OpenSSL 업데이트, 1.0.2m

(2017년 11월 8일 수정사항) Node.js 릴리스

어제 활성화된 릴리스 라인에 OpenSSL 1.0.2m 업데이트를 포함한 새 릴리스를 배포했습니다. 이 문제를 엄격하게 보안 릴리스로 구분하지 않았으므로 다른 정기 릴리스처럼 다른 마이너 수정사항 및 추가사항도 포함되어 있습니다.

OpenSSL 1.0.2m를 중요 업데이트로 간주하지는 않았지만 현실적으로 가능한 한 빨리 배포 버전을 업그레이드 해야 합니다.

(2017년 11월 2일 수정사항) Node.js 영향 평가와 릴리스 계획

OpenSSL 1.0.2m에서 수정된 이번 결함에 관한 아래의 Node.js 영향 평가는 crypto 팀의 Shigeki Ohtsu가 작성한 것입니다. OpenSSL 팀이 발표한 기존의 자세한 내용은 아래에서 볼 수 있습니다.

CVE-2017-3735: X.509 인증서에서 IPAdressFamily를 파싱하면서 OOB 읽기가 발생할 수 있습니다.

CVE-2017-3735는 RFC3779에 정의된 확장을 사용해 X.509 인증서를 파싱하면서 버퍼를 초과해서 읽을 수 있는 취약점을 수정했습니다.

Node.js는 컴파일 단계에서 OPENSSL_NO_RFC3779를 정의함으로써 RFC3779 지원을 비활성화했습니다. 그러므로 Node.js는 이번 취약점에 어떤 식으로든 영향을 받지 않습니다.

CVE-2017-3736: x86_64에서 몽고메리 제곱을 처리할 때 캐리가 전파되는 버그가 있습니다.

CVE-2017-3736는 몽고메리 제곱을 처리할 때 캐리가 전파되는 버그를 수정합니다.

분석가들은 이 결함으로 RSA와 DSA를 공격하는 것은 몹시 어려울 것이라고 얘기합니다. 디피-헬만에 대한 공격은 비밀키에 관한 정보를 밝히는 데 필요한 작업 대부분이 오프라인에서 이뤄질 수 있으므로 아주 어렵지만 가능한 것으로 판단됩니다. 이러한 공격에 필요한 리소스의 규모는 아주 크고 극히 소수의 공격자만이 사용할 수 있는 규모입니다. 게다가 공격자는 디피-헬만 파라미터를 유지하고 다수의 클라이언트와 비밀키를 공유하는 상황에서 해당 비밀키를 사용하지만, 아직 패치되지 않은 시스템에 온라인으로 접근할 수 있어야 합니다. 이는 Intel 브로드웰(5세대) 또는 그 이후, AMD 라이젠 등 BMI1, BMI2, ADX 확장을 지원하는 프로세스만 영향을 줍니다.

CVE-2017-3736는 Node.js 사용자에게 영향이 있지만, 이 결함으로 공격에 성공할 가능성은 아주 낮으므로 이 결함을 중요치 않음으로 처리했습니다.

추가 수정 사항

OpenSSL 1.0.2m에는 CVE가 할당되지 않은 두 가지 추가 수정사항도 포함되어 있습니다.

  1. ECDSA의 부 채널 공격은 실행하기 몹시 어렵고 비밀키에 관한 일부 정보만 획득할 수 있습니다.
  2. SNI가 활성화된 TLS 서버. Node.js는 컨텍스트에서 SSL_set_SSL_CTX를 사용하지 않으므로 영향을 받지 않습니다.

릴리스 계획

이 수정사항이 영향도 적고 심각하지 않으므로 이번 주에 긴급 Node.js 릴리스를 하지 않기로 결정했습니다. 활성화된 모든 릴리스 라인의 새 릴리스는 다음 주 11월 7일(화요일)에 예정되어 있고 이번 릴리스는 모두 OpenSSL 1.0.2m과 다른 Node.js 수정사항이 포함될 것입니다.

활성화된 릴리스 라인은 다음과 같습니다.

  • Node.js 4 LTS "Argon"(유지보수 LTS)
  • Node.js 6 LTS "Boron"(활성 LTS)
  • Node.js 8 LTS "Carbon"(활성 LTS)
  • Node.js 9(현재 버전)

모든 릴리스가 완료되면 이 글에 추가사항을 올릴 것입니다.

이하는 원문의 내용입니다.


OpenSSL 프로젝트는 이번 주 2017년 11월 2일 목요일(UTC 기준)에 1.1.0g와 1.0.2m 버전을 릴리스할 것이라고 발표했습니다. (OpenSSL 프로젝트의 수정사항도 보세요.) 이번 릴리스는 "낮음 심각도의 보안 이슈" 하나와 "중간 심각도의 보안 이슈" 하나를 수정할 것입니다.

"중간" 심각도는 클라이언트 애플리케이션이 예기치 않은 종료, 그리 널리 사용되지 않는 프로토콜(DTLS 등)의 결함, 국부 결함과 같은 문제를 포함합니다.

Node.js는 현재 OpenSSL 1.1.0을 지원하지 않거나 포함하지 않으므로 이번 릴리스에서 1.0.2m에만 집중할 것입니다.

"낮은" 심각도의 보안 이슈에 관한 정보는 이미 공개되었습니다.

올바르지 않은 X.509 IPAddressFamily는 OOB 읽기를 일으킬 수 있습니다. (CVE-2017-3735)

X.509 인증서가 올바르지 않은 IPAddressFamily 확장을 포함하고 있다면 OpenSSL은 1바이트 버퍼를 초과해서 읽을 수 있습니다. 대부분은 문자 형식으로 인증서의 잘못된 화면이 나올 것입니다.

낮음 심각도의 수정이므로 릴리스를 진행하지 않습니다. 수정사항은 소스 저장소(1.0.2, 1.1.0, master 브랜치)에서 볼 수 있습니다. https://github.com/openssl/openssl/pull/4276을 참고하세요. 이번 버그는 2006년부터 존재했습니다.

현재 상황에서는 엠바고 때문에 "중간"단계의 심각도를 가진 수정사항의 내용이 무엇인지 확실치 않고 Node.js 사용자에게 영향을 주는지도 알지 못합니다. 만약 영향이 있다면 다음의 단계를 진행할 것입니다.

OpenSSL 1.0.2m이 릴리스 되고 대략 24시간 이내에 crypto 팀은 Node.js 사용자의 영향 평가를 작성할 것입니다. 이 정보는 활성화된 릴리스 라인에 따라 다를 수도 있고 여기에 올릴 것입니다.

영향 평가와 함께 영향을 처리하는 각 활성 릴리스 라인의 릴리스 계획을 발표할 것입니다. Node.js 4 "Argon", Node.js 6 "Boron", Node.js 8 "Carbon", Node.js 9(현재 버전)에 중요 업데이트가 있을 수 있으므로 2017년 11월 3일 금요일 이후 가능한 한 빨리 준비해 두길 바랍니다.

영향 평가에서 OpenSSL "중간" 심각도 이슈가 Node.js 사용자에게 영향이 거의 없다고 나온다면 Node.js 릴리스 팀은 LTS와 현재 버전 릴리스 라인 모두에 대해 예정된 정기 Node.js 릴리스에서 이번 OpenSSL 업그레이드 버전을 포함하고 별도의 보안 릴리스를 진행하지 않기로 할 수 있습니다.

nodejs-sec 구글 그룹에 OpenSSL 릴리스 이후 24시간 이내에 확정된 릴리스 시기와 최종 릴리스에 포함될 자세한 결함 내용을 올릴 예정이니 참고하길 바랍니다. https://groups.google.com/forum/#!forum/nodejs-sec

연락처와 차기 업데이트

현재 Node.js 보안 정책은 https://nodejs.org/en/security/에서 볼 수 있습니다.

Node.js 취약점에 대해 보고하고 싶다면 security@nodejs.org로 연락을 주세요.

보안 취약점과 보안과 관련된 릴리스에 대한 최신 정보를 받고 싶다면 https://groups.google.com/forum/#!forum/nodejs-sec에서 약간의 공지만 올라오는 nodejs-sec 메일링 리스트를 구독하기 바랍니다. 프로젝트는 nodejs GitHub 조직에서 관리되고 있습니다.

Node v8.8.1(현재 버전)

주요 변경사항

  • net:
    • null 핸들러일 때 발생하던 타임아웃을 수정했습니다. 이 회귀는 Node 8.8.0에서 발생했습니다. #16489

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v8.8.1/node-v8.8.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.8.1/node-v8.8.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.8.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.8.1/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.8.1/node-v8.8.1.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.8.1/node-v8.8.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.8.1/node-v8.8.1.tar.gz
Other release files: https://nodejs.org/dist/v8.8.1/
Documentation: https://nodejs.org/docs/v8.8.1/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

532ab5404a992e061639e9fb552818719c67167b065d831e203e896baa9a68b4 node-v8.8.1-aix-ppc64.tar.gz
bf208e29418fb3efc836d3d32b62b9162f0f0b36a0665abc0990f4e292cfc84b node-v8.8.1-darwin-x64.tar.gz
d79e34f4679c0359ca63fefd8f9f907af2eb3ab05335291c77d25408afe5ec18 node-v8.8.1-darwin-x64.tar.xz
a23bf22300253de45f38791d639deecc30f525591f892f7781f233cb25c25291 node-v8.8.1-headers.tar.gz
d343e71eff5256fa0dbfffff62f65827d6318f0483cceb1f0a314d8ccfbfe0b2 node-v8.8.1-headers.tar.xz
bfd5293f23f51601decb3521a8fdc62fbc6633d6eab9d8c3f406cdd7da68fb96 node-v8.8.1-linux-arm64.tar.gz
ea8ad0286a31e7519e979fcf99e503845a95da640cd140be5cff418a68fa6263 node-v8.8.1-linux-arm64.tar.xz
473a321a5d602ab2b6d4f9be910be46af8bac4bf5c553a27471974c60b4d374e node-v8.8.1-linux-armv6l.tar.gz
ab515fa4fe9fc20b7369816d4b106e028758382970f3c861e899b5a1f223e7a3 node-v8.8.1-linux-armv6l.tar.xz
3e8ea812913a5a45d721e70e0b0874eec78433ee6ba6a980a59abfecdde5fca1 node-v8.8.1-linux-armv7l.tar.gz
72815b162d9ff06339e286cbb9cdcbf64ff43af12852ede3f266e56d8750100a node-v8.8.1-linux-armv7l.tar.xz
dc6f3004d84af58cb450ed3f7ffb24aa149f655263b0a9b50f7f8a3c6ba5f60b node-v8.8.1-linux-ppc64le.tar.gz
7e86a9124af20cef48ddf07ed48a49c45de35a2097ca9f622278d4d069c545a2 node-v8.8.1-linux-ppc64le.tar.xz
6989a28f9c7938d515b44424541e82ba584c0da9529ed2d05da6a6b7383e876b node-v8.8.1-linux-ppc64.tar.gz
139c6567181fa7d74f85792600b323a6f51977af490010911278a448ea8d8952 node-v8.8.1-linux-ppc64.tar.xz
b2c1fb082b41c23ffa180c75c7e50f4b6891efe93909905ce2ecf686dd4bb260 node-v8.8.1-linux-s390x.tar.gz
afa4f725973c956ea7975cce43bd608f078b0c8a25b25d57d76cdefd0a3b6560 node-v8.8.1-linux-s390x.tar.xz
df83beb05af3e7aee4d16b74dd6d05967f47ee4ab6d6789ca0ed7f2b22c22c92 node-v8.8.1-linux-x64.tar.gz
004bc95267ef5d5b928f560582f681a679bada2201bf221735a02f4956f67b09 node-v8.8.1-linux-x64.tar.xz
8d3b3919fb9b3ebc90ff25a27d27a4ce5ad3b2de44719a7e942763c6e973b02e node-v8.8.1-linux-x86.tar.gz
369d1a74a2e1f705d2ef3c045308b4887a6c0a8123a4b24299c967699b402167 node-v8.8.1-linux-x86.tar.xz
0ae178a4af5480edbd57feaa933d1acec73c0e0985e91e01c0458972412004ee node-v8.8.1.pkg
252838a733996d3b5208f40636a972860f387dc21613afc4f95ec8462c2fa028 node-v8.8.1-sunos-x64.tar.gz
a13a3a68291c7df7c912c5c410eed727245197859c7a4f9c81a8603ffdae3521 node-v8.8.1-sunos-x64.tar.xz
28b7a1149e36fb4e27db1246c08ff343402404e75b779e7f136935480c3bbec1 node-v8.8.1-sunos-x86.tar.gz
b01de88222e08cf97764c3df9f46d3238bd671376d0b883ffc9619837de2c2b8 node-v8.8.1-sunos-x86.tar.xz
1725bbbe623d6a13ee14522730dfc90eac1c9ebe9a0a8f4c3322a402dd7e75a2 node-v8.8.1.tar.gz
5ce2c47ab779992db49942f757a01cc5131db5cef4e0dd270e48151b0887b57a node-v8.8.1.tar.xz
e719657803800ed3176a2147384fbfc6ba092cfec6a2d3c202aa8184af8222b6 node-v8.8.1-win-x64.7z
a7e60a1a5f46ef309cbe74e423c17e69dd0a573f0c92c9e325caade3388d192a node-v8.8.1-win-x64.zip
bac81bae523ae68b32594f8af68401fb5bd95a0069c98572de056b95f581769c node-v8.8.1-win-x86.7z
37f741b3c891afd9addfb316a8c1310870156e1ac3cee6b919eea341e83071f2 node-v8.8.1-win-x86.zip
928bf0c044db146df4dd03b388b2117f176a20e49a88ce89ee4ae717efae8757 node-v8.8.1-x64.msi
b8e2792147d99e095fdb7add83edbd903205cbe7e2d58303acb1728035e0d334 node-v8.8.1-x86.msi
699cacc56a2f87d74b72f6709e1cf1de22d416b8c0ad66e5e7c1b2f9cc3e92f3 win-x64/node.exe
628caeed05b251ec6cd745b8ff116e9164a8741949dbcb020191d907c736b8d9 win-x64/node.lib
ca24a8255c2deced814a1db5f5ecaf6c30757e506bf91db16c58cfc122225d85 win-x64/node_pdb.7z
842758c85e813b05a9c72f2a57c3cdfd6bba7ec1fe565431c7aafe12d508c783 win-x64/node_pdb.zip
b838c4a28282371226e6141b3f83992949264b4ba7751a70108ba23fa1f5d89b win-x86/node.exe
718039bfbb7d2c8c3f6d4516e810160ef15b489bab44d381897353f9ee89d4c9 win-x86/node.lib
f1e0fb7541f82b5f1981c1d3e55f166ff6ffbb1ff5fa56804035c40e0b0dd495 win-x86/node_pdb.7z
fa3258270dfc3665baf8fa1271dbb8252a9abd60329174ac8746ef758de65e38 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=9H3X
-----END PGP SIGNATURE-----

