Node v6.14.4(LTS)

OpenSSL과 Node.js의 취약점을 수정한 보안 릴리스입니다. 자세한 내용은 August 2018 Security Releases를 참고하세요.

주요 변경사항

• buffer: UCS-2 인코딩을 사용하는 Buffer.write()에서의 out-of-bounds(OOB) 쓰기(CVE-2018-12115)
• deps: OpenSSL 1.0.2p로 업그레이드 했습니다. 다음 부분이 수정되었습니다.
  • 커다란 DH 파라미터로 인한 클라이언트 DoS(CVE-2018-0732)
  • 로컬 사이드 채널을 통한 ECDSA 키 추출(CVE가 할당되지 않았습니다.)

Commits

• [0052926476] - buffer: avoid overrun on UCS-2 string write (Rod Vagg) nodejs-private/node-private#138
• [dbe6551b89] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
• [7829bbcacb] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389
• [cddca629b5] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389
• [e6014aed52] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #22320
• [37ddce514d] - deps: upgrade openssl sources to 1.0.2p (Shigeki Ohtsu) #22320
• [08a150fcca] - inspector: don’t bind to 0.0.0.0 by default (Ben Noordhuis) #21376
• [19b9d7fd77] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389
• [7ccb0422fc] - test: fix error messages for OpenSSL-1.0.2p (Shigeki Ohtsu) #22320
• [58b9497ca8] - test: update certificates and private keys (Fedor Indutny) #22184
• [9863e11ea8] - test: update keys/Makefile to clean and build all (Daniel Bevenius) #19975

Windows 32-bit Installer: https://nodejs.org/dist/v6.14.4/node-v6.14.4-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v6.14.4/node-v6.14.4-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v6.14.4/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v6.14.4/win-x64/node.exe

macOS 64-bit Installer: https://nodejs.org/dist/v6.14.4/node-v6.14.4.pkg

macOS 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-darwin-x64.tar.gz

Linux 32-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-x86.tar.xz

Linux 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-x64.tar.xz

Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-ppc64le.tar.xz

Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-ppc64.tar.xz

Linux s390x 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-s390x.tar.xz

AIX 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-aix-ppc64.tar.gz

SunOS 32-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-sunos-x86.tar.xz

SunOS 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-sunos-x64.tar.xz

ARMv6 32-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-armv6l.tar.xz

ARMv7 32-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-armv7l.tar.xz

ARMv8 64-bit Binary: https://nodejs.org/dist/v6.14.4/node-v6.14.4-linux-arm64.tar.xz

