Rod Vagg
This is a security release, fixing a number of vulnerabilities in OpenSSL and Node.js. Refer to the August 2018 Security Releases announcement for full details.
Notable Changes
- buffer: Fix out-of-bounds (OOB) write in
Buffer.write()for UCS-2 encoding (CVE-2018-12115) - deps: Upgrade to OpenSSL 1.0.2p, fixing:
- Client DoS due to large DH parameter (CVE-2018-0732)
- ECDSA key extraction via local side-channel (CVE not assigned)
Commits
- [
fc14d812b7] - buffer: avoid overrun on UCS-2 string write (Rod Vagg) nodejs-private/node-private#138 - [
8f59838ae7] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836 - [
97607f8622] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389 - [
46e4917d98] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389 - [
1b93677a81] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #22320 - [
ebf399473b] - deps: upgrade openssl sources to 1.0.2p (Shigeki Ohtsu) #22320 - [
131c5ed438] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389 - [
3139897ff5] - test: fix error messages for OpenSSL-1.0.2p (Shigeki Ohtsu) #22320 - [
0c047c4d9a] - test: update certificates and private keys (Fedor Indutny) #22184 - [
7c6d0f604b] - test: update keys/Makefile to clean and build all (Daniel Bevenius) #19975
Windows 32-bit Installer: https://nodejs.org/dist/v8.11.4/node-v8.11.4-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v8.11.4/node-v8.11.4-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v8.11.4/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v8.11.4/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v8.11.4/node-v8.11.4.pkg
macOS 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-aix-ppc64.tar.gz
SmartOS 32-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-sunos-x86.tar.xz
SmartOS 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v8.11.4/node-v8.11.4-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v8.11.4/node-v8.11.4.tar.gz
Other release files: https://nodejs.org/dist/v8.11.4/
Documentation: https://nodejs.org/docs/v8.11.4/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
8d80ab9743983ced0936b1a05e2ec94df32d32080e7030b0e8524a450c88c4b9 node-v8.11.4-aix-ppc64.tar.gz
aa1de83b388581d0d9ec3276f4526ee67e17e0f1bc0deb5133f960ce5dc9f1ef node-v8.11.4-darwin-x64.tar.gz
c2e26dea26b7f2ce5c9bcebbc437225913470a2b0200325789b2110f8b78ed18 node-v8.11.4-darwin-x64.tar.xz
74f92ed7b0896041d4c5c54b366371ebd082528c57fb81c6cd0cbe897c8f10c7 node-v8.11.4-headers.tar.gz
624ffa954afcf973e346a7096263006d32be85c6642d6a34614d27037d0dfe6f node-v8.11.4-headers.tar.xz
667b9935e9aab43cd0eab492ec15a0330797cb261ab2df4e18e5a9548817a1c6 node-v8.11.4-linux-arm64.tar.gz
46e90dd916ddbf88c866de300c1b2a26f9216b19abd92b29e89439f62fb6fc1c node-v8.11.4-linux-arm64.tar.xz
0173429e03d6c9a1b055468361782a923b40269e040be9e1ed5f5879e8b7ccff node-v8.11.4-linux-armv6l.tar.gz
baa9a7efc0d862f683eeed9954103b0260f201b0c66379af9f418ce95d4d532b node-v8.11.4-linux-armv6l.tar.xz
7ddd1517096aab3fcf535d870cb9129f65f017862ce2927e6ee96345cc0490ea node-v8.11.4-linux-armv7l.tar.gz
b78298ac251477290acca6457fb57a24b08ed1d183cd54419b327f88858962d0 node-v8.11.4-linux-armv7l.tar.xz
0a041ea9fcd0beb7b0dbe5cf5e3f54a03c47e9f44d2a96c0613208dc400afc60 node-v8.11.4-linux-ppc64le.tar.gz
4cc845be3e88425c774b6969a0306b95c931919ecd78c43dec1093454104ec3a node-v8.11.4-linux-ppc64le.tar.xz
bc0f8548f37ee6179a74c71535d86a1923b469525244efed0b83dcbbe06bd251 node-v8.11.4-linux-s390x.tar.gz
9d3304bc008da18b26493baa243033393cc9f4616f549ac3a0b03478747e6259 node-v8.11.4-linux-s390x.tar.xz
c69abe770f002a7415bd00f7ea13b086650c1dd925ef0c3bf8de90eabecc8790 node-v8.11.4-linux-x64.tar.gz
85ea7cbb5bf624e130585bfe3946e99c85ce5cb84c2aee474038bdbe912f908c node-v8.11.4-linux-x64.tar.xz
e9e6efc1fdcaa7283dc6e2428f8dc88260060ee46fb9e4683a09715c7e3354bf node-v8.11.4-linux-x86.tar.gz
373d752ac5c10b7403d9a4c8d039457d6c32ada133c0d2ce9d82bc54dba6d551 node-v8.11.4-linux-x86.tar.xz
7a6aa21c443e6aaff8e28b815278478291c862c23f56b63e3d86e4f93a4c9296 node-v8.11.4.pkg
c188c482899aad906ca7a41ff5f76b1e46086301cfd82c11bd1069ca5f1f8987 node-v8.11.4-sunos-x64.tar.gz
a0ca36b316f986d96cab9f7c3d6794deffc8aff5578821319a907e369bec14c4 node-v8.11.4-sunos-x64.tar.xz
26643ef09dfc464d583d1c92c3ab3cd5acc4a4b57051a8fa14694e1a677c602a node-v8.11.4-sunos-x86.tar.gz
7ed1d34624d4367977f512a5f0ad482851854559448779b4b0cd679ac92477f6 node-v8.11.4-sunos-x86.tar.xz
459144e361d64ca7362c37cc9717c044ef909d348cb5aa3f2b62538560a6085a node-v8.11.4.tar.gz
fbce7de6d96b0bcb0db0bf77f0e6ea999b6755e6930568aedaab06847552a609 node-v8.11.4.tar.xz
0b5bc0b0bb992abec341dd70aa71b89cfa3c2fd9590a555c83cb3bb3bbcd5ebc node-v8.11.4-win-x64.7z
72a21e2fcd3703994f57cf707b92e7f939df99c3e0298102e7436849e4948536 node-v8.11.4-win-x64.zip
6766a873857346553d854b0f34d5f00c49e08c75710c1da8c4fee5d1fe3cc9fe node-v8.11.4-win-x86.7z
83086e6ce4f420e4e6115646d11f301b2df263b0f9f6aaefb6413504e5750aa1 node-v8.11.4-win-x86.zip
452a0fa9cbac277558808ff888e0c924deb5b51945fad67e83fad6c7391c1203 node-v8.11.4-x64.msi
2b6f4e2381976578a751ef3180d127205abc0a13f61fe57a13f11e13410348e9 node-v8.11.4-x86.msi
6cc1bda17eeaf68d0f8645f791de7862d168de6af191b0570b9f79f79e400a08 win-x64/node.exe
fe688901695941ae1e74ea23cc6be5cd48878749f890cbb356a87a53815fdc2b win-x64/node.lib
e39f51f9b54570c02fd629e52a3931ab7af0fea160cb971378bf38ca7102199e win-x64/node_pdb.7z
6699add5dfd6a99c879ba058b08dfb9167007c1b928f693eee16e59f9fb5c38a win-x64/node_pdb.zip
791ecc3f9545dd50c5bdb85bfebf098ff70e229b2430321f425e6355b2e764b5 win-x86/node.exe
cb7972b07e702dd8cbeaa60fd537b6b0e46c6c6b391ea18117e311a755c25a0f win-x86/node.lib
ad77199833ed6f4f