DOS 보안 취약점, 2017년 10월

(2016년 10월 24일 갱신) 새 버전 출시

요약

모든 활성 Node.js 릴리스 라인에 적용할 수 있는 업데이트가 준비되었습니다. 이번 업데이트에는 앞서 발표했던 보안 취약점 문제를 수정했습니다.

모든 사용자가 가능한 한 빨리 업데이트할 것을 권장합니다.

다운로드

windowBits 파라미터는 압축할 때 zlib가 메모리에 메시지를 얼마나 저장해 둘 것인지 제어하는 파라미터입니다. 호출될 때 '윈도우(window)'가 크면 텍스트에서 반복되는 비트를 더 잘 찾아내고 압축할 수 있지만, 메모리 사용량도 증가합니다. 이 윈도우 크기를 바이트 단위로 표현한 숫자를 밑이 2인 로그에 적용한 값이 바로 windowBits이며 8부터 15까지의 정수를 사용할 수 있습니다.

Node.js가 종료되거나 예외를 발생시키는 문제는 특정 상황에서 windowBits의 값으로 8을 사용할 수 있는 일부 기존 웹소켓 클라이언트 또는 변형된 웹소켓 클라이언트를 사용하여 원격으로 악용될 수 있습니다. 또한 windowBits의 값이 8인 원격 요청으로 실행되는 zLib 동작을 통해 다른 문제를 일으킬 수도 있습니다.

이 문제는 어떤 요청에서 windowBits의 값이 8일 때 내부적으로 9를 대신 사용하도록 수정하여 Node.js 자체적으로 문제를 해결했습니다. 이전 버전의 zLib과도 일관성 있게 동작하며, 기존 애플리케이션에 미치는 영향 또한 적을 것으로 예상합니다.

이 취약점은 CVE-2017-14919로 할당되었습니다.

원래 글은 아래에 있습니다


요약

Node.js 프로젝트는 보안 문제를 수정한 4.x, 6.x, 8.x의 새 버전을 10월 24일이 있는 주에 배포할 예정입니다.

서비스 거부 공격 취약점

4.8.2 이후 버전, 6.10.2 이후 버전, 모든 8.x 버전에는 외부 공격자가 서비스 거부 공격을 일으킬 수 있는 보안 취약점이 있습니다. 이 취약점의 심각도는 '높음'으로 설정되어 있으며 영향받는 버전의 사용자는 보안 문제가 수정되면 현재 사용 중인 버전을 업그레이드해야 합니다.

영향

Node.js 4.8.2 이후 버전은 취약합니다.
Node.js 6.10.2 이후 버전은 취약합니다.
Node.js 8.x 버전 전체가 취약합니다.

배포 시기

릴리스는 사용자가 영향 평가를 할 수 있도록 10월 24일 또는 얼마 지나지 않은 때에 취약점의 자세한 내용과 함께 배포될 예정입니다.

연락처 및 향후 업데이트

Node.js의 현재 보안 정책은 https://nodejs.org/en/security/에서 볼 수 있습니다.

Node.js의 취약점을 제보하고 싶다면 security@nodejs.org로 연락 바랍니다.

보안 취약점, Node.js 보안 관련 릴리스, nodejs GitHub 조직내의 유지보수 되고 있는 프로젝트의 최신 상태를 위해 적은 양으로 통지만 하는 nodejs-sec 메일링 리스트(https://groups.google.com/forum/#!forum/nodejs-sec)를 구독해 주세요.

Node v8.8.0(현재 버전)

주요 변경사항

  • crypto:
    • ECDH 클래스를 외부에 노출합니다. #8188
  • http2:
    • http2를 이제 플래그 없이도 기본으로 사용할 수 있습니다. #15685
    • 사용자가 만든 http2가 필요한 경우를 위해 NODE_NO_HTTP2 환경 변수를 새로 추가했습니다. #15685
    • 범용적인 Duplex 스트림을 지원합니다. #16269
  • module:
    • ESM 생명주기에 추가된 로더 파이프라인 훅을 처리하고 인스턴스화 합니다. #15445
  • zlib:
    • CVE-2017-14919 - zlib v1.2.9에 로우 deflate 스트림을 8로 설정된 windowBits로 초기화하면 오류가 발생하는 문제가 있었습니다. 일부 버전에서 이 문제가 Node를 깨뜨려서 복구되지 않았고 다른 버전에서는 예외가 발생했습니다. 이제 windowBits를 9로 설정해 기존 동작을 안전하게 대체하며 DOS 벡터를 회피합니다. nodejs-private/node-private#95

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v8.8.0/node-v8.8.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.8.0/node-v8.8.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.8.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.8.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.8.0/node-v8.8.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.8.0/node-v8.8.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.8.0/node-v8.8.0.tar.gz
Other release files: https://nodejs.org/dist/v8.8.0/
Documentation: https://nodejs.org/docs/v8.8.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

4524fccb73aae20d6ebd1900c0dd131fab7d3807c5597eb847293562513e43bf node-v8.8.0-aix-ppc64.tar.gz
69a37e240fac48289a2a5bb75ab96091f8d6457eeaf23c0a5125250abe418176 node-v8.8.0-darwin-x64.tar.gz
b2f1440a7669af1e76be7ee7b275c97cbe79ee41a7e6278518d00b5a142d8d12 node-v8.8.0-darwin-x64.tar.xz
272888d6830c0a8c881c947cd5108a51f657f8e050f51b73c6eed1479dec55a3 node-v8.8.0-headers.tar.gz
85a4b3b5ad9d95e0e7df1c00c6496601cd1b4b9844c0bc57310741589bc7dc48 node-v8.8.0-headers.tar.xz
58bb50e792f60651f48b26a9e7e68bd10f51ecc254a2be6ea759f26ebe6b1a21 node-v8.8.0-linux-arm64.tar.gz
454617ff94882d9a81dca0840065fb5a928ff68e8e8efe7c1748d996ab757b2e node-v8.8.0-linux-arm64.tar.xz
15145f5b3c8d05abb786b7877e66ad70459cd5d949bcc63ed5a307a2e1cc300f node-v8.8.0-linux-armv6l.tar.gz
acd924e0bd5fe95e7fad2a97d1e5ffd43e67e6f880e1947dc805a9fe4546b31e node-v8.8.0-linux-armv6l.tar.xz
c6e30d71dba7d735aeb969205c5aa5f9d7574e19fee5e0aa3434bcc8c4d74683 node-v8.8.0-linux-armv7l.tar.gz
68b6b2393f0d379a8c3e2f7416e4577996047839fae8076e479a19ae0d90e053 node-v8.8.0-linux-armv7l.tar.xz
a0e9e51e4b47cacda44db1b9e6bd47d5bc0445b08784aaf4f7181a71a5dfcffa node-v8.8.0-linux-ppc64le.tar.gz
942aade9651a425b171d2699d8c849eb065e49885d6e346c3bf23a5bc9f0b503 node-v8.8.0-linux-ppc64le.tar.xz
d5878ed00864b724339d3752be8d830e2eb7c08c4ce90a9d0ea80a7e78e03dcc node-v8.8.0-linux-ppc64.tar.gz
9eccec7aa1c983ebdb2688f1788b432c5c8908d98c593fd989f0755249f90866 node-v8.8.0-linux-ppc64.tar.xz
aae9ea4e9b213bf40bf5305bf3ac82fa82efd33a4216fea01d430300a9757320 node-v8.8.0-linux-s390x.tar.gz
5405e9f28db36d798253e74d6a52764a91170bf8578fc793620b598c958c5522 node-v8.8.0-linux-s390x.tar.xz
3d988ec9d7e50a030b5aa3f36840a6d37219ff0f5bcd7da255dc9475e7d99813 node-v8.8.0-linux-x64.tar.gz
4304c297f41085ac1f7a6a8e68496d9fd5aa3b92590e7c3c6015a23939767e72 node-v8.8.0-linux-x64.tar.xz
6fcb04e49725378a109388610ac14142adaa001bcf292982077968406fb04a54 node-v8.8.0-linux-x86.tar.gz
6257c617a12eb3a4c5381629c5a8a6166b20efd853ae09fdb1ac10c2c259cdd1 node-v8.8.0-linux-x86.tar.xz
9968e00b7530203d26baa6aa2895717df5a5c433dc9a8bad032c8d2cfb6a425a node-v8.8.0.pkg
bf8d32f0e8c59c60b0de386b557057618476261ce4d0668fc493b3774f7af7f3 node-v8.8.0-sunos-x64.tar.gz
3233c927cc9fb99d17a2bab8f0fdf510b1e3b3b07a0eafbb0690da585324ab28 node-v8.8.0-sunos-x64.tar.xz
9c9b535fab082990689360d7857ffc8aea5f0e371e28be132f98b9f07ff5be02 node-v8.8.0-sunos-x86.tar.gz
a143ba487b1aba035634eec41ad03ba7681b7a1ed78d70f551b9471f3df01dc8 node-v8.8.0-sunos-x86.tar.xz
669e0054a25c7f21e6d8bef182da566de35fb3b3441e8f90b6da9585c1f82caf node-v8.8.0.tar.gz
854f32d27cd62895a13a6af43b87e0542f512f40af960244d15cf16da0914ecf node-v8.8.0.tar.xz
a4bbee86af96c01159178ace42643942bc55ce3907e49f01dd1810f19cfef822 node-v8.8.0-win-x64.7z
a7a1fd2c5f5c967d7df70fdec1a8b2d2d2b1b411fcdd4f23bcf8c9c837a7c3cb node-v8.8.0-win-x64.zip
2136c4c0a489074ad317603605ae03ada260b21e6d0a40ef0c7282b6130f50bd node-v8.8.0-win-x86.7z
abec6b1cec0b768e57121d98d1546741bf33e29399e348bbd26d6c3fd4b359ee node-v8.8.0-win-x86.zip
fcdca3cd23c9e7a7dd277e53dc912a0d587cb59e70d754060ccc1ea10e40b0ce node-v8.8.0-x64.msi
2b33f8ab6273bf5462ae8253e141a468fdffea07b50402534422108491c36bd9 node-v8.8.0-x86.msi
e4bccfc5c35aace727b6b3c95a04065e5193c3cd413ec7ab62bbd7bed3e4a24b win-x64/node.exe
fb5dc64464c1d1a28235a579f09c17053f2c791b5af0af5308ac385c9796747b win-x64/node.lib
eaa509f60be69d0683b92695fec5cb42c233c0e7b9a96dc47e1fe8f1f7af6a69 win-x64/node_pdb.7z
3b6073e505ff15afe5e8e8c99dbe190c16cfaeb44dec680730264c42a7e54e55 win-x64/node_pdb.zip
4433dec0d966f01e2e72ba178acf1f9ef141e73dc0310856981582c3111c42ff win-x86/node.exe
3bacf59ee9027c21ea8789d95769048d2ff036507c51d2dfd9623543915b6d91 win-x86/node.lib
cc0bbd17f16224f74f22d660f26263497a34d178f4d7d2cb9e328a80f4ca3f90 win-x86/node_pdb.7z
2f78c77b7a158b945264783de9b2cccbbf5be98ca6750faef9519aa07d7c64a5 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDv/hvO/ZyE49CYFSkzsB9AtcqUYFAlnvuDkACgkQkzsB9Atc
qUat1wf/e2B+pccmrp7jrdpl+1b7CjDQugzgvJuJd6W+D6Dyq47gy/Xw5cvRx2/2
77WSUd1j6nGghRC2kgr/6iHyf6vg2e7IxJ7+nD9NplWbmF1T1ZtpYx1ojbFa5muD
1/JKQM6Dv/sh/LeL8zw7JSR4Mqtya7/3KlFVBD47Lx02o4fyAiGXy7mcWddZwIMd
FgOYFhmGQre3aBroRvZ06gqRGHXZNezNzQ4joIt3Ro1eSf0gJ83MgLTJ8F5ajdM0
nqi6rKS97eaMdK/DFE/5e/AmUZYwSa8ky/RZGohldAqVDg7oWwWN+KScvFTB5hC1
lqsirns3wFGsWgsly+bq+6P8yt+zFA==
=bc6R
-----END PGP SIGNATURE-----

