You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: doc/changelogs/CHANGELOG_V7.md
+9-9
Original file line number
Diff line number
Diff line change
@@ -57,17 +57,17 @@ for details on patched vulnerabilities.
57
57
***build**:
58
58
- Disable V8 snapshots - The hashseed embedded in the snapshot is
59
59
currently the same for all runs of the binary. This opens node up to
60
-
collision attacks which could result in a Denial of Service. We have
61
-
temporarily disabled snapshots until a more robust solution is found
62
-
(Ali Ijaz Sheikh)
60
+
collision attacks which could result in a Denial of Service. We have
61
+
temporarily disabled snapshots until a more robust solution is found
62
+
(Ali Ijaz Sheikh)
63
63
***deps**:
64
64
-CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(),
65
65
which is used for parsing NAPTR responses, could be triggered to
66
-
read memory outside of the given input buffer if the passed in DNS
67
-
response packet was crafted in a particular way. This patch checks that
68
-
there is enough data for the required elements of an NAPTR record (2
69
-
int16, 3 bytes for string lengths) before processing a record. (David
70
-
Drysdale)
66
+
read memory outside of the given input buffer if the passed in DNS
67
+
response packet was crafted in a particular way. This patch checks that
68
+
there is enough data for the required elements of an NAPTR record (2
69
+
int16, 3 bytes for string lengths) before processing a record. (David
70
+
Drysdale)
71
71
72
72
### Commits
73
73
@@ -1552,7 +1552,7 @@ Thank you to @italoacasas for preparing the majority of this release.
1552
1552
***buffer**:
1553
1553
- Reverted the runtime deprecation of calling `Buffer()` without `new`. (Anna Henningsen) [#9529](https://github.com/nodejs/node/pull/9529)
1554
1554
- Fixed `buffer.transcode()` for single-byte character
1555
-
encodings to `UCS2`. (Anna Henningsen) [#9838](https://github.com/nodejs/node/pull/9838)
1555
+
encodings to `UCS2`. (Anna Henningsen) [#9838](https://github.com/nodejs/node/pull/9838)
1556
1556
***promise**: `--trace-warnings` now produces useful stacktraces for Promise warnings. (Anna Henningsen) [#9525](https://github.com/nodejs/node/pull/9525)
1557
1557
***repl**: Fixed a bug preventing correct parsing of generator functions. (Teddy Katz) [#9852](https://github.com/nodejs/node/pull/9852)
1558
1558
***V8**: Fixed a significant `instanceof` performance regression. (Franziska Hinkelmann) [#9730](https://github.com/nodejs/node/pull/9730)
0 commit comments