Node v4.1.2 (Current)

2015-10-05, Version 4.1.2 (Current), @rvagg

This release includes a fix for CVE-2015-7384, a Denial of Service (DoS) bug. Details of the bug can be found on the nodejs-sec group. Please subscribe to nodejs-sec to receive future notifications of security releases.

All users of Node.js v4.x should upgrade to v4.1.2, this is a critical update.

Notable changes

http : Fix out-of-order 'finish' event bug in pipelining that can abort execution, fixes DoS vulnerability CVE-2015-7384 (Fedor Indutny) #3128 Account for pending response data instead of just the data on the current request to decide whether pause the socket or not (Fedor Indutny) #3128

: libuv : Upgraded from v1.7.4 to v1.7.5, see release notes for details (Saúl Ibarra Corretgé) #3010 A better rwlock implementation for all Windows versions Improved AIX support

: Upgraded from v1.7.4 to v1.7.5, see release notes for details (Saúl Ibarra Corretgé) #3010 v8 : Upgraded from v4.5.103.33 to v4.5.103.35 (Ali Ijaz Sheikh) #3117 Backported f782159 from v8's upstream to help speed up Promise introspection (Ben Noordhuis) #3130 Backported c281c15 from v8's upstream to add JSTypedArray length in post-mortem metadata (Julien Gilli) #3031

:

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.

are still to be resolved. See #1264. Surrogate pair in REPL can freeze terminal. #690

Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894

while a DNS query is in progress can cause the process to crash on a failed assertion. #894 url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

[ 39b8730e8b ] - async_wrap : ensure all objects have internal field (Trevor Norris) #3139

] - : ensure all objects have internal field (Trevor Norris) #3139 [ 99e66074d7 ] - async_wrap : update providers and add test (Trevor Norris) #3139

] - : update providers and add test (Trevor Norris) #3139 [ 7a58157d4e ] - benchmark : update comment in common.js (Minwoo Jung) #2399

] - : update comment in common.js (Minwoo Jung) #2399 [ 9e9bfa4dc0 ] - build : iojs -> nodejs of release-urlbase (P.S.V.R) #3015

] - : iojs -> nodejs of release-urlbase (P.S.V.R) #3015 [ 8335ec7191 ] - build : fix some typos inside the configure script (P.S.V.R) #3016

] - : fix some typos inside the configure script (P.S.V.R) #3016 [ d6ac547d5d ] - build,win : fix node.exe resource version (João Reis) #3053

] - : fix node.exe resource version (João Reis) #3053 [ 798dad24f4 ] - child_process : null channel handle on close (Fedor Indutny) #3041

] - : channel handle on close (Fedor Indutny) #3041 [ e5615854ea ] - contextify : use CHECK instead of if (Oguz Bastemur) #3125

] - : use CHECK instead of (Oguz Bastemur) #3125 [ f055a66a38 ] - crypto : enable FIPS only when configured with it (Fedor Indutny) #3153

] - : enable FIPS only when configured with it (Fedor Indutny) #3153 [ 4c8d96bc30 ] - crypto : add more keylen sanity checks in pbkdf2 (Johann) #3029

] - : add more keylen sanity checks in pbkdf2 (Johann) #3029 [ 4c5940776c ] - deps : upgrade libuv to 1.7.5 (Saúl Ibarra Corretgé) #3010

] - : upgrade libuv to 1.7.5 (Saúl Ibarra Corretgé) #3010 [ 5a9e795577 ] - deps : upgrade V8 to 4.5.103.35 (Ali Ijaz Sheikh) #3117

] - : upgrade V8 to 4.5.103.35 (Ali Ijaz Sheikh) #3117 [ 925b29f959 ] - deps : backport f782159 from v8's upstream (Ben Noordhuis) #3130

] - : backport f782159 from v8's upstream (Ben Noordhuis) #3130 [ 039f73fa83 ] - deps : remove and gitignore .bin directory (Ben Noordhuis) #3004

] - : remove and gitignore .bin directory (Ben Noordhuis) #3004 [ 5fbb24812d ] - deps : backport c281c15 from V8's upstream (Julien Gilli) #3031

] - : backport c281c15 from V8's upstream (Julien Gilli) #3031 [ 6ee5d0f69f ] - dns : add missing exports.BADNAME (Roman Reiss) #3051

] - : add missing exports.BADNAME (Roman Reiss) #3051 [ f92aee7170 ] - doc : fix outdated 'try/catch' statement in sync (Minwoo Jung) #3087

] - : fix outdated 'try/catch' statement in sync (Minwoo Jung) #3087 [ c7161f39e8 ] - doc : add TSC meeting minutes 2015-09-16 (Rod Vagg) #3023

] - : add TSC meeting minutes 2015-09-16 (Rod Vagg) #3023 [ 928166c4a8 ] - doc : copyedit fs.watch() information (Rich Trott) #3097