Node v6.11.5(LTS)

주요 변경사항

  • zlib:
    • CVE-2017-14919 - zlib v1.2.9에 windowBits 값이 8로 초기화 된 DEFLATE 스트림이 에러를 일으킬 수 있는 변경사항이 포함되었습니다. 이 문제가 발생하면 일부 Node 버전은 복구할 수 없는 충돌을 일으키고, 일부 버전에서는 예외가 일어납니다. 이제 Node.js는 내부적으로 windowBits의 값을 9로 설정하여 문제를 수정하고 DOS 공격을 방지합니다. nodejs-private/node-private#95

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v6.11.5/node-v6.11.5-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.11.5/node-v6.11.5-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.11.5/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.11.5/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v6.11.5/node-v6.11.5.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.11.5/node-v6.11.5-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.11.5/node-v6.11.5.tar.gz
Other release files: https://nodejs.org/dist/v6.11.5/
Documentation: https://nodejs.org/docs/v6.11.5/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

907cc72126bfcfed2040ded546649ee1023d8839fc898447bf8435f8b204b654 node-v6.11.5-aix-ppc64.tar.gz
fc0a3ba17e0be7ffe86f9941212dd00905524d6d48dd8cafb63da6adca20a4fc node-v6.11.5-darwin-x64.tar.gz
daedeac624d5a1c177254fa080de7f0ee5426fce57e7bcad554b354c81a69cbc node-v6.11.5-darwin-x64.tar.xz
9e5ab2412d1f2d0a0dc30592e2b2f707e20203ef3d2f7472f0b3ad5d5c8d5e83 node-v6.11.5-headers.tar.gz
90c65a66f2538bade1b470d0bf9deaeef1652f39aadb0d5b2e1d2e218828462d node-v6.11.5-headers.tar.xz
b879b852c3588f3ce7d748273ede959306268e5b2ca199d76b4592c2fb4a0d43 node-v6.11.5-linux-arm64.tar.gz
7f073097e0016aaa1abac8a4e554dd1e534339540be12fbd582670c45436ddca node-v6.11.5-linux-arm64.tar.xz
d25348044b63bc1546951a2b05f7c4f48d74bc3519fd911f9006e979c4511b0f node-v6.11.5-linux-armv6l.tar.gz
043049e3bd4782a435abfef73696d6bc8f0c75938592503352d47755e807f0f7 node-v6.11.5-linux-armv6l.tar.xz
17529148085a8d9e6d8c37f29b12aea0f0c3ef1585bb45290b7a16c76ecd392d node-v6.11.5-linux-armv7l.tar.gz
c2cf97f23c8d55e0d919fb4e3649fd69ccc8acc6668891fc13a052a8679d801e node-v6.11.5-linux-armv7l.tar.xz
12237a2616212f29ce1957e1ec3514eff1abfe433f5cd5aec47fceb79ecb0f86 node-v6.11.5-linux-ppc64le.tar.gz
867003e1fc47a1e41b4f35a2f7874e54c3d85ae3568d460a05891500abeabf29 node-v6.11.5-linux-ppc64le.tar.xz
7aa9f48abdeb3f38cf025966a3b821c56fc6f91aea977906513db6f28b283bd0 node-v6.11.5-linux-ppc64.tar.gz
c6102cf999afc833afb16068f841318fb31fd4168ca0bf6e9c9649ce929df4e7 node-v6.11.5-linux-ppc64.tar.xz
796e1dd5d4585066b0c4c492162b1962d8d02efec31d40296a15b9cdf8d7fe52 node-v6.11.5-linux-s390x.tar.gz
a2d4e4dc8c02fee8e491b411653e0892005831b8caff9d3de220ad1cefb9bcb2 node-v6.11.5-linux-s390x.tar.xz
fffd25c9e9b6d2235e97ba8be1dd6ea5f31e32ea445c5cc704ca84ef44db66c1 node-v6.11.5-linux-x64.tar.gz
8f8ddac70a5213032bbfdcb3cac6e0723374428ad4fa4af2d9b4444177f2b1a9 node-v6.11.5-linux-x64.tar.xz
8594a9087f66efbccc1ef4a6eee1484ab14edac2b379b87affeee29fcbbd6d36 node-v6.11.5-linux-x86.tar.gz
6d8f3e0fd49f44d75c10b21c0bcb92a524faf7cbab8b740e0b9a2f8b3efe4a63 node-v6.11.5-linux-x86.tar.xz
4455eb8a57f9d72300b019212b229c0aa4eb5294391cb3f6df351f928b1a44c9 node-v6.11.5.pkg
577f9e938613c4be6137b95bcde51050b4213577457ba9c2ee57ca343df62bd2 node-v6.11.5-sunos-x64.tar.gz
11b1d072f42ac2bf6812afb5d098781f5c384096586126fa22047d02f50d405d node-v6.11.5-sunos-x64.tar.xz
708888589d29d8ad8c5190b90e2eb5a0a33ce82d37e8693bd798630ecbc7bc6a node-v6.11.5-sunos-x86.tar.gz
7375dbabf0470ec5cc4522339605fe0fc84e539a17c1fd3aa782fdf3f230cea4 node-v6.11.5-sunos-x86.tar.xz
c4aed94e82dbf246a1c9e0705c3054f0c0f3d9c4d8d025d877e0ef1f7b6cde4c node-v6.11.5.tar.gz
1c6de415216799fbaeca82304b3fef87accc7101ebf2ead7d5c545e0779e8aaf node-v6.11.5.tar.xz
5ac17f02726b23fe88ed1653d6082f59da42fe17c92570d021c0d8cf594a58d9 node-v6.11.5-win-x64.7z
cedd481dfd9b28ce95828fd6b218b286893a308280e499e225fa193d26d580c9 node-v6.11.5-win-x64.zip
405db7d106865f074f9cb99790ed0f3946678cdd09ce8b193f6c691be56af9be node-v6.11.5-win-x86.7z
f1089e4b3cfa8d3b1bbddafbc4e501633dc96f4293c08d3f008cdebf6b26786d node-v6.11.5-win-x86.zip
33360c037c792457a2e4b37fd107b26c353f70e779f9236b351bd64d7d0c0240 node-v6.11.5-x64.msi
ff85c2c9e8f5748a62dc90bd1aca3087f45f2e202f35f87de45fdf84e9c74ae3 node-v6.11.5-x86.msi
2b345a44438b5242f6b6a6f6eee6c1b297b026e5d46e34626dadbd6498eeff77 win-x64/node.exe
d13f3c134ea716d1781e1e1c205bb173fefad3cf9378d44825aa52aef0dff473 win-x64/node.lib
9e75b7e9fc443749d6b422f2fab524f5cd45321b6965d9896ff7e1388fb6d370 win-x64/node_pdb.7z
6bbecdad2ab888660273d557651d781039985c7cbeb625424ffdc797aa5d6319 win-x64/node_pdb.zip
b46e1ec5f6b4df812ae8e32e95cbed19e3132d522603d0fde1f4ab0b2a936d09 win-x86/node.exe
45dd98664f0bed3159264f22faaa577d34722abfb53166c36de0be55d2d78fbc win-x86/node.lib
909f875ad6508a9486e74addb739e2e525b7a54cf43cc66809d5a46bc2838045 win-x86/node_pdb.7z
9b7eefa65919db30f145d16aafc769853209e2c233ed6132566a2da96f4383dd win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDv/hvO/ZyE49CYFSkzsB9AtcqUYFAlnvuBwACgkQkzsB9Atc
qUZsLAf/aQg1OIgvGxMFbNc1/C6zlOOlfyc7Rnl93kWL0s/gjWTx7Sh0BIVKJD0y
lN9T1GQCacai4tH8YTV4px+efBRlA2j8c9hQtFD9+zxMyynXsoqenvQW2UsGh3u8
bi9FBwZBPFhCGVPEIepKkh4iaWuDaXO6kdki2qvdnKz7yEpaVsyiciTtEXv4CyQS
b8m0IWSc5uYcji+eK5BSzitvh62I5Y0rd1ru6T/9RDKmS3WtHzNrQCjazVRAZSj+
5J3on9HwYg5YHFdwU8dNWfT4KGOqAf4VhJdTzwADzJnBhleU7ZbCvT14bDtFX6ct
Kw0SC5ZwSUWe05mtducuwe6TaEvABg==
=CJOb
-----END PGP SIGNATURE-----

Node v4.8.5(유지보수 버전)

주요 변경사항

  • zlib:
    • CVE-2017-14919 - zlib v1.2.9에 windowBits 값이 8로 초기화 된 DEFLATE 스트림이 에러를 일으킬 수 있는 변경사항이 포함되었습니다. 이 문제가 발생하면 일부 Node 버전은 복구할 수 없는 충돌을 일으키고, 일부 버전에서는 예외가 일어납니다. 이제 Node.js는 내부적으로 windowBits의 값을 9로 설정하여 문제를 수정하고 DOS 공격을 방지합니다. nodejs-private/node-private#95

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v4.8.5/node-v4.8.5-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v4.8.5/node-v4.8.5-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v4.8.5/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v4.8.5/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v4.8.5/node-v4.8.5.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-ppc64.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.8.5/node-v4.8.5-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v4.8.5/node-v4.8.5.tar.gz
Other release files: https://nodejs.org/dist/v4.8.5/
Documentation: https://nodejs.org/docs/v4.8.5/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

