Node v4.8.4(유지보수 버전)

주요 변경사항

• build:
  • V8 스냅샷 비활성화 - 스냅샷에 포함된 해시 시드는 현재 실행되는 모든 바이너리와 같습니다. 이것은 노드가 서비스 거부(Denial of Service)를 일으킬 수 있는 충돌 공격들에 대해 노출된다는 것을 의미합니다. 그래서 우리는 확실한 해결책이 발견될 때까지 스냅샷을 비활성화 시킬 것입니다. (Ali Ijaz Sheikh)
• deps:
  • CVE-2017-1000381 - NAPTR 응답을 분석하는 데 사용되는 c-ares 함수 ares_parse_naptr_reply()는, 전달된 DNS 응답 패킷이 특정 방식으로 만들어진 경우, 주어진 입력 버퍼의 외부 메모리를 읽을 수 있도록 트리거 될 수 있습니다. 이 패치는 레코드를 처리하기 전에 NAPTR 레코드의 필수 요소(int16의 경우 2Bytes, 문자열 길이의 경우 3Bytes)에 충분한 데이터가 있는지 확인합니다. (David Drysdale)

Commits

• [9d51bdc9d4] - build: disable V8 snapshots (Ali Ijaz Sheikh) nodejs/node-private#84
• [80fe2662e4] - deps: cherry-pick 9478908a49 from cares upstream (David Drysdale) nodejs/node-private#88
• [d6969a717f] - http: use Buffer.from to avoid Buffer(num) call (Сковорода Никита Андреевич) nodejs/node-private#83
• [58a8f150e5] - test: verify hash seed uniqueness (Ali Ijaz Sheikh) nodejs/node-private#84

Windows 32-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v4.8.4/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v4.8.4/win-x64/node.exe

macOS 64-bit Installer: https://nodejs.org/dist/v4.8.4/node-v4.8.4.pkg

macOS 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-darwin-x64.tar.gz

Linux 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-x86.tar.xz

Linux 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-x64.tar.xz

Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-ppc64le.tar.xz

Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-ppc64.tar.xz

SmartOS 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-sunos-x86.tar.xz

SmartOS 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-sunos-x64.tar.xz

ARMv6 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-armv6l.tar.xz

ARMv7 32-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-armv7l.tar.xz

ARMv8 64-bit Binary: https://nodejs.org/dist/v4.8.4/node-v4.8.4-linux-arm64.tar.xz

