중요한 보안 릴리스입니다.
Node.js 사용자는 모두 12월 보안 릴리스 요약을 참고하여 패치된 취약점에 관한 자세한 내용을 살펴보기 바랍니다.
새로운 빌드 기반
이번 버전은 Node.js 재단이 운영하는 새로운 빌드 기반으로 만들어진 첫 번째 v0.10 버전입니다.
빌드 과정과 도구를 가능한 기존 기반에 가깝게 만들려고 노력했지만, 변화로 인해 몇 가지 문제점이 발생할 수도 있습니다.
v0.10.40에서 v0.10.41로 업그레이드하면서 문제가 발생했다면 Node.js GitHub 저장소에 버그를 보고해주세요.
주요 변경 사항
- build: Microsoft Visual Studio 2015 지원 추가
- npm: v1.4.28에서 v1.4.29으로 업그레이드.
Node.js v0.10.x가 현재 저장소와 동작할 수 있도록 전략적으로 추가된 단 한 번만 있을 특수한 npm 릴리스입니다(https://github.com/nodejs/LTS/issues/37).
이번 버전의 npm은 실행할 때마다 Node.js v0.10.x 다음 버전에서는 npm v2가 포함될 것이라고 경고하는 배너가 화면에 출력됩니다. - openssl: 1.0.1q로 업그레이드.
클라이언트 인증을 사용하는 Node.js TLS 서버에 서비스 거부를 일으킬 수 있는 잠재적인 벡터, CVE-2015-3194 "PSS 파라미터 누락시 인증서 검증 종료"를 수정합니다. 이 문제점은 TLS 클라이언트도 영향을 받습니다.
자세한 사항은 http://openssl.org/news/secadv/20151203.txt 문서를 참고하세요(Ben Noordhuis). https://github.com/nodejs/node/pull/4133
Commits
- [
16ca0779f5] - src/node.cc: fix build error without OpenSSL support (Jörg Krause) nodejs/node-v0.x-archive#25862 - [
c559c7911d] - build: backport tools/release.sh (Rod Vagg) #3965 - [
268d2b4637] - build: backport config for new CI infrastructure (Rod Vagg) #3965 - [
c88a0b26da] - build: update manifest to include Windows 10 (Lucien Greathouse) #2838 - [
8564a9f5f7] - build: gcc version detection on openSUSE Tumbleweed (Henrique Aparecido Lavezzo) nodejs/node-v0.x-archive#25671 - [
9c7bd6de56] - build: run-ci makefile rule (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
ffa1e1f31d] - build: support flaky tests in test-ci (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
100dd19e61] - build: support Jenkins via test-ci (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
ec861f6f90] - build: make release process easier for multi users (Julien Gilli) nodejs/node-v0.x-archive#25638 - [
d7ae79a452] - build,win: fix node.exe resource version (João Reis) #3053 - [
6ac47aa9f5] - build,win: try next MSVS version on failure (João Reis) #2910 - [
e669b27740] - crypto: replace rwlocks with simple mutexes (Ben Noordhuis) #2723 - [
ce0a48826e] - deps: upgrade to openssl 1.0.1q (Ben Noordhuis) #4132 - [
b68781e500] - deps: upgrade npm to 1.4.29 (Forrest L Norvell) #3639 - [
7cf0d9c1d9] - deps: fix openssl for MSVS 2015 (Andy Polyakov) nodejs/node-v0.x-archive#25857 - [
9ee8a14f9e] - deps: fix gyp to work on MacOSX without XCode (Shigeki Ohtsu) nodejs/node-v0.x-archive#25857 - [
a525c7244e] - deps: update gyp to 25ed9ac (João Reis) nodejs/node-v0.x-archive#25857 - [
6502160294] - dns: allow v8 to optimize lookup() (Brian White) nodejs/node-v0.x-archive#8942 - [
5d829a63ab] - doc: backport README.md (Rod Vagg) #3965 - [
62c8948109] - doc: fix Folders as Modules omission of index.json (Elan Shanker) nodejs/node-v0.x-archive#8868 - [
572663f303] - https: don’t overwrite servername option (skenqbx) nodejs/node-v0.x-archive#9368 - [
75c84b2439] - test: add test for https agent servername option (skenqbx) nodejs/node-v0.x-archive#9368 - [
841a6dd264] - test: mark more tests as flaky (Alexis Campailla) nodejs/node-v0.x-archive#25807 - [
a7fee30da1] - test: mark test-tls-securepair-server as flaky (Alexis Campailla) nodejs/node-v0.x-archive#25807 - [
7df57703dd] - test: mark test-net-error-twice flaky on SmartOS (Julien Gilli) nodejs/node-v0.x-archive#25760 - [
e10892cccc] - test: make test-abort-fatal-error non flaky (Julien Gilli) nodejs/node-v0.x-archive#25755 - [
a2f879f197] - test: mark recently failing tests as flaky (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
e7010bdf92] - test: runner should return 0 on flaky tests (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
c283c9bbb3] - test: support writing test output to file (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
eeaed586bb] - test: runner support for flaky tests (Alexis Campailla) nodejs/node-v0.x-archive#25686 - [
3bb8174b94] - test: refactor to use common testcfg (Timothy J Fontaine) nodejs/node-v0.x-archive#25686 - [
df59d43586] - tools: pass constant to logger instead of string (Johan Bergström) nodejs/node-v0.x-archive#25686 - [
d103d4ed9a] - tools: fix test.py after v8 upgrade (Ben Noordhuis) nodejs/node-v0.x-archive#25686 - [
8002192b4e] - win: manifest node.exe for Windows 8.1 (Alexis Campailla) #2838 - [
66ec1dae8f] - win: add MSVS 2015 support (Rod Vagg) nodejs/node-v0.x-archive#25857 - [
e192f61514] - win: fix custom actions for WiX older than 3.9 (João Reis) nodejs/node-v0.x-archive#25569 - [
16bcd68dc5] - win: fix custom actions on Visual Studio != 2013 (Julien Gilli) nodejs/node-v0.x-archive#25569 - [
517986c2f4] - win: backport bringing back xp/2k3 support (Bert Belder) nodejs/node-v0.x-archive#25569 - [
10f251e8dd] - win: backport set env before generating projects (Alexis Campailla) nodejs/node-v0.x-archive#25569
Windows 32-bit Installer: https://nodejs.org/dist/v0.10.41/node-v0.10.41-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v0.10.41/x64/node-v0.10.41-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v0.10.41/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v0.10.41/x64/node.exe
Mac OS X Universal Installer: https://nodejs.org/dist/v0.10.41/node-v0.10.41.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-darwin-x64.tar.gz
Mac OS X 32-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-darwin-x86.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-linux-x86.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-linux-x64.tar.gz
SmartOS 32-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-sunos-x86.tar.gz
SmartOS 64-bit Binary: https://nodejs.org/dist/v0.10.41/node-v0.10.41-sunos-x64.tar.gz
Source Code: https://nodejs.org/dist/v0.10.41/node-v0.10.41.tar.gz
Other release files: https://nodejs.org/dist/v0.10.41/
Documentation: https://nodejs.org/docs/v0.10.41/api/
Shasums (GPG signing hash: SHA512, file hash: SHA256):
1 | -----BEGIN PGP SIGNED MESSAGE----- |