7e0b0ea1ea8d37096561caed59368eebb773c2cdf9d455ad30381053fbc109ce node-v4.8.5-darwin-x64.tar.gz
c32a9d5d47255a8dfd768787a0bac7d17d5f55709b20f7b59a3de3f013c6e7dc node-v4.8.5-darwin-x64.tar.xz
68efec4d1b8cd080bbb622e6f690520bfae575c26aeaa983ae9eb0585e087658 node-v4.8.5-headers.tar.gz
311734f04786dad2ded0d31611d1a180983e0eba8da350622a395ea0dd9bc83b node-v4.8.5-headers.tar.xz
9133ba0865f1d15c52a6fe550fb7a8df81ac81083661dd28ce0bec5fb97be6bf node-v4.8.5-linux-arm64.tar.gz
826f8f898b70085443a6191321e7424967154596021f39bbd517c10ad78bd920 node-v4.8.5-linux-arm64.tar.xz
c2665427269408ba05a7917362af3c9ee28095931315987ec8e9ff332cc4df5d node-v4.8.5-linux-armv6l.tar.gz
d219a26024498d4fdc615803621dead734a515087e1b98b38240deeb0c2c877d node-v4.8.5-linux-armv6l.tar.xz
b6b1a85c7d8fe63aa9459748b035116ca71a42c0aac06eab6d876ebc67f7a136 node-v4.8.5-linux-armv7l.tar.gz
d054af00b6d67f3417e6062a967c7124bcdd45c83f1f103ae4705ff8e62e16ea node-v4.8.5-linux-armv7l.tar.xz
53599540a678fd7114922b4f94b28518a76899f64d3c0e6ba94ccf5c266b5652 node-v4.8.5-linux-ppc64le.tar.gz
8b5ae4d119d645bcff7e93186aff6c5f8ee4ae7d9c66d2969ff70ddf01707ccc node-v4.8.5-linux-ppc64le.tar.xz
f26cfd2e27cda911fbacf03d856cd8dcbbe0f54cf16958d94c58eb721d2e8946 node-v4.8.5-linux-ppc64.tar.gz
a97e732688f9b4a0c2b208160abd939c660d7298d299c3281947829c8f37ad57 node-v4.8.5-linux-ppc64.tar.xz
8a82f320795cf0874ccefb3e7890dffb02d59127ab8c5da1d6c96db1364baeaf node-v4.8.5-linux-x64.tar.gz
3232b4576c33e0f9c555b6f2cf7571e89bf34b058b5c8154acf9de5109fc7e4e node-v4.8.5-linux-x64.tar.xz
472e257f7ca5868902ee0670e90e86a59655074cba848b87cd9787052c106552 node-v4.8.5-linux-x86.tar.gz
f6392b06f1abbbbaebbc67b8815b719ea7a23e5d09d448b9d741e21084b4a95d node-v4.8.5-linux-x86.tar.xz
19fdf0f9b070ebc9a72189c97546fabd50c0b29da50415e69f4bc6a47a3cf8db node-v4.8.5.pkg
27dff44f867312e05db0e920fa42bcfbf8dd88173713458a605d86ed7de726e3 node-v4.8.5-sunos-x64.tar.gz
db2d17078e9706ac3970fe4de90a3123752b994243a1a6bf5073ed4003f313fa node-v4.8.5-sunos-x64.tar.xz
11eca9ca85e042d776af869548a814bbd4deaf58c708ee502aec879d5b808f5a node-v4.8.5-sunos-x86.tar.gz
0060848babf558feb6819130446e0f98b4c541b58a5eed225f26f652d297588e node-v4.8.5-sunos-x86.tar.xz
23980b1d31c6b0e05eff2102ffa0059a6f7a93e27e5288eb5551b9b003ec0c07 node-v4.8.5.tar.gz
a48aeefc2b4fae0ea6410a8045ca106af244223012eab003bd5cb00aa3b50d53 node-v4.8.5.tar.xz
337457be3625a4a14acef74ce5de3747ad26c9c522f1b03c1fd0b33108612a18 node-v4.8.5-win-x64.7z
d891947117e244f6994ddac899884965b3a8c83ce8e79e3768c299a152204ce3 node-v4.8.5-win-x64.zip
c62eae06928a9e30560002128605adfc21132aab9088f5417721603d4eebdb45 node-v4.8.5-win-x86.7z
e912b9ca0c3d09dd16f8d8d916fba6b6db8f0467c2241b9cf5f17ded94a26afe node-v4.8.5-win-x86.zip
e116d48230e8f546ac4f8e7b9f33262319765555ef70fad755bb0b4fa3de9d64 node-v4.8.5-x64.msi
28ebefc83293be6e2c18e75eea30103cc23e43f375e4577baf8a7b16ef599470 node-v4.8.5-x86.msi
13c81c59ca4c29d7b071b0e11bebb611f34a31d7ba888e342ddf0dd360659a7c win-x64/node.exe
6769b66a08f4cde3e7d8d949e3e5973eec79fd5efb6ec6e9518dfa4605115543 win-x64/node.lib
ef91c423d4ba6e6f82251aeb70ae14559e49d2a2ee12d9fd71a96b4d917b804d win-x64/node_pdb.7z
3d9f5e915a916d1846abd17ba85b991bc4ce0bccd8f4374b986a1149ca91674d win-x64/node_pdb.zip
6450207c73f5813fe22fbb88d6315513ca99afabf055612cbee8ba6e0aa9303b win-x86/node.exe
9d61f8ebd06acabfc7d1a04ed59376ed099b87499bfb31fd920ac4639ff88fe6 win-x86/node.lib
1f5914c7479135584bdc9d1ca38a2d7d1d9a490ae4935e854eec432e0dbed797 win-x86/node_pdb.7z
9a5b77b3b1a10bf43867064936f2262baa02b1a6957b92961fa6bcfcb4229d60 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDv/hvO/ZyE49CYFSkzsB9AtcqUYFAlnvuAEACgkQkzsB9Atc
qUaHNAf/fTLWldJXVl06N6J2XoMW9KpYYNwEiZRftPBD51v3WWJmAhDU7+55QNXM
cNW+BgBdJ01C5GQJPBF0zkWsjwDvBT1Kpq08fjdoe9GuSlTpbuvBtnkVCtxxLQix
BKQMA86BYeYhYFYPX6GEvtfXbucpAg+ER1LlsuHU8gapVuF/bMxBvu+6jZ4IAZCi
oI+/fbIQVg1AG29u5Wp8eN/l9ouKWchtJBf0/Y4hH46NlOimtra3MUtx9cn6JvAg
criPkgI4twM/2Xz3FZgnkhpN5Ne7eyJy54GmlCIZZZsz+7+r29PcqU18HZH1LRhj
a9oCT1GeqsoyRN60x3K5K28HYYYtQA==
=HJ5I
-----END PGP SIGNATURE-----

Node v8.7.0(현재 버전)

주요 변경사항

  • deps:
    • npm을 5.4.2로 업데이트 했습니다. #15600
    • libuv를 1.15.0으로 업그레이드 했습니다. #15745
    • V8을 6.1.534.42로 업데이트 했습니다. 15393
  • dgram:
    • dgram이 소켓의 버퍼 크기를 설정하도록 지원합니다. #13623
  • fs:
    • 파일 열기 상수 O_DSYNC를 지원합니다. #15451
  • util:
    • 커스텀 검사에 사용하던 obj.inspect가 폐기 예정이 되었습니다. #15631
  • tools, build:
    • 더 좋은 macOS 인스톨러로 변경했습니다. #15179
  • 새로운 협력자