Source Code: https://nodejs.org/dist/v4.8.4/node-v4.8.4.tar.gz

Other release files: https://nodejs.org/dist/v4.8.4/

Documentation: https://nodejs.org/docs/v4.8.4/api/

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

06213900c7d6ed598355cd11348b204bbb4d8069eaa7425c067ee596f38e7c4d  node-v4.8.4-darwin-x64.tar.gz
0b944e08b51233005fa954056f1762a3fad92280e48e384b46dd5bd5695e6afd  node-v4.8.4-darwin-x64.tar.xz
fe5cbb91c64df926c49d923348b4861a4e9284c8ecc87e504fbd8ddfbada8384  node-v4.8.4-headers.tar.gz
34e879759e0b577dd3900df2092ab3c15df040fbce1fbecc6cca2bef7301ffdf  node-v4.8.4-headers.tar.xz
1eb8f8cadc8024fcb01f333ca8cac1db39735491a35122bf5ab1a40ee6bedced  node-v4.8.4-linux-arm64.tar.gz
ae2f5a61b6218fced05de8ca8d163d985238aa5e535af1ba2075bd53aa31244f  node-v4.8.4-linux-arm64.tar.xz
aaf8c7c4160ef4932004989cddc3723d8a5170ad86a2bd27e10b3e452702e086  node-v4.8.4-linux-armv6l.tar.gz
3daa79540c2133859d8d474004e6a7821cca4aa34931657f790707664c5f6346  node-v4.8.4-linux-armv6l.tar.xz
8d85b03be742b9494032f34833d766e3037934372cd0e118fd79fde00a3d8d91  node-v4.8.4-linux-armv7l.tar.gz
294ef24d3ec7224702b882d81ff9fa7e8c4988af7824c8378cafd2b72294fb14  node-v4.8.4-linux-armv7l.tar.xz
2a0627ad0683677febe99a523bb759f40c1934b7da2a1d9623dddda4ecd50063  node-v4.8.4-linux-ppc64le.tar.gz
a107957c34b21998abc914006b9566c262243ae38502595611da5cbdebea9283  node-v4.8.4-linux-ppc64le.tar.xz
9f252a4e892cdf99a081f3dfdb37ebdfc2c180df39f8850a35dc46fc59d3c2f6  node-v4.8.4-linux-ppc64.tar.gz
bb8d7167de39198fa631ab8a5b96cefa377048c5886895e1ddb2686991a39abe  node-v4.8.4-linux-ppc64.tar.xz
d1297b6ddec12498f19589c0f44768a9f250ad36ea17f1f715b44aeb89cd32b2  node-v4.8.4-linux-x64.tar.gz
a98fc4cf9fcfe1c94dc34c8f58383dc4c2a40f0078735bd8dbf4fa20e075af17  node-v4.8.4-linux-x64.tar.xz
53f377f91aad1719539ba7fb591587b3ff8db25dd22d5f23647753cf60184044  node-v4.8.4-linux-x86.tar.gz
49ceb4e295837b182a61afd03b9aee353734aba646e98686d928bba2cfe502ce  node-v4.8.4-linux-x86.tar.xz
b228e03c67aafb2b01456ef58dc6b238db6d31627205c7a69a6e8e072c961c9a  node-v4.8.4.pkg
edff2a0eb071df6d15706202d82da7f4f6fa113e77881d6b70b0b6c350816cd8  node-v4.8.4-sunos-x64.tar.gz
11a061ddcb6f877ffb977a269e731e59071d6b3314d254d0a5898e69438f193b  node-v4.8.4-sunos-x64.tar.xz
44803d9efb3f5b3b77f90d19e233c8a4e98b752de13ff10ceff9fe8a8094d011  node-v4.8.4-sunos-x86.tar.gz
d9a618c458e9ca91a2787fcd6598da5d77aff9292360078356d11ab11b515c88  node-v4.8.4-sunos-x86.tar.xz
b5480f69e9e929d2814de900fb5e673743a9d93f4fecbd79066baf18219f8584  node-v4.8.4.tar.gz
35fe633a48cbe93c79327161d9dc964ac9810f4ceb2ed8628487e6e14a15905b  node-v4.8.4.tar.xz
bad999c784955ed808a2ce67ed2c0dc4b71e2abde873fbe912128f74ae5310b0  node-v4.8.4-win-x64.7z
8ebb31340af2d490a272cf0d3fdf07a60914fd79f40ac54b25babba7fcd9af25  node-v4.8.4-win-x64.zip
95c026c449f653a4de6768ae3c319383411c9c4898bef25691ae0b6038774d31  node-v4.8.4-win-x86.7z
02a38a9a3c723e8df033a9d15d1ffe492b7da42cea8f56d81148c3ac930afe81  node-v4.8.4-win-x86.zip
f5a15cbf5944f566e0ff917686f9290a688dedc24ce4bd237846f6353c20b640  node-v4.8.4-x64.msi
72190dcb1cebdbb05899acc3dea5d2dcad94dc811db289d015bb0e065c92e4ae  node-v4.8.4-x86.msi
30e1308011f5e738d01ef406d3fe2648a66a7c042eb9aba3ca21b934a55fb61c  win-x64/node.exe
51e7ebeed49def988e3398bf8a70bbba67ed38346439924dbdf9c01827016789  win-x64/node.lib
0a919967ed1cb6d1f7763ddbb2594f8f93adbcab2296192310faaf52d35fd6d1  win-x64/node_pdb.7z
ab593c61f1a39c93774c551116fa96f6b904c3dde9a4caf95cd199aec33f8aca  win-x64/node_pdb.zip
540897f8d48d913b45eadb5201fc71475cd1652b414a7f035460aad2613c7594  win-x86/node.exe
35eb7a9960a773e8cac4c02336c500357a88c1937fda93466c1bd57eb8a63310  win-x86/node.lib
09dc53e16ab7d9b46419b5be872035349f428034beaa83008c3fd6798bdbc9e7  win-x86/node_pdb.7z
3070955c6e16c9f9ec5c6ce3a4bb1edc1efd2e1513ba6442d796f16207f5ee5e  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZZP/TAAoJEJM7AfQLXKlGd+gH/AhLQk+gW3NxrdgHhYUbQstS
uMjhSHBeNrwSk2UeFYimjE46SPf/v/zmjovcMyTEL/YzcNCSrEvuzdzjJ1U0ltxf
RngCDoZzJghpozLVQw97jClirblxOID6OpMNMV6zixs+JYzGvjK56RS8jE5mya1s
wZnHEOUAl/BVDvgQ7RGbL4lE9Kgms4PlnRZVqHPK23hZ9YwhMFRr3uMmduM8pasm
5Ea/wDIq7a9AlSgVk1CYkyfI0abgeIvihRa0BI8Q9I8wq517//VRi0Bcs2jcsUWO
/LZVxnz1lEuxRJB5FZ2Cx+PwxMwqITV1oUlNUhpZiPEukpZIeFtthYTrPTAZllI=
=0OBH
-----END PGP SIGNATURE-----