407dba75618cf3c789ef637 node-v4.1.2-sunos-x64.tar.xz
33719d820fca0a0b44f55ecb9d9de0ce8359211a98d802a3191dfb4e0e5f2c5c node-v4.1.2-sunos-x86.tar.gz
a09199e3383d855b84033c7441b19dae93172dbd1dd49505df8464f8aefa0005 node-v4.1.2-sunos-x86.tar.xz
febec3703a3fea9b64c46100a7b6a4408250027aa8259a2a815fd2275d502c49 node-v4.1.2.tar.gz
443c8251e812b1f2c4b3e9152a47df23c55567ade739e017e2c0ca0869b71e74 node-v4.1.2.tar.xz
9dce96b418ee81f4552601e936312a503d8f17a6ef34936fb562f6653a933071 node-v4.1.2-x64.msi
18f003ffb82b832c39eb94d5e167c4b0e965e4a28fefda909871375b43a6d94b node-v4.1.2-x86.msi
f80b66e561125ec54f3ac3ad4098847581493ae1be850eceadc3255b5f5ed843 win-x64/node.exe
64f2738aef37a64356c290dd23b72a4171eafb9bec2c2f57208fa7638a06120b win-x64/node.lib
e1fddb067d39edcbe187b3dfd276bb89cb5282d21f2eda7331b46005561ffa0f win-x86/node.exe
80ba09d65813acebf005102ed5cd52a020ec0fbdef09928f3a3667c25cdfab47 win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJWEu1KAAoJEMJzeS99g1RdSpsIALZ4L9a6jqUmpfig5tNGd8++
IlzCDYIqKkrN570V12rMpmFLSRKnE8kl08t0fcy4XbLCBpBYVoIlF5aztUHEjgSz
O2NijWuvygN2rpQWNMKoa0/a3enN5WeduRTm7/0pJvThy1k79tYNA2ti/7aMt554
zlnXxTWYoimz/trfl9ZSBOGKY3Qv8EecKhMw4D2PuTXrUYsOR1GdJikj4nwVgGpo
X+T+h2/yoCcxgCVcruckcmJOYMqKRuu+p5EvtRxycgC5ja7/2XrM/ywgJ33VcJXL
ETnnmI3fSDhXKo9JdAA4mtHMLeIBHUjMu253Dyq1NmbUrEcONF6TBMhuPTM4PwI=
=SCKn
-----END PGP SIGNATURE-----