Node v4.9.0 (Maintenance)

Notable Changes

Upgrade to OpenSSL 1.0.2o : Does not contain any security fixes that are known to impact Node.js.

: Does not contain any security fixes that are known to impact Node.js. Fix for 'path' module regular expression denial of service (CVE-2018-7158) : A regular expression used for parsing POSIX an Windows paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions.

: A regular expression used for parsing POSIX an Windows paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted module functions. Reject spaces in HTTP Content-Length header values (CVE-2018-7159) : The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values.

: The Node.js HTTP parser allowed for spaces inside header values. Such values now lead to rejected connections in the same way as non-numeric values. Update root certificates: 5 additional root certificates have been added to the Node.js binary and 30 have been removed.

Commits

[ 497ff3cd4f ] - crypto : update root certificates (Ben Noordhuis) #19322

] - : update root certificates (Ben Noordhuis) #19322 [ 514709e41f ] - deps : add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836

] - : add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836 [ 5108108606 ] - deps : fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389

] - : fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389 [ d67d0a63d9 ] - deps : fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389

] - : fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389 [ 6af057ecc8 ] - deps : copy all openssl header files to include dir (Shigeki Ohtsu) #19638

] - : copy all openssl header files to include dir (Shigeki Ohtsu) #19638 [ b50cd3359d ] - deps : upgrade openssl sources to 1.0.2o (Shigeki Ohtsu) #19638

] - : upgrade openssl sources to 1.0.2o (Shigeki Ohtsu) #19638 [ da6e24c8d6 ] - deps : reject interior blanks in Content-Length (Ben Noordhuis) nodejs-private/http-parser-private#1

] - : reject interior blanks in Content-Length (Ben Noordhuis) nodejs-private/http-parser-private#1 [ 7ebc9981e0 ] - deps : upgrade http-parser to v2.8.0 (Ben Noordhuis) nodejs-private/http-parser-private#1

] - : upgrade http-parser to v2.8.0 (Ben Noordhuis) nodejs-private/http-parser-private#1 [ 6fd2cc93a6 ] - openssl : fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389

] - : fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389 [ bf00665af6 ] - path : unwind regular expressions in Windows (Myles Borins)

] - : unwind regular expressions in Windows (Myles Borins) [ 4196fcf23e ] - path : unwind regular expressions in POSIX (Myles Borins)

] - : unwind regular expressions in POSIX (Myles Borins) [ 625986b699 ] - src : drop CNNIC+StartCom certificate whitelisting (Ben Noordhuis) #19322

] - : drop CNNIC+StartCom certificate whitelisting (Ben Noordhuis) #19322 [ ebc46448a4 ] - tools: update certdata.txt (Ben Noordhuis) #19322

Windows 32-bit Installer: https://nodejs.org/dist/v4.9.0/node-v4.9.0-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v4.9.0/node-v4.9.0-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v4.9.0/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v4.9.0/win-x64/node.exe

macOS 64-bit Installer: https://nodejs.org/dist/v4.9.0/node-v4.9.0.pkg

macOS 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-darwin-x64.tar.gz

Linux 32-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-x86.tar.xz

Linux 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-x64.tar.xz

Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-ppc64le.tar.xz

Linux PPC BE 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-ppc64.tar.xz

Linux s390x 64-bit Binary: Coming soon

AIX 64-bit Binary: Coming soon

SmartOS 32-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-sunos-x86.tar.xz

SmartOS 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-sunos-x64.tar.xz

ARMv6 32-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-armv6l.tar.xz

ARMv7 32-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-armv7l.tar.xz

ARMv8 64-bit Binary: https://nodejs.org/dist/v4.9.0/node-v4.9.0-linux-arm64.tar.xz

Source Code: https://nodejs.org/dist/v4.9.0/node-v4.9.0.tar.gz

Other release files: https://nodejs.org/dist/v4.9.0/

Documentation: https://nodejs.org/docs/v4.9.0/api/

SHASUMS