Source Code: https://nodejs.org/dist/v6.14.4/node-v6.14.4.tar.gz

Other release files: https://nodejs.org/dist/v6.14.4/

Documentation: https://nodejs.org/docs/v6.14.4/api/

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

91ba62cef4f8d2d3f4d4764a7116ba1eae963a4e8847290ac599dfc459ab1058  node-v6.14.4-aix-ppc64.tar.gz
799c10d67b42962ce62673d92a8352a3a2f69fc0aa3723fa0cb62522d0af0687  node-v6.14.4-darwin-x64.tar.gz
2a20a4fda9fa197e9c4b82d3eed7714e58cf002cd39effbb4886232e6615ca94  node-v6.14.4-darwin-x64.tar.xz
f6baca4f7dfad1de06f4389e67bf599b90d7daf4fdd180d29d10abd6ec56559e  node-v6.14.4-headers.tar.gz
bf248b14f3c0bf178a41f524edef6f95003369231ae28539f4bf4529a67c6428  node-v6.14.4-headers.tar.xz
08d5af19fb0abe879ee9a62a1243cb027acbedae1b4fa5498a6183cc458773ee  node-v6.14.4-linux-arm64.tar.gz
fa1a78ae8e384c1b76bde41060e806c412ecd9b4c0775c5c7ec53ebf9a70998b  node-v6.14.4-linux-arm64.tar.xz
63a5b6b2da949f2c45c2b2615e17c757c86080470da425477adc6291252aaf8c  node-v6.14.4-linux-armv6l.tar.gz
771a2a6124dc55ea019e3af92f84090694e25cfb4e4bee10a0b9c27802f6adb9  node-v6.14.4-linux-armv6l.tar.xz
88f5ec52dbbf547a52af66b7df5fbb6206e43a307a410805eeba08bc13c45a2d  node-v6.14.4-linux-armv7l.tar.gz
21f2e3c729417de1b7394217404ffb99dc3af194680970ba02b2eb065b0eb5d4  node-v6.14.4-linux-armv7l.tar.xz
2d15a78a2b47dba29890be40bc1397807a8c1176a33ce8d8c73db20036430652  node-v6.14.4-linux-ppc64le.tar.gz
097656c05ed29d43c5fc629269137ed9a5b64a6e07f5f9f4d870ca03eec9802e  node-v6.14.4-linux-ppc64le.tar.xz
00d988391f8083f1da3b699734d2fb6e3fca0c91d5404ab402cd14ca4ba22af4  node-v6.14.4-linux-ppc64.tar.gz
8d07a9f3d788f6dd1c64749f0a0a7b9e9af733fb729e5d7668862e4be5511cf1  node-v6.14.4-linux-ppc64.tar.xz
1f129a089acd6efa01a99dd068478482314151d95d53168e4ef1c7b20c1fa4bc  node-v6.14.4-linux-s390x.tar.gz
bb8dd6a71d308ecec753251ea1b830008f3b1126b49de4cd22806b6d6edd77f9  node-v6.14.4-linux-s390x.tar.xz
1b80ddc7847e85ae31c5eb515ee76230fed1e2e70303a7db9891404a830128ba  node-v6.14.4-linux-x64.tar.gz
66d052fe10f90e3b05fdda3117f26bc24da10d436eecf6e298c317f437647aab  node-v6.14.4-linux-x64.tar.xz
d394ea61a51ba3c070838f8696a38f9e47be55af6978e7a074addb742ba0cddc  node-v6.14.4-linux-x86.tar.gz
ba508f7cad8fab34ef3d72c64b32e06dc7c65a911e14eaf985beeae90975bb06  node-v6.14.4-linux-x86.tar.xz
487c425a78f5f82a3c480007664b6a670af22d7ee719bd7e5a25c8c6950d2400  node-v6.14.4.pkg
d01a474d78b08fe69a6d0c86742f77ebf98c106ce5e469e2f34ecdcb3556f49a  node-v6.14.4-sunos-x64.tar.gz
e87024933e826d3b2c3b392a9c36324b977071ba6791c2093b35ba10eeee4d7a  node-v6.14.4-sunos-x64.tar.xz
f51c0fea195a25bf442a2beb27b62a56e3bc765390354bcd5643178ee8566037  node-v6.14.4-sunos-x86.tar.gz
67dc68a5ac1f870f76e27e726895fa2c0fee93e01af7ac04eee4cd133f8fbb6c  node-v6.14.4-sunos-x86.tar.xz
10aff5317908af04107e9ae26a07a84ee11a213657701df05c189afa4586cf37  node-v6.14.4.tar.gz
9a4bfc99787f8bdb07d5ae8b1f00ec3757e7b09c99d11f0e8a5e9a16a134ec0f  node-v6.14.4.tar.xz
4f5b078447bc5d293e3b2a418f14cd843cad408740d646358200a21d01b1f59c  node-v6.14.4-win-x64.7z
6f9dc686dac27e13f142626018d7bf23257356b40a7eabbf5c1843acc1ab80f9  node-v6.14.4-win-x64.zip
b9595f7822cf55d1fd2db70ec6cde91a29960a86fdf25b365b479c03b63882c5  node-v6.14.4-win-x86.7z
cba294e7660099d10b76b239e716995a75e15fbebaf5467ac75ca9b506435927  node-v6.14.4-win-x86.zip
70ab33aa352fa5d9c9c0b12070404e688d03b15d28cfa55ec719f2c4fd095001  node-v6.14.4-x64.msi
260472d50d282574bb8b01378c5c8509613ae77b54d2d22a78fb92bd71634291  node-v6.14.4-x86.msi
fd8a5ec2e4d6f67895aeb9ee07af4c562331d19e4e2e644f974f347ede72453c  win-x64/node.exe
98173b6cb0848827a630a981eb6ae352c2494a3970bcbf0466382dbfddc2f159  win-x64/node.lib
e53037a68e15a73be916845b687696bb73f448f9842458ac41cedf44a682bfb3  win-x64/node_pdb.7z
f77a8848ec7868f0c963b5a74170f0e64e205f1e2c27ab2be309a014f2a75da3  win-x64/node_pdb.zip
7f93a13e70c79fa27c841daf7fe8ebdc3ddf34b3f17ceba66d5ffc9d1594ea89  win-x86/node.exe
dcef85f280ee81fdc1f469a20354124eb2ff83c5877f40a9b89c09471f53abd4  win-x86/node.lib
80062110f0cbbe94f934c709e3256471b73c71411908cfc986b7e125dca66831  win-x86/node_pdb.7z
d7a22eeb96adbf2da748fb323ce9e989b74936159014f86c714e077f3f4e658d  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE3Y8jOLrnUB491ax4wnN5L32DVF0FAlt01zQACgkQwnN5L32D
VF3c8Qf/dZSQtJDH1Ow7Apf1pESSBhB0kzQXokn9ovQfFdzzc4jYSu7StFdMDOtK
pijf6ZpAigjH0PsAFGU7p2nCDQhen6/J3SUNUCz/oxZ+ox9aR436ZUjmKcV4/ECr
Lmse7B7z1BLvSWucZQ45d9jrPG9tjVkybXgzcd8IxsFrEFOdY1WaSnJRI56uHzaW
Hvw9erXdiQHhyTXBsZcM/5+AN7WSnVccwKXdfcHi1B7MdDd7NucQYmj5cQz7Dz0p
qWKvgYqdtd2H4ZFWX8z8lbswtWeftNYP1+nGEBPC1IpFEzLQ+HPXSjpeccAFmS6e
8Y8mEfBsbRQVObRbU5dNeNOwI6xsKA==
=6h1+
-----END PGP SIGNATURE-----