Commits

  • [16bdbb9e76] - async_hooks: fix reference in code comment (Brian White) #15748
  • [1bc0c1fb5f] - async_hooks: consistent internal naming (Andreas Madsen) #15569
  • [9da8346c96] - async_wrap: allow user to pass execution_async_id (Trevor Norris) #14208
  • [09b3faef40] - async_wrap: add constructor for PromiseWrap (Trevor Norris) #14208
  • [67cef9b182] - build: allow build with system python 3 (Emily Marigold Klassen) #16058
  • [3d2481e6cb] - build: call setlocal in vcbuild.bat (Daniel Bevenius) #15754
  • [ed8c89a07d] - build: fix shared installing target (Yorkie Liu) #15148
  • [7dd0ca40e2] - build: run es-module tests in CI (Benjamin Coe) #15276
  • [81515c7b62] - build: add test-with-async-hooks (Trevor Norris) #14208
  • [1ed0c7706f] - crypto: better crypto error messages (Greg Alexander) #15518
  • [be4e809af2] - crypto: use X509V3_EXT_d2i (David Benjamin) #15348
  • [93d5ead37a] - crypto: use SSL_SESSION_get_id (David Benjamin) #15348
  • [9eeaab4ba5] - crypto: only try to set FIPS mode if different (Gibson Fahnestock) #12210
  • [77bdfc96ae] - deps: upgrade libuv to 1.15.0 (cjihrig) #15745
  • [c17ff62376] - deps: cherry-pick f4a2b7f3 from V8 upstream. (Erin Spiceland) #16053
  • [1c0ae10c26] - deps: V8: cherry-pick 163d360 from upstream (Ali Ijaz Sheikh) #15664
  • [3f2ea53043] - deps: update npm to 5.4.2 (Michaël Zasso)
  • [6a019183c6] - deps: cherry-pick 0353a1e from upstream V8 (Michaël Zasso) #15599
  • [97c0880052] - deps: update V8 to 6.1.534.42 (Michaël Zasso) #15521
  • [b4ad15be5f] - deps: cherry-pick 9b21865822243 from V8 upstream (Anna Henningsen) #15391
  • [e1828eb50d] - deps: cherry-pick b6158eb6befae from V8 upstream (Anna Henningsen) #15391
  • [aa1a3ea998] - (SEMVER-MINOR) deps: revert ABI breaking changes in V8 6.1 (Anna Henningsen) #15393
  • [847174759d] - deps: patch V8 to 6.1.534.38 (Myles Borins) #15431
  • [c0b5b09381] - (SEMVER-MINOR) deps: add postmortem metadata for V8 TurboFan (Michaël Zasso) #14730
  • [9934dfeb5e] - deps: cherry-pick 1aead19 from upstream V8 (Ben Noordhuis) #15184
  • [273822f756] - deps: cherry-pick e020aae394 from V8 upstream (Ben Noordhuis) #14913
  • [d85283b76b] - deps: backport f9c4b7a from upstream V8 (Matt Loring) #14001
  • [19a5021ee3] - deps: backport bca8409 from upstream V8 (Matt Loring) #14001
  • [2601a515f9] - deps: backport 6e9e2e5 from upstream V8 (Matt Loring) #14001
  • [ede9d2ed8e] - (SEMVER-MINOR) deps: cherry-pick f19b889 from upstream V8 (Michaël Zasso) #14730
  • [63ebad5a04] - (SEMVER-MINOR) deps: fix addons compilation with VS2013 (Bartosz Sosnowski) #13263
  • [21004dda00] - deps: limit regress/regress-crbug-514081 v8 test (Michael Dawson) #6678
  • [d67fb8188f] - (SEMVER-MINOR) deps: update V8 to 6.1.534.36 (Michaël Zasso) #15393
  • [827f843dfa] - dgram: refactor SO_RCVBUF and SO_SNDBUF methods (cjihrig) #15483
  • [e3658143e5] - (SEMVER-MINOR) dgram: support for setting socket buffer size (Damien O'Reilly) #13623
  • [bae46dc806] - doc: add kfarnung to collaborators (Kyle Farnung) #16108
  • [d1266a3c57] - doc: mention collaboration summit in onboarding.md (Joyee Cheung) #16079
  • [140c98b327] - doc: document the benchmark CI (Joyee Cheung) #16086
  • [66a2c710f2] - doc: fix macosx-firewall suggestion BUILDING (suraiyah) #15829
  • [44719ed74d] - doc: add clearer setup description (Emily Platzer) #15962
  • [9f6d535b87] - doc: update style guide for markdown extension (Rich Trott) #15786
  • [acd4924448] - doc: fix http2 API docs typos (Daniela Borges Matos de Carvalho) #15778
  • [74755415cc] - doc: fix: correctly use public key instead of private key (Pavel Pomerantsev) #16038
  • [0ae84c2434] - doc: fix incorrect vm.createContext usage (tshemsedinov) #16059
  • [344d6132ee] - doc: fix YAML syntax in fs.md (Luigi Pinca) #15769
  • [df1d988270] - doc: explain common.restore* functions (Rich Trott) #15720
  • [dcad2df78b] - doc: fix typo in tls.md (kohta ito) #15738
  • [979e38b13c] - doc: add 'git clean -xfd' to backport guide (Lance Ball) #15715
  • [978f78ef01] - doc: alphabetize TSC Emeriti in README.md (Rich Trott) #15722
  • [54a43a6d38] - doc: change encoding to decoding (Sakthipriyan Vairamani (thefourtheye)) #15706
  • [cf579eae25] - doc: fix dead link in doc/releases.md (Luigi Pinca) #15733
  • [fcea265421] - doc: fix v8.6 changelog entry (Ruben Bridgewater) #15716
  • [5630c8cd5d] - doc: add missing TOC entry in CONTRIBUTING.md (Vse Mozhet Byt) #15729
  • [db0ba97bec] - doc: update fs.utimes{,Sync} changelog (Luigi Pinca) #15680
  • [cc902832e2] - doc: edit COLLABORATORS_GUIDE.md for readability (Rich Trott) #15629
  • [f8e93e888e] - doc: fix links in some intra-repository docs (Vse Mozhet Byt) #15675
  • [9c247c56ab] - doc: standardize function param/object prop style (Gibson Fahnestock) #13769
  • [e5b5a03e00] - doc: do not begin yaml value with backtick (Jon Moss) #15447
  • [f8805c4465] - doc: fix link in the test/README.md (Rimas Misevičius) #15642
  • [1141e930a3] - doc: update libuv license (Timothy Gu) #15649
  • [db70874c8f] - doc: add bmeurer to collaborators (Benedikt Meurer) #15677
  • [ec56cbe572] - doc: improve fs.utimes (Refael Ackermann) #14154
  • [6565ddabd0] - doc: add callback function signatures in fs.md (Matej Krajčovič) #13424
  • [22b2d1a786] - doc: fix mistake in http2stream.respondWithFile. (Antoine AMARA) #15501
  • [d1d2ca5bef] - doc: retire bnoordhuis from the TSC (Ben Noordhuis) #15626
  • [e0a76347d4] - doc: update table of contents for common/README.md (Rich Trott) #15595
  • [6003afcc71] - doc,test: minor improvements to O_DSYNC (Tobias Nießen) #15547
  • [a814a551f3] - (SEMVER-MINOR) fs: add O_DSYNC (Jussi Räsänen) #15451
  • [9c1e48dca5] - http: client keep-alive for UNIX domain sockets (Bryan English) #13214
  • [10622c6331] - http2: near full http1 compatibility, add tests (Anatoli Papirovski) #15702
  • [86dfcc609c] - http2: making sending to the socket more efficient (James M Snell) #15693
  • [68cd233a7b] - http2: eliminate dead code (James M Snell) #15693
  • [078ee27f13] - http2: refactor method arguments to avoid bools (James M Snell) #15693
  • [86ee05d5ca] - http2: simplify TypeName (James M Snell) #15693
  • [df271f4f00] - http2: setting shuttingDown=true after validation (Trivikram Kamat) #15676
  • [a4a5bee933] - http2: adjust error emit in core, add tests (Anatoli Papirovski) #15586
  • [5f469a26f3] - n-api: add check for large strings (Michael Dawson) #15611
  • [de52eb8680] - perf_hooks: remove docs for unimplemented API (Sam Roberts) #15641
  • [e4c461ba7d] - src: replace manual memory mgmt with std::string (Ben Noordhuis) #15782
  • [6642f54184] - src: fix ^ in stack trace with vm's columnOffset (Timothy Gu) #15771
  • [824b8dfe9e] - src: remove unused node_dtrace.h from node_win32 (Daniel Bevenius) #15768
  • [0004214ea7] - src: trace_event macro line continuation cleanup (Daniel Bevenius) #15750
  • [15063844cb] - src: fix windows-only build breakage (Ben Noordhuis) #15724
  • [965efd7b47] - src: remove unused includes in src/tracing (Daniel Bevenius) #15682
  • [64d0c7422d] - src: use UV_EINVAL instead of EINVAL in udp_wrap (Daniel Bevenius) #15444
  • [6551bb3ace] - src: fix compiler warning in udp_wrap.cc (Daniel Bevenius) #15402
  • [7e1003aad3] - src: remove unused using in node_trace_writer.h (Daniel Bevenius) #15646
  • [25fd85df36] - src: add help for NODE_PENDING_DEPRECATION env (Thomas Corbière) #15609
  • [ca02576fb4] - src: fix typo in probe description (Evan Lucas) #15397
  • [69f8738a59] - src: remove unused variable in node_url.cc (cjihrig) #15592
  • [9fcf5d7f25] - src: remove unused computation (cjihrig) #15593
  • [44ea5254f3] - src: clear async id stack if bootstrap throws (Trevor Norris) #15553
  • [67205391b3] - src: move node_trace_writer/buffer.h to agent.cc (Daniel Bevenius) #15598
  • [fd1a8924fd] - src: constify PerformanceEntry data members (Ben Noordhuis) #15458
  • [e72761a27f] - src: return references from getters, not copies (Ben Noordhuis) #15458
  • [aded597c10] - src: handle uv_async_init() failure (Ben Noordhuis) #15458
  • [d202c05f7e] - src: remove unused static variable (Ben Noordhuis) #15458
  • [902feeaad8] - src: use InstantiateModule instead of deprecated (Daniel Bevenius) #15423
  • [e8da556eca] - src: keep track of env properly in node_perf.cc (Anna Henningsen) #15391
  • [2e8652e164] - (SEMVER-MINOR) src: fix SmartOS compilation (Michaël Zasso) #14730
  • [a43f681c20] - src,etw: fix event 9 on 64 bit Windows (João Reis) #15563
  • [ae91ffe53c] - stream: fix disparity between buffer and the count (jlvivero) #15661
  • [3d6390b32b] - stream: fix todo (Ruben Bridgewater) #15667
  • [6f42b680e3] - test: replace common.fixturesDir w/ fixtures.path (Druotic) #15819
  • [b1e6373dcc] - test: replaces fixturesDir with fixtures (Alireza Alidousti) #15838
  • [50cae5c44f] - test: remove assert message (Joe Henry)
  • [e48c8b3b6c] - test: replace fixtureDir with fixtures.path (matthewreed26) #15943
  • [572492a088] - test: clarify assert messages in crypto tests (cpandrews8) #16019
  • [d962ee35de] - test: use common.fixtures module for file path (Adil L) #16017
  • [8f367bb1a6] - test: fix race condition in addon test (Kinnan Kwok) #16037
  • [5d63c1033d] - test: create benchmark test for misc and module (Charles T Wall III) #16044
  • [e9f6a624db] - test: include expected result in error messages (Chowdhurian) #16039
  • [f8496553df] - test: use fixtures module (Maurice Hayward) #16034
  • [e4f0483fb9] - test: replace fixturesDir with fixtures module (tabulatedreams) #16036
  • [387b0b8b10] - test: replace concat with template literals (gitHubTracey) #15885
  • [6e25b081b6] - test: clarify assertion failure (ryshep111) #15889
  • [6a44442b5f] - test: use fixtures.readKey (Robin Lungwitz) #15892
  • [f7ab12685e] - test: replace fixturesDir with fixtures module (Ivan Etchart) #15893
  • [36a0d3f0b1] - test: cleanup test-buffer-sharedarraybuffer (Rafal Leszczynski) #15896
  • [bbbf58e951] - test: change fixturesDir to fixtures.path (Savio Lucena) #15902
  • [dba620b178] - test: changed fixtures require (creisle) #15899
  • [ccecaca056] - test: replaced fixturesDir with fixtures module (Alex McKenzie) #15908
  • [547c284335] - test: replace string concatenation with templates (Colin Leong) #15903
  • [a625d82c78] - test: updated error message (Emily Platzer) #15906
  • [3b682aa857] - test: assert.strictEqual using template literals (jmcgui05) #15944
  • [329d22fb32] - test: use common.fixtures in tls test (Ben Michel) #15965
  • [9f9bd38aa0] - test: replace error msg w/ template literal (Sushil Tailor) #15910
  • [181d4bf5b3] - test: add NODE_UNIQUE_ID value to err message (Daniele Lisi) #15914
  • [2d25a3b5f8] - test: replace string concatenation with template (Rob Paton) #15915
  • [802f99ba27] - test: change concatenation to template literal (nodexpertsdev) #15916
  • [c5c51ebae4] - test: improve asset msg in test (Gene Wu) #15918
  • [f201edc4be] - test: replace fixturesDir with fixtures module (penDerGraft) #15919
  • [906f2b14ca] - test: remove message from asserts (Justin Lee) #15920
  • [a14b447bbb] - test: improve an error message (Pavel Pomerantsev) #15921
  • [27e0532eab] - test: added string_decoder.js a parallel test (Uttam Pawar) #15923
  • [2ea339a346] - test: use fixtures module instead of common (Joe Grace) #15925
  • [5bfc4f5e5a] - test: replace fixtureDir with fixtures module (Charlie Duong) #15823
  • [7d8a808959] - test: replaced fixturesDir with fixtures module (Alex McKenzie) #15881
  • [d3272c487a] - test: use common.fixtures module (Christopher Choi) #15891
  • [e7c55bf77d] - test: replaced literals in errors with templates (Paul Milham) #15911
  • [205927fe6b] - test: display better error message for assertion (Russell Dempsey) #15883
  • [768060d5e7] - test: changed buffer-zero output (heeeunkimmm) #15926
  • [0286da0992] - test: replaced fixturesDir with fixtures module (Alex McKenzie) #15927
  • [84dd5783c6] - test: remove literal error messages (Faisal Yaqoob) #15928
  • [633772a90c] - test: refactor test to use the fixtures module (Daniel Kostro) #15934
  • [dd23140015] - test: replace fixturesDir with fixtures module (Greg Matthews) #15932
  • [5b29e5a1f3] - test: modify test messages to template literals (Alice Tsui) #15931
  • [7df8e0b0db] - test: replace common.fixturesDir with fixture (BradLarson) #15940
  • [26536e46ed] - test: changes to use template literal (joanne-jjb) #15937
  • [e12dc40c2f] - test: replace fixturesDir with fixtures (Mujtaba Al-Tameemi) #15949
  • [30631528e4] - test: remove common.fixturesDir (Luis Del Águila) #15950
  • [9059b09a34] - test: remove template literal (Emily Ford) #15953
  • [ba9aa46b6d] - test: removed string from assert message arg (dpaulino) #15954
  • [3fd4f62f35] - test: replace literal with template string (Brant Barger) #15957
  • [a224760639] - test: upgrade from fixturesDir to fixtures.path (jacjam) #15960
  • [b564fe2231] - test: use defaultHistoryPath instead of path.join (Chris Budy) #15969
  • [ece6cd1f9e] - test: replace fixturesDir with fixtures module (BinarySo1o) #15961
  • [d1bb608b45] - test: replaced fixturesDir with common.fixtures (jopann) #15971
  • [adceca44b2] - test: improve assert messages (Eric Pemberton) #15972
  • [ab046beeeb] - test: replacing assert message with template (Barry Tam) #15974
  • [75ab6c00a9] - test: use common.fixtures module in test-preload (Laura Cabrera) #15975
  • [530b62fc0d] - test: more informative test failure messages (Alec Ferguson) #15977
  • [4a9e3312fd] - test: alter assert.strictEqual to default message (Luke Greenleaf) #15978
  • [e9d31bc6e4] - test: replaced common.fixturesDir with readKey (Sean Cox) #15933
  • [054f8f6683] - test: replace fixturesDir in tls-env-bad-extra-ca (Annie Weng) #15813
  • [d410f74e23] - test: use common.fixtures in checkServerIdentity (Emily Marigold Klassen) #15951
  • [145d1db923] - test: replaced common.fixturesDir with readKey (rhalldearn) #15952
  • [9592a486e0] - test: use fixtures.path for cmd string building (John Miller) #15982
  • [4594315eae] - test: replace fixturesDir with fixtures.readKey (Thomas Schorn) #15948
  • [73231d95af] - test: replace common.fixturesDir with readKey (ashleyraymaceli) #15946
  • [73a41cf653] - test: replace common.fixturesDir with fixtures. (Sam Skjonsberg) #15802
  • [de198a9dc0] - test: update test to use fixtures module (gbugaisky) #15955
  • [7ca02b0f0c] - test: replace fixturesDir with common.fixtures (rachelnicole) #16051
  • [1d7e1c0f18] - test: remove messages in assert.strictEqual (Saeed H) #16014
  • [8ea96488bc] - test: update fixturesDir to fixtures.readKey (bitandbang) #16016
  • [b766d27197] - test: replace fixturesDir with common.fixtures (Paul Berry) #15973
  • [c47ebe20dd] - test: replace fixturesDir with common.fixtures (Pooya Paridel) #15837
  • [516fda6c64] - test: update 'fixturesDir' refs in a test file (James M. Greene) #15824
  • [e1a1d2e13d] - test: replace common.fixturesDir in test-exception (Chowdhurian) #15964
  • [47169216d8] - test: use fixtures.readKey in https-agent test (Greg Byram) #15913
  • [f39c7926cf] - test: http2 client destroy tests in one file (Trivikram Kamat) #15749
  • [21a8a820a3] - test: add common.fixtures to https-req-split (Bruce Fletcher) #15801
  • [bd49ada52a] - test: http2 stored settings returned when present (Trivikram Kamat) #15751
  • [1e79a06ac6] - test: fix flaky async-hooks/test-tlswrap (Rich Trott) #15744
  • [22ea3a8cd2] - test: remove common.PORT from test-tlswrap (Rich Trott) #15742
  • [3f1210992c] - test: refactor test-internal-errors (Rich Trott) #15721
  • [995948a1f9] - test: skip test if host is too slow (Rich Trott) #15688
  • [af304b21c7] - test: mark test-bindings and test-debug-end flaky (João Reis) #15747
  • [1582260067] - test: increase test coverage for os.js (kuroljov) #14098
  • [88f69d3ec3] - test: check that this != new.target in addon (Ben Noordhuis) #15681
  • [7842f63069] - test: Http2Stream destroy server before shutdown (Trivikram Kamat) #15597
  • [41539381fe] - test: http2Stream redundant shutdown and single cb (Trivikram Kamat) #15612
  • [803d5bbf50] - test: update es-module.status prefix (Jack Horton) #15690
  • [bd7b216936] - test: fix test-https-writable-true-after-close (Rich Trott) #15705
  • [0aea258f0e] - test: fix http-writable-true-after-close flakyness (Matteo Collina) #15520
  • [bbdd93f34f] - test: skip test when checking async_hooks (Trevor Norris) #14208
  • [98fc665940] - test: print resource stack on error (Trevor Norris) #14208
  • [ab7448e0d5] - tools: replace concatenation with string templates (Ethan Arrowood) #15858
  • [0e707f3f9e] - tools: replace concat with template literals (Minya Liang) #16046
  • [ca5f4f0ed3] - tools: use more template literals (Govee91) #15942
  • [94c6296d83] - tools: use template literals (Sarah Meyer) #15956
  • [eebb2d775a] - (SEMVER-MINOR) tools, build: refactor macOS installer (JP Wesselink) #15179
  • [f68f572d7f] - tty: require readline at top of file (Bryan English) #15647
  • [d181147b2c] - url: const-ify APIs, and pass URL by ref (Sam Roberts) #15615
  • [1cc4245bfb] - url: fix remaining calculation (Rimas Misevičius) #15637
  • [34b4180d7d] - url: change variable name to be more descriptive (Yang-Kichang) #15551
  • [58c68c2fcb] - util: use faster -0 check (Brian White) #15726
  • [d2e1545406] - (SEMVER-MINOR) util: deprecate obj.inspect for custom inspection (Rich Trott) #15631

Windows 32-bit Installer: https://nodejs.org/dist/v8.7.0/node-v8.7.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.7.0/node-v8.7.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.7.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.7.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.7.0/node-v8.7.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.7.0/node-v8.7.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.7.0/node-v8.7.0.tar.gz
Other release files: https://nodejs.org/dist/v8.7.0/
Documentation: https://nodejs.org/docs/v8.7.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b5b39887d41c12c5dbecddb9f7c9a40887776bcd7bee598ce1f5a6fd2373e542 node-v8.7.0-aix-ppc64.tar.gz
5e59798c1deafd671a35ef4dcdb9b97ce98f9255a056832dc98d454613e9ea08 node-v8.7.0-darwin-x64.tar.gz
ce5a8bf996816086c404315d928057b3807fc1d8133ece9758b3bef674adfeeb node-v8.7.0-darwin-x64.tar.xz
d2316d757cae4ee1ffc2955946016f4b35442a516b196645135bc8797947845b node-v8.7.0-headers.tar.gz
5929caeabaa1839dae56dd9d1d39f0358f6173cdd4b6b213d09d0d20b8a3c423 node-v8.7.0-headers.tar.xz
e60bd4b3082e2f75d16bd23654f21e2c4652e180273d7e9c836528c26dee2e40 node-v8.7.0-linux-arm64.tar.gz
5a1a1907fbb6d90667ce70ad42602534f6cc6eda873d1c50a3259349aee73418 node-v8.7.0-linux-arm64.tar.xz
5ed53588bd30365ee9929cafeffb02143e4569997835d90b2d66084bccbf746b node-v8.7.0-linux-armv6l.tar.gz
4fd3121fd3fa4d32a1a128fec9bd731d9ffd3bd3585cd022782e39afece6dc8c node-v8.7.0-linux-armv6l.tar.xz
3cb2447cec4910faeccf0762e9429d595fd3b0dd029051dc850244875d959faf node-v8.7.0-linux-armv7l.tar.gz
66244596d066e651799476a25e39530f078cf95c542d6743d8e2ba3bd7f60c12 node-v8.7.0-linux-armv7l.tar.xz
fdd3d6befe817f549c58b392f4fd858c75576f5ae9184a16e278a38128b0fa0d node-v8.7.0-linux-ppc64le.tar.gz
04eb4200bd0ee9e4cc45b69adbb3ae91a8ba9cfaa0b4536257a08ffe4ec38610 node-v8.7.0-linux-ppc64le.tar.xz
327ec3ff9e99ad37450385166eead9737f7cad0d5aaa0ea700bb447a4613ead9 node-v8.7.0-linux-ppc64.tar.gz
f138da2337ac342c48f3278d62f24a2f7658d9ce2e7a3ac54fd0952dda842c8c node-v8.7.0-linux-ppc64.tar.xz
f740079422834e0bbc799ff31701b049d2f91f5b2e6ae52d81f0375ddeea5a4d node-v8.7.0-linux-s390x.tar.gz
a8569f4293467da1b2b0cadb71cc256e84359dbcba194469d8fc0215c902b5d9 node-v8.7.0-linux-s390x.tar.xz
115c7bd133170fd7a1bf408b2e293021e4b5a80a66a4962829ce5d362ce43762 node-v8.7.0-linux-x64.tar.gz
9d6f649576cac74ef0b6634af8265156370cf8fdf3676f03e867347d3207675d node-v8.7.0-linux-x64.tar.xz
939d88df6f179050fcf93d417d2c094195eede60cae43897fe713e624d33b486 node-v8.7.0-linux-x86.tar.gz
c991f434d084cd16a2e29b627eb5bd4f7f7a222d341c8050582d3ef47ae83d85 node-v8.7.0-linux-x86.tar.xz
f99883b98ef6f8947c2e29588da3fde98159262bb57d75a97eae4d0fdcbb6f79 node-v8.7.0.pkg
89498bedfc289b2910d09c8b31136662cd9e7d939fddd4c0e3487b8c210faba8 node-v8.7.0-sunos-x64.tar.gz
8cecd63816e529e660b7b9178d3a273748208804e60a99887d3d0ac0534faed9 node-v8.7.0-sunos-x64.tar.xz
a476c66dfd1f9ef9379db79a85bc11ce8e1db35c32e6339c049a3f9005b25c9d node-v8.7.0-sunos-x86.tar.gz
e356d4e4d293dcd7df14bfdec1314936cbf3d71174c9180b565e24c66f669969 node-v8.7.0-sunos-x86.tar.xz
c7184526e5504fa2a91aff1aacd7c344451da539d73775b6d9ea8efe948d0fa8 node-v8.7.0.tar.gz
5a17d08c68ee7c1e748fd32534edda766cb57c13ed98e693f3075bc9d9a0b59a node-v8.7.0.tar.xz
27a5a69c7ffae89a3846b778f970643cc53e45e53e16801921aa4ea69e924695 node-v8.7.0-win-x64.7z
e95be435674e82ea7133c3268cb70044eabde2d0aef28b2a3df5c7d8d23cadcc node-v8.7.0-win-x64.zip
f0bd40e04415750b1289403a37eb15d86da77e99132fe6a7c637c4c620c41ef1 node-v8.7.0-win-x86.7z
859fcf71a50eac7f8a00d4357725a2d0de01a7bbd7835eafa634051a5627f5a7 node-v8.7.0-win-x86.zip
ffd191fbdedb14d2f81e5259e63354ef191cfe845f817004b75a335c4ac54acc node-v8.7.0-x64.msi
451540e5b9926b059c3a38115fba9e1112cb040866188fb3fa10b40504dae782 node-v8.7.0-x86.msi
520dfde7f107af367dab5a0239c07c46daeff8939f06cc6e5edc5661e4112035 win-x64/node.exe
e9a9079efe223ad9fe6582c81cd3593b820684812aedd65050026830da6b3129 win-x64/node.lib
7ca6b4688e051ea7a80989db29ec7327783f19ebc55e826e4d9eabf000378dfa win-x64/node_pdb.7z
ad4c5de3c7d1db4a99eca98729d9fbfc40a5cee4e253beb85033a326f4ab5a01 win-x64/node_pdb.zip
eb7589079591e8c4ca660b8cdbefc4b341be38cd538416c768a08d55e8df0e6b win-x86/node.exe
d72cb4137048edf243c1fa971578a698c3ecbf69768efd3aaa4ef30e9be8cffc win-x86/node.lib
e8b6b4291ac0873d40c9828b59f29e567166de9c5854b935311483e5692fe2a2 win-x86/node_pdb.7z
66db1f5de94850c8ca8f353f95238cb7742f6e567fefd579bc827a2a6c36d403 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDv/hvO/ZyE49CYFSkzsB9AtcqUYFAlnehCcACgkQkzsB9Atc
qUbEZgf8CZen4tw35vvse6ViobPeaT8N1OMPlBA3u9PPk/wKwOBxpKB8YlxkzLDm
5hi0hIdzfw7IXGIIjq8Rl67rBcF2dCF960sxWxbqCUpyIPcsO2pOWurhXvGvJc+J
730+ixLA3hARDQxLH8ccAp/LY5DhXD2qmtkikwRuTteuYHEaHcIhtDF5lvfjH5Ud
LCnVM9WeB1B+/XrrDULzpJYDQoQszymiq30GyUZ84hD0H3qcBpFGv7WxneWHULKn
UazjWzNMCqq671dEjKc+csPES1PNb3cw504sZuzRo2PFc3nS1Ngz+cyCZC3G/Urh
Lwz952H6uhxEexQcyL/ggdwfLHrn/Q==
=jfal
-----END PGP SIGNATURE-----

Node v6.11.4(LTS)

주요 변경사항

  • net:
    • v4.x, v8.x와 같은 동작을 하도록 listen()에 undefined를 전달할 수 있게 했습니다. (Sam Roberts) #14234

Commits

Windows 32-bit Installer: https://nodejs.org/dist/v6.11.4/node-v6.11.4-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.11.4/node-v6.11.4-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.11.4/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.11.4/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v6.11.4/node-v6.11.4.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.11.4/node-v6.11.4-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.11.4/node-v6.11.4.tar.gz
Other release files: https://nodejs.org/dist/v6.11.4/
Documentation: https://nodejs.org/docs/v6.11.4/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

1a7c75efe627e63abfb2d663a379b39aea1ce367bcb5d02d315726c96af72d04 node-v6.11.4-aix-ppc64.tar.gz
02d569fd805b8bfa7627c11d90e0876109d19c27e3b5285effe9385b6632728f node-v6.11.4-darwin-x64.tar.gz
1e1dddda3898250afcc4ca928fc294abd4da17fd86910591bbc6deeb3a41dd19 node-v6.11.4-darwin-x64.tar.xz
10a8916ce5de142921c2346595bb8777a4c0a38e15335a5a7f8f88bcfc64954c node-v6.11.4-headers.tar.gz
a232cfcea8a376f3e7fb95e4a7a9da13bf29edbbca286a8976f3fad14eb492b4 node-v6.11.4-headers.tar.xz
a0942b7b2cd0e79c63fc9d5c6ae62863e0752b185769b71c6b54f5313dcb07b1 node-v6.11.4-linux-arm64.tar.gz
f8ab07e3209e07a8ba74e0ad704f91eeddeaf9817a6e599f89928c153231330e node-v6.11.4-linux-arm64.tar.xz
270ac0a770d551460f4841f4c192e697e51660fab967cf721348608729928cb5 node-v6.11.4-linux-armv6l.tar.gz
f6cba5c2d770c036852e875711ec74871a3b5fc11bce27597ae32672f9a5d101 node-v6.11.4-linux-armv6l.tar.xz
00cd026d561783b46380269f1f304c865b369e05108991c16eae1ea21b9412a0 node-v6.11.4-linux-armv7l.tar.gz
35bcad5396e61311ee7feec8eeeeaba7675a1660081a10751c851c831d3a66cb node-v6.11.4-linux-armv7l.tar.xz
109fdfbba8cdd0b4cad0974061a470fc0433e71e1f1a4dc96ff41a0ce56193b5 node-v6.11.4-linux-ppc64le.tar.gz
8d4a2f56a1ab8c7353776a182410a550f586af0d14290c46564f35abaa769049 node-v6.11.4-linux-ppc64le.tar.xz
fa3f9c4513ffe6736cbf2552f8207569347cdf5b4c12b51b6472917e39060a8b node-v6.11.4-linux-ppc64.tar.gz
3fe05cedde62771842b631206d01f7180661fec60293e104ac06c8f103c9c540 node-v6.11.4-linux-ppc64.tar.xz
43a73fd4f4c1c0a2b5b2216cbeebed5640f82284bd2b1678539010ec7271b916 node-v6.11.4-linux-s390x.tar.gz
48031013cf162b10bdc0a1269c21366cef16f609e60919c42052fa8f9af6fd28 node-v6.11.4-linux-s390x.tar.xz
31af453105ab3eaf0f266de083374a98c25e9bdc4c14a7d449e6a97e5814df0f node-v6.11.4-linux-x64.tar.gz
74e125920e141357bab6ded58198c5f5ee98bf638aaff474ffb355ab699d6a26 node-v6.11.4-linux-x64.tar.xz
7d289b722eb2f0210e228c8af521b30686108c67315687a8f942e0d8f7303e94 node-v6.11.4-linux-x86.tar.gz
8d596073472915713c6368776e97b165fabd6e94ee6813128dbc403c066dcc2e node-v6.11.4-linux-x86.tar.xz
22917c22b637b7cafdabf00d099b6c5a3a01bc902a800d1718be5c6128820784 node-v6.11.4.pkg
086c534a4bf1e70e480e78c99c126d1e209fe87d725b5d2ddffcb966ddf64bfa node-v6.11.4-sunos-x64.tar.gz
765db9fc092fce67286ea81faaedbb3918591854b0369723ce4b2a9557d7f16d node-v6.11.4-sunos-x64.tar.xz
87297b7c8bf05d2f8de7b990506de8d0e8238f46be096be9274bab481e505488 node-v6.11.4-sunos-x86.tar.gz
6d0679f854d3e9610a4db813a62e209d7e76516c4e43ce132574b22a1e6464a7 node-v6.11.4-sunos-x86.tar.xz
94557aa1b9adaa71a424eb7efe8877d7e65bda6e496350c4bac5f64ec715bb1c node-v6.11.4.tar.gz
4c2f0435e3088136ac4bc75236a7717f189d590a13f490065e7b3b8e5aacd450 node-v6.11.4.tar.xz
81d3b153a4dcfe25df925d3f7a589121fce1f1523cf67aa8156115968938eb76 node-v6.11.4-win-x64.7z
3542c689e9636d65e6268ee82b2ca549dafc2e0d1553987b42bd93f50b1909ff node-v6.11.4-win-x64.zip
2e4bbc044561c029c73ad07d8cf2b9455fdcf2892797dcb5757a8f8bca4d4f5e node-v6.11.4-win-x86.7z
84601504841f1d4e29f4922321d58a3cdbf6b66233106bf335ad16fe4fc22f89 node-v6.11.4-win-x86.zip
b8f166a77783905385ca1ba9758a025a4ac61eb9c2a14c500be59f09fed66335 node-v6.11.4-x64.msi
703961d99bbf6f01268ef552af4c641649ea38182767015dbb1ec4a09ca07325 node-v6.11.4-x86.msi
a469db1801f6bd8c2848ccbb04b51b0b1df0198101fcd5a82eeedd7a1fe86b9a win-x64/node.exe
8d910f92455961ee8fa956041e0ff6fc98de9af64da45351e1144e9047f03427 win-x64/node.lib
809e26f2ff5d30475b701edc2fd09f1505e88366c7bf548adb0c4bc56e27883b win-x64/node_pdb.7z
b8cd4f68f76f39db21031c65161d5985ceeeead182f548aaf9bd4c7e9f310314 win-x64/node_pdb.zip
858b7c60450d0f554ba5c4a3e1a68707a0ed29ba2e2714e72e2e3e20c18e1f0c win-x86/node.exe
96dbc4725b3ba3a23ed6659992e35ead19a4927750074f78d3d6d0002d3d25de win-x86/node.lib
de8b7a5c237527f221815fdf799210e3b0cd5e22a1c5543293cb931a9c9f33c3 win-x86/node_pdb.7z
1a58c6b9046486a9466e840d61bbbd139231cd519f401493a688025a52020b17 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDv/hvO/ZyE49CYFSkzsB9AtcqUYFAlnT9nMACgkQkzsB9Atc
qUaS+gf+Ih8CFMPVfrfyA3zCo9U0We4kWOrFM0oFJKN7+7yAFOqwGXhCixcK61Vy
OdmwskFzNfuLqP752jRmFu9cQ47JMNkFTAfO1NHv0hroGchNR8l0rlwvk32swk32
o9SJF+6YNZgPJbr/9Z3LXE5FkgpDmnRD6qWvZB2UUNkuJgmNXHZofQkL2A4aNXu2
LhMSd+HN7kQY4dg89oo25BNYZNDoye+ezjdUPHu484IMrroCWyMPNebx7NveNJU5
gyEDbbSd9Ab7VsRn36YjrkdAGn5eU09SJ+F9m4slrKnR0QNz+SPo8cLXkdVra9MB
6y+afE4pVSzcM+DzyeBu3eGyGoAxzQ==
=BnBq
-----END PGP SIGNATURE-----

2017년 9월. 경로 유효성 검사 취약점

경로 유효성 검사 취약점 (2017년 9월 29일 갱신되었습니다. - CVE가 할당되었습니다.)

이번 주에 Node.js 프로젝트는 8.x의 새 버전을 릴리스했습니다. 이 릴리스는 보안 수정사항을 포함합니다.

영향

Node.js 8.5.0 버전은 취약합니다. 4.x와 6.x 버전은 취약하지 않습니다.

다운로드

Node.js 8(현재 버전)

Node.js에 한정된 보안 결함

Node.js 8.5.0 버전에는 일부 커뮤니티 모듈이 만든 경로를 검사할 때 보안 취약점을 만드는 변경사항이 포함되어 있습니다. 그에 따라 의도치 않은 파일 시스템 경로에 공격자가 접근할 수 있었습니다.

이 문제는 https://github.com/nodejs/node/commit/b98e8d995efb426bbdee56ce503017bdcbbc6332를 부분적으로 되돌리면서 Node.js 내에서 해결되었습니다.

CVE는 CVE-2017-14849로 할당되었습니다.

연락처와 차후 업데이트

현재 Node.js 보안 정책은 https://nodejs.org/en/security/에서 볼 수 있습니다.

Node.js의 취약점을 보고하려면 security@nodejs.org로 연락해주세요.

Node.js의 보안 취약점과 보안과 관련된 릴리스의 최신 정보를 얻으려면 https://groups.google.com/forum/#!forum/nodejs-sec에서 소수의 공지만 하는 nodejs-sec 메일링 리스트를 구독해 주세요. 이 프로젝트는 nodejs GitHub 조직에서 관리하고 있습니다.

Node v8.6.0(현재 버전)

주요 변경사항

  • crypto
    • 다수의 ECDH 커브를 지원합니다. #15206
  • dgram
    • setMulticastInterface() API를 추가했습니다. #7855
    • 이제 커스텀 lookup 함수를 지원합니다. #14560
  • n-api
    • 이제 명령행 플래그 없이도 N-API를 사용할 수 있습니다. #14902
  • tls
    • parseCertString()을 문서에서만 폐기예정으로 표시했습니다. #14245
  • 새로운 컨트리뷰터
    • 새로운 컨트리뷰터로 Sebastiaan Deckers(@sebdeckers)를 추가했습니다! #15354

Commits

  • [4f7d9392e7] - assert: improve AssertionError in case of "Errors" (Ruben Bridgewater) #15025
  • [f6c65e6e19] - assert: fix boxed primitives in deepStrictEqual (Ruben Bridgewater) #15050
  • [7fa175f6d3] - assert: fix deepEqual inconsistencies (Ruben Bridgewater) #14491
  • [17d8dfec70] - async_hooks: support promise resolve hook (Anna Henningsen) #15296
  • [81723a9172] - (SEMVER-MINOR) async_hooks,doc: some async_hooks improvements (James M Snell) #15103
  • [535f8d5281] - benchmark: var to const (Ruben Bridgewater) #13757
  • [0f8f37ed45] - benchmark: improve and add more inspect benchmarks (Ruben Bridgewater) #14881
  • [3bf718c3fe] - benchmark: enable assert benchmark with short len (Rich Trott) #15174
  • [d30a5836b6] - benchmark: provide default methods for assert (Rich Trott) #15174
  • [142d2ed057] - benchmark: use smaller n value in some http tests (Peter Marshall) #14002
  • [5e4f87ae65] - buffer: improve Buffer.from performance (Anatoli Papirovski) #15178
  • [8bbbda55e4] - build: use generic names for linting tasks (Nikolai Vavilov) #15272
  • [9685b9ff2f] - build: don't fail make test on source tarballs (Gibson Fahnestock) #15441
  • [354f32040d] - build: remove unused configuration variable (Ben Noordhuis) #15266
  • [5d217ad5d7] - build: add support for link-module to vcbuild (Bartosz Sosnowski) #15410
  • [607832d3c3] - child_process: set shell to false in fork() (Alex Gresnel) #15352
  • [c26e93b309] - crypto: fix Node_SignFinal (David Benjamin) #15024
  • [bd07574718] - (SEMVER-MINOR) crypto: support multiple ECDH curves and auto (Roga Pria Sembada) #15206
  • [5e043a6c78] - deps: define BUILDING_NGHTTP2 during nghttp2 build (Ben Noordhuis) #15487
  • [2e75ac028a] - deps: v8: fix potential segfault in profiler (Ali Ijaz Sheikh) #15498
  • [2944ea6c6b] - (SEMVER-MINOR) dgram: add custom lookup function in sockets (cjihrig) #14560
  • [b24ee68133] - (SEMVER-MINOR) dgram: added setMulticastInterface() (Will Young) #7855
  • [f6b484461c] - doc: ctc -> tsc in onboarding extras (Bryan English) #15621
  • [f38666a967] - doc: ctc -> tsc in collab guide (Bryan English) #15590
  • [02c62df75e] - doc: remove invalid hash in link (Vse Mozhet Byt) #15542
  • [6cd64f36bc] - doc: note caveats in process message serialization (Joyee Cheung) #12963
  • [1fbb86c64b] - doc: fix 'aborted' event documentation (Luigi Pinca) #15471
  • [2326d655de] - doc: fix types and description for dns.resolveTxt (Tobias Nießen) #15472
  • [fcbee7b4bb] - doc: fix some links in http2.md (Vse Mozhet Byt) #15481
  • [9d6b0e6f6f] - doc: fix external links with 404 status (Vse Mozhet Byt) #15463
  • [29fd88c3e5] - doc: fix new nits in links (Vse Mozhet Byt) #15449
  • [4efc6fec6b] - doc: fix some internal links (Vse Mozhet Byt) #15293
  • [5ea4b88a29] - doc: adding sebdeckers to collaborators (Sebastiaan Deckers) #15354
  • [d5d498b6dc] - doc: update AUTHORS list (Michaël Zasso) #15181
  • [950f7f5fe1] - doc: update README with SHASUMS256.txt.sig info (Jon Moss) #15107
  • [38422d5963] - doc: fix nits in esm.md (Vse Mozhet Byt) #15315
  • [b0f5b2a38c] - doc: fix "added in" for Buffer.allocUnsafeSlow() (Tuan Anh Tran) #15330
  • [8112f496dc] - doc: add missing heading for error (Jon Moss) #15325
  • [29707afd82] - doc: add missing doc for readable._destroy (Michaël Zasso) #15316
  • [9f4480ce90] - doc: use consistent terminology in process doc (Rich Trott) #15321
  • [a53a0d8b38] - doc: fix emitKeypressEvents stream type (Oblosys) #15399
  • [b5c1a82560] - doc: fix http.ClientRequest method descriptions (Antoine AMARA) #15163
  • [f0e411d1b2] - doc: prevent displaying empty version picker (Chris Young) #15420
  • [acb0d012b3] - doc: make mkdtemp example work on Windows (Bartosz Sosnowski) #15408
  • [bdfed1ad25] - doc: fix entryTypes type and missing link (Mani Maghsoudlou) #15406
  • [7fa2bee5e7] - doc: add documentation for the 'timeout' event (Luigi Pinca) #15443
  • [b09eeb4a3d] - (SEMVER-MINOR) doc, tls: mark parseCertString() as deprecated (XadillaX) #14245
  • [e0f5e3a199] - docs: clarify usage cli options -e,-p on windows (Łukasz Szewczak) #15568
  • [a792ea7709] - docs: update 8.5.0 changelog (Myles Borins) #15384
  • [0a8258b3de] - errors: remove duplicate error definition (Jon Moss)
  • [a14b252c5c] - errors: eliminate circular dependency on assert (James M Snell) #15002
  • [b58a2aae1b] - errors: fix ERR_MODULE_RESOLUTION_LEGACY message (Tobias Nießen) #15290
  • [da3265ad82] - errors: backport ERR_INVALID_PROTOCOL to v8.x (Myles Borins) #15388
  • [2e0313865b] - errors,tools: alphabetize-errors lint rule (Jon Moss) #15083
  • [771c2ac7c2] - http: revert #14024 writable is never set to false (Matteo Collina) #15404
  • [68ec157be0] - http2: fix compat stream read handling, add tests (Anatoli Papirovski) #15503
  • [9fc8eddfdd] - http2: remove unused onTimeout, add timeout tests (Anatoli Papirovski) #15539
  • [1691827b8c] - http2: small fixes to compatibility layer (Anatoli Papirovski) #15473
  • [66a5f99828] - http2: improved coverage of Http2Stream destroy (Simon Brewster) #15461
  • [ba9012d4bc] - http2: add tests for push stream error handling (Anatoli Papirovski) #15281
  • [b61220ed84] - http2: fix subsequent end calls to not throw (Anatoli Papirovski) #15414
  • [2e421ff5c9] - http2: correct behaviour for enablePush unpack (Anatoli Papirovski) #15167
  • [9490be353e] - http2: cleanup of h2 compat layer, add tests (Anatoli Papirovski) #15254
  • [aa0917cd0a] - http2: improve http2 coverage (James M Snell) #15210
  • [a6879bfab6] - http2: custom promisify for http2.connect (James M Snell) #15207
  • [2ea2725ce0] - http2: emit close event if request aborted (Anatoli Papirovski) #15415
  • [b9a9290e8d] - http2: expand list of known headers (Anatoli Papirovski) #15434
  • [a32c8a566e] - http2,async-wrap: introduce AliasedBuffer class (Mike Kaufman) #15077
  • [25692a985c] - inspector: break in eval script (Eugene Ostroukhov) #14581
  • [cf1fe762dc] - lib: improve lazy requires (Ruben Bridgewater) #14167
  • [8ce0e9a619] - lib: refactor console startup (Ruben Bridgewater) #15111
  • [91e96d8f08] - lib,src: fix consistent spacing inside braces (James M Snell) #14162
  • [ede09f29d0] - meta: allow vague objections to be dismissed (James M Snell) #15233
  • [727d7b5078] - meta: improve contributors guide (James M Snell) #15123
  • [c005713d05] - module: check file url passed to top-level import (guybedford) #15389
  • [939c8ed084] - module: coverity fixes for ESM C++ (Bradley Farias) #15275
  • [a95ddc9484] - n-api: fix warning about size_t compare with int (Sampson Gao) #15508
  • [cd3a8e8832] - n-api: remove n-api module loading flag (Gabriel Schulhof) #14902
  • [526e78f5cd] - n-api: add optional string length parameters (Sampson Gao) #15343
  • [87a3162f85] - n-api: Context for custom async operations (Jason Ginchereau) #15189
  • [7b7c030adc] - (SEMVER-MINOR) n-api: change async resource name to napi_value (Jason Ginchereau) #14697
  • [d5b3002572] - n-api: stop creating references to primitives (Gabriel Schulhof) #15289
  • [a47fe692b1] - (SEMVER-MINOR) n-api: use AsyncResource for Work tracking (Anna Henningsen) #14697
  • [8f12b9dce4] - n-api: refactor napi_addon_register_func (Taylor Woll) #15088
  • [a2d340fb00] - n-api: napi_is_construct_call->napi_get_new_target (Sampson Gao) #14698
  • [fe9bb7e51e] - net: support passing null to listen() (cjihrig) #14221
  • [19d2d6611c] - path: fix normalize paths ending with two dots (Michaël Zasso) nodejs-private/node-private#94
  • [8eeaba62bc] - readline: name some anonymous functions (Flandre Scarlet) #14297
  • [4907ae7cb9] - src: correct typo in trace_event header (Daniel Bevenius) #15583
  • [4f88c19cf3] - src: add --pending-deprecation to NODE_OPTIONS (Thomas Corbière) #15494
  • [b87088c0b1] - src: remove unused constant from node_perf.h (Anna Henningsen) #15548
  • [90d14df56d] - src: minor c++ refactors to module_wrap (Anna Henningsen) #15515
  • [24271a7aca] - src: do not include internals from node_buffer.h (Anna Henningsen) #15554
  • [774e42b575] - (SEMVER-MINOR) src: refactor #include handling (Anna Henningsen) #14697
  • [29e38ab2a2] - src: remove unused perf_hooks uv handles (James M Snell) #15368
  • [606da2ba43] - (SEMVER-MINOR) src: make in_makecallback() getter const (Anna Henningsen) #14697
  • [98967c988f] - (SEMVER-MINOR) src: refactor async callback handling (Anna Henningsen) #14697
  • [f60a2aa982] - (SEMVER-MINOR) src: remove virtually unused ExecScope (Anna Henningsen) #14697
  • [6c520af6d5] - (SEMVER-MINOR) src: move DomainEnter,DomainExit to node.cc (Anna Henningsen) #14697
  • [8c480f9d8c] - src: remove outdated todo from node_crypto.cc (Bartek Szczepański) #15104
  • [409576e015] - test: expand http2 util test coverage for headers (Anatoli Papirovski) #15493
  • [0503c44835] - test: update test-fs-fsync to run from temp (atvoicu) #15537
  • [29f0ad6ccb] - test: fixing AliasedBuffer tests to enter Isolate (Mike Kaufman) #15536
  • [eccf503362] - test: improve readline test coverage for tty (Claudio Rodriguez) #12064
  • [58b9495c42] - test: use reserved invalid hostname for tests (icarter09) #14781
  • [b1227147b9] - test: clean up some assert deepEqual tests (Ruben Bridgewater) #14491
  • [93c08b0735] - test: improve util inspect tests (Ruben Bridgewater) #14881
  • [59f183640b] - test: refactor test for readability (Refael Ackermann) #13003
  • [757c34276b] - test: fix actual and expected order (Ruben Bridgewater) #14881
  • [5125c08c50] - test: remove obsolete debugger tests (Rich Trott) #15139
  • [7dfd570cad] - test: add test-benchmark-assert (Rich Trott) #15174
  • [a9066459ad] - test: convert buffer benchmark to runBenchmark (Jon Moss) #15349
  • [45cdbcfee6] - test: create shared runBenchmark function (Jon Moss) #15004
  • [ba96c8f23e] - test: don't skip when common.mustCall() is pending (cjihrig) #15421
  • [50b6203a33] - (SEMVER-MINOR) test: add regression test for 5691 (Anna Henningsen) #14697
  • [f0a741d178] - test: kill subprocess only after last ACK (Refael Ackermann) #15186
  • [4d68064493] - test: move common.PORT tests to sequential (Jon Moss) #15151
  • [a92f3dfd8c] - test: make test-http-agent-maxsockets robust (Rich Trott) #15192
  • [edece30930] - test: remove random timer in test-tls-fast-writing (Rich Trott) #15138
  • [b1a0bdcdaf] - test: remove faulty test case (Ruben Bridgewater) #15110
  • [cd238e2c0e] - test: check inspect array with empty string key (Rahul Mishra) #15258
  • [3ce501c8ff] - test: improve process warning coverage (James M Snell) #15212
  • [a2c335b973] - test: fix sequential/test-async-wrap-getasyncid (Anna Henningsen) #15319
  • [94e2b5c371] - test: refactor test-debug-prompt (Rich Trott) #15141
  • [5881033138] - test: remove invalid test (Rich Trott) #15320
  • [a1abf62cc3] - test: allow adding known-globals through ENV (Refael Ackermann) #15187
  • [427bf80194] - test: add test for fork() + shell (cjihrig) #15352
  • [4d26c68b6b] - test: move test-benchmark-buffer to sequential (Rich Trott) #15373
  • [1fbdf47742] - test: fix flaky test-http2-session-timeout (Anatoli Papirovski) #15338
  • [f20fb4ce40] - test: do not write fixture in test-require-symlink (Rich Trott) #15067
  • [389c8c33d7] - test: expand http2 frameError test case (Anatoli Papirovski) #15298
  • [d82ae0cb6e] - test: backward compatible api for tty (Gergely Nemeth) #15235
  • [e014983ec4] - test,process: run 'abort' suite on Windows (Refael Ackermann) #15056
  • [6a94c1aa3b] - timers: clarify lib/timer.js comment (Daniel Bevenius) #11018
  • [ee157e5a7f] - tls: prefer path over port in connect (Bryan English) #14564
  • [9049f09e0f] - tools: enforce consistent spacing inside braces (Sebastiaan Deckers) #14162
  • [6c221b83e3] - url: fix windows drive letter handling (Benjamin Coe) #15490
  • [fc1448f357] - util: improve format performance (Ruben Bridgewater) #15422
  • [5b47f846b0] - util: fix out of bounds indices in util.inspect (Ruben Bridgewater) #14881
  • [9e8b1b3ec6] - util: refactor inspect for performance and more (Ruben Bridgewater) #14881
  • [539445890b] - util: add fast internal array join method (Ruben Bridgewater) #14881
  • [7d95dc385c] - vm: support parsing a script in a specific context (Timothy Gu) #14888 james@ubuntu:~/node/main$

Windows 32-bit Installer: https://nodejs.org/dist/v8.6.0/node-v8.6.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.6.0/node-v8.6.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.6.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.6.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.6.0/node-v8.6.0.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-ppc64le.tar.xz
Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-ppc64.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-aix-ppc64.tar.gz
SunOS 32-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-sunos-x64.tar.xz
ARMv6 32-bit Binary: Coming soon
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.6.0/node-v8.6.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.6.0/node-v8.6.0.tar.gz
Other release files: https://nodejs.org/dist/v8.6.0/
Documentation: https://nodejs.org/docs/v8.6.0/api/

SHASUMS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

8b7d261caa3b2d4a9dce44703ef84a4e6622bd0206c0a20e0958ca11b731fd15 node-v8.6.0-aix-ppc64.tar.gz
2c95f3194a92e8b37aab8895fbaeb1f5fabef3494600ef78a7b7e078dba9a7c9 node-v8.6.0-darwin-x64.tar.gz
827e5b99a3a11a759ab2733461afdeaa5a70e806ebdfca97e530b1677c0c56f6 node-v8.6.0-darwin-x64.tar.xz
7c180f19dea41a3e96fc3642e8ed49b4b761f11c2083e026a26b7da9b9dee356 node-v8.6.0-headers.tar.gz
8ec5d61ede594b021e330adf8cbb649a523645de65d12899d91d624cf0a8cf0e node-v8.6.0-headers.tar.xz
f5e9ca49e8f8c10f7f583c829191cbfab53216f5b5b6ec158b5eeb749d7079a2 node-v8.6.0-linux-arm64.tar.gz
6848567ab32d04694120e18c20ef47d0f4163229634f236e4bdbb8d135f3204e node-v8.6.0-linux-arm64.tar.xz
f1fec31eb8f026f32e3e639c1c5ffd4b6aea34c3d040c9c129ea76c1f17079eb node-v8.6.0-linux-armv7l.tar.gz
442d39ff4bce3c1eb54d7e13e145cefac9f9fd22a25e7c37289ab19f9e15e258 node-v8.6.0-linux-armv7l.tar.xz
a73e95375d68c44d4517fc01a70307d54a59791dc2d2113fc7902f0a30ef6bb3 node-v8.6.0-linux-ppc64le.tar.gz
5170b4273de00e44fbf76cfdd490c0b117fd7b31b067e6f45da48ee445bedbf9 node-v8.6.0-linux-ppc64le.tar.xz
fc88d7e6cfd1f65197ef40918cc07c56998f60375c51f59447ba3a03f423e92b node-v8.6.0-linux-ppc64.tar.gz
12e87e882d87339ab7bfa3b63343e646bd67e43d280bda1e42e5fe9f1c13a125 node-v8.6.0-linux-ppc64.tar.xz
42697bf1c91a21a5d85ebe9dc80370c0aa6cc309082c3a1eee5e86c2fe2097dc node-v8.6.0-linux-s390x.tar.gz
92ba7e75d57479db855cb6f3b831a9add2651a6a3de9fea585c66acecf2eb571 node-v8.6.0-linux-s390x.tar.xz
86d06a2ae2763cb68b17d77c889fa5d49975c653a85f3c4517bdbecdec165fbb node-v8.6.0-linux-x64.tar.gz
e6f52c3ed7e2cc34ebddbc563434fdf043feb449a60f028101eb45227aec3444 node-v8.6.0-linux-x64.tar.xz
921d8dfe7185f2bc7c454533a1348256928c3be5d014c9799b6a33ec4d19f182 node-v8.6.0-linux-x86.tar.gz
101dad71205f4a380d264c933ae1a297ca7ddec19645d293c99a91fa3165c77b node-v8.6.0-linux-x86.tar.xz
d3850a4b59d336737f7bfaaf0323359cdbdb92e7e8d38e4efb9038ed19e22215 node-v8.6.0.pkg
0f1f6c4844594bcb942724529f74641b69bce317fb6f2ab5a3b2ca3dbf3dd3cc node-v8.6.0-sunos-x64.tar.gz
228c9587a6f9e1ae3454a07c0a370693be5e6e4574b48be3672daf17dfaf83a1 node-v8.6.0-sunos-x64.tar.xz
13a04d0914f0adc1aaf5c057d69e2fa3edd1ec8bbd5aad77830bd5563bd7a06a node-v8.6.0-sunos-x86.tar.gz
81de646c5815604e187cee84192c5139e57c1f22f44259606f816a67bf999789 node-v8.6.0-sunos-x86.tar.xz
80551d47440c602c5825a3f6611e13cb0c57d277234dbff693af433a88351a08 node-v8.6.0.tar.gz
b17071109238295b9f363b768afdff97a9f386203d4f080c91847ce76d4f7e93 node-v8.6.0.tar.xz
ae49bf305ae54c0d09c6b44f28186b87aabb0837bc3dea49b2cdab8d8efb8252 node-v8.6.0-win-x64.7z
08e9b29c47567517ca95ca01d5cdb255279be5463952f92da5c372a99d620b23 node-v8.6.0-win-x64.zip
ac8eb52c18dfe95881d0848dc81b8d196a313013d537de367685902400c6aaf0 node-v8.6.0-win-x86.7z
35ac7e430bd9ba4d31f4153b8f23ed7dfac21ce1cccbb4269c31e8fb9668d2b4 node-v8.6.0-win-x86.zip
ace40c5ecd78183daaaff65134a69eb29de94b5c5d67d81352987d779be752ad node-v8.6.0-x64.msi
070e837683269a57a78af299245f5220d42f81f62cd97304c64aa99176d62090 node-v8.6.0-x86.msi
d8bb731ae41f3f40fa60db13dd7500cc0eef4dc3fd0083d7ec80e9814807a632 win-x64/node.exe
3a538a484ebb2026dee4b6d0fec22b9734d247b574e1ed772fe73de9040c7049 win-x64/node.lib
ce9f3bdf787b850970e451781f3b6d9e9cbca28c08b19473ddb2fb27ef1bc560 win-x64/node_pdb.7z
8b13e30a2ea09b2c6ffa0da853d9a3da7cba3800904a49fbccae4a72317e39e0 win-x64/node_pdb.zip
cbf9e028254c591d18e6c126c311681bab3da886d5491bda0c99a57db3fa5948 win-x86/node.exe
d97ba9e7cf68ce2b0b37bb3fda09bf209f3a163c8874fb7a55775ef4502256cd win-x86/node.lib
c2dbed45dce7f7f6bc99f8edd25a156362ed6ca2550f5296da2c72067def9f16 win-x86/node_pdb.7z
35533b3fc5d7bb9138ffeb3287f81b2e73b6814412cae077e65fa4f3f01c720c win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZys2QAAoJEHNBsVwHCHes8GAH/2a7nYrVCLZibMdBb0HSDB1v
24fOPCQWoeqiqOnQVFZcEZbDoRaKz4sTSTTZFzQhEUZtkzB3DkZwtJxmebrm7jct
3rLCAf3lxXTg2IfEfha+xzWlw2EYo0QMwkUmsRoAmFh4nB6m0cYKw5WPbOr+cIjw
AbdmcSCKcamEw3c7g4wTu5rBFnO95qGmiyth5mlvOP5Gls3BrPLyW8Wzv4zWq5vS
fG4Py32w3aIC7J3oOSxLSLn+DtavRc964bFjqViUnDLfBULR4Y6MFjmjkDAf58gU
HJsGbe2EeiP0Pi5Xh5tjj6C3eXfRwmkarOPupyc9GU6tammNM8YdQLcV0QpZ4Js=
=nPmh
-----END PGP SIGNATURE-----