Node v10.4.1 (Current)

Notable Changes

Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream.

(CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. http2 (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0

tls (CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving

(CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving n-api: Prevent use-after-free in napi_delete_async_work

Commits

[ 1bbfe9a72b ] - build : fix configure script for double-digits (Misty De Meo) #21183

] - : fix configure script for double-digits (Misty De Meo) #21183 [ 4c90ee8fc6 ] - deps : update to nghttp2 1.32.0 (James M Snell) nodejs-private/node-private#117

] - : update to nghttp2 1.32.0 (James M Snell) nodejs-private/node-private#117 [ e5c2f575b1 ] - deps : patch V8 to 6.7.288.45 (Michaël Zasso) #21192

] - : patch V8 to 6.7.288.45 (Michaël Zasso) #21192 [ 03ded94ffe ] - deps : patch V8 to 6.7.288.44 (Michaël Zasso) #21146

] - : patch V8 to 6.7.288.44 (Michaël Zasso) #21146 [ 4de7e0c96c ] - deps,npm : float node-gyp patch on npm (Rich Trott) #21239

] - : float node-gyp patch on npm (Rich Trott) #21239 [ 92d7b6c9a0 ] - fs : fix promises reads with pos > 4GB (cjihrig) #21148

] - : fix promises reads with pos > 4GB (cjihrig) #21148 [ 8681402228 ] - http2 : fixup http2stream cleanup and other nits (James M Snell) nodejs-private/node-private#115

] - : fixup http2stream cleanup and other nits (James M Snell) nodejs-private/node-private#115 [ 53f8563353 ] - n-api : back up env before async work finalize (Gabriel Schulhof) #21129

] - : back up env before async work finalize (Gabriel Schulhof) #21129 [ 9ba8ed1371 ] - src : re-add Realloc() shrink after reading stream data (Anna Henningsen) nodejs-private/node-private#128

] - : re-add shrink after reading stream data (Anna Henningsen) nodejs-private/node-private#128 [ 8e979482fa ] - Revert " src : restore stdio on program exit" (Evan Lucas) #21257

] - " : restore stdio on program exit" (Evan Lucas) #21257 [ cb5ec64956 ] - src : reset TTY mode before cleaning up resources (Anna Henningsen) #21257

] - : reset TTY mode before cleaning up resources (Anna Henningsen) #21257 [ ae5567eaea ] - test : add regression test for nghttp2 CVE-2018-1000168 (James M Snell) nodejs-private/node-private#117

] - : add regression test for nghttp2 CVE-2018-1000168 (James M Snell) nodejs-private/node-private#117 [ e87bf625dd ] - test : add tls write error regression test (Shigeki Ohtsu) nodejs-private/node-private#127

] - : add tls write error regression test (Shigeki Ohtsu) nodejs-private/node-private#127 [ eea2bce58d ] - tls : fix SSL write error handling (Anna Henningsen) nodejs-private/node-private#127

] - : fix SSL write error handling (Anna Henningsen) nodejs-private/node-private#127 [ 1e49eadd68 ] - tools,gyp: fix regex for version matching (Rich Trott) #21216

Windows 32-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v10.4.1/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v10.4.1/win-x64/node.exe

macOS 64-bit Installer: https://nodejs.org/dist/v10.4.1/node-v10.4.1.pkg

macOS 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-darwin-x64.tar.gz

Linux 32-bit Binary: Coming soon

Linux 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-x64.tar.xz

Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-ppc64le.tar.xz

Linux s390x 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-s390x.tar.xz

AIX 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-aix-ppc64.tar.gz

SmartOS 32-bit Binary: Coming soon

SmartOS 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-sunos-x64.tar.xz

ARMv6 32-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-armv6l.tar.xz

ARMv7 32-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-armv7l.tar.xz

ARMv8 64-bit Binary: https://nodejs.org/dist/v10.4.1/node-v10.4.1-linux-arm64.tar.xz

Source Code: https://nodejs.org/dist/v10.4.1/node-v10.4.1.tar.gz

Other release files: https://nodejs.org/dist/v10.4.1/

Documentation: https://nodejs.org/docs/v10.4.1/api/

SHASUMS