] - : copyedit fs.watch() information (Rich Trott) #3097 [ 75d5dcea76 ] - doc : jenkins-iojs.nodesource.com -> ci.nodejs.org (Michał Gołębiowski) #2886

] - : jenkins-iojs.nodesource.com -> ci.nodejs.org (Michał Gołębiowski) #2886 [ 5c3f50b21d ] - doc : rearrange execSync and execFileSync (Laurent Fortin) #2940

] - : rearrange execSync and execFileSync (Laurent Fortin) #2940 [ 4fc33ac11a ] - doc : make execFileSync in line with execFile (Laurent Fortin) #2940

] - : make execFileSync in line with execFile (Laurent Fortin) #2940 [ a366e84b17 ] - doc : fix typos in cluster & errors (reggi) #3011

] - : fix typos in cluster & errors (reggi) #3011 [ 52031e1bf1 ] - doc : switch LICENSE from closure-linter to eslint (P.S.V.R) #3018

] - : switch LICENSE from closure-linter to eslint (P.S.V.R) #3018 [ b28f6a53bc ] - docs : Clarify assert.doesNotThrow behavior (Fabio Oliveira) #2807

] - : Clarify assert.doesNotThrow behavior (Fabio Oliveira) #2807 [ 99943e189d ] - http : fix out-of-order 'finish' bug in pipelining (Fedor Indutny) #3128

] - : fix out-of-order 'finish' bug in pipelining (Fedor Indutny) #3128 [ fb7a491d1c ] - http_server : pause socket properly (Fedor Indutny) #3128

] - : pause socket properly (Fedor Indutny) #3128 [ a0b35bfcf3 ] - i18n : add caller to removal list for bidi in ICU55 (Michael Dawson) #3115

] - : add caller to removal list for bidi in ICU55 (Michael Dawson) #3115 [ ac2bce0b0c ] - path : improve posixSplitPath performance (Evan Lucas) #3034

] - : improve posixSplitPath performance (Evan Lucas) #3034 [ 37cdeafa2f ] - smalloc : remove module (Brendan Ashworth) #3099

] - : remove module (Brendan Ashworth) #3099 [ 5ec5d0aa8b ] - src : internalize binding function property names (Ben Noordhuis) #3060

] - : internalize binding function property names (Ben Noordhuis) #3060 [ c8175fc2af ] - src : internalize per-isolate string properties (Ben Noordhuis) #3060

] - : internalize per-isolate string properties (Ben Noordhuis) #3060 [ 9a593abc47 ] - src : include signal.h in util.h (Cheng Zhao) #3058

] - : include signal.h in util.h (Cheng Zhao) #3058 [ fde0c6f321 ] - src : fix function and variable names in comments (Sakthipriyan Vairamani) #3039

] - : fix function and variable names in comments (Sakthipriyan Vairamani) #3039 [ 1cc7b41ba4 ] - stream_wrap : support empty TryWrite s (Fedor Indutny) #3128

] - : support empty s (Fedor Indutny) #3128 [ 9faf4c6fcf ] - test : load common.js to test for global leaks (Rich Trott) #3095

] - : load common.js to test for global leaks (Rich Trott) #3095 [ 0858c86374 ] - test : fix invalid variable name (Sakthipriyan Vairamani) #3150

] - : fix invalid variable name (Sakthipriyan Vairamani) #3150 [ 1167171004 ] - test : change calls to deprecated util.print() (Rich Trott) #3083

] - : change calls to deprecated util.print() (Rich Trott) #3083 [ 5ada45bf28 ] - test : replace deprecated util.debug() calls (Rich Trott) #3082

] - : replace deprecated util.debug() calls (Rich Trott) #3082 [ d8ab4e185d ] - util: optimize promise introspection (Ben Noordhuis) #3130

Windows 32-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2-x86.msi

Windows 64-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2-x64.msi

Windows 32-bit Binary: https://nodejs.org/dist/v4.1.2/win-x86/node.exe

Windows 64-bit Binary: https://nodejs.org/dist/v4.1.2/win-x64/node.exe

Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.1.2/node-v4.1.2.pkg

Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-darwin-x64.tar.gz

Linux 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-x86.tar.gz

Linux 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-x64.tar.gz

SmartOS 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-sunos-x86.tar.gz

SmartOS 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-sunos-x64.tar.gz

ARMv6 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-armv6l.tar.gz

ARMv7 32-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-armv7l.tar.gz

ARMv8 64-bit Binary: https://nodejs.org/dist/v4.1.2/node-v4.1.2-linux-arm64.tar.gz

Source Code: https://nodejs.org/dist/v4.1.2/node-v4.1.2.tar.gz

Other release files: https://nodejs.org/dist/v4.1.2/

Documentation: https://nodejs.org/docs/v4.1.2/api/

Shasums (GPG signing hash: SHA512, file hash: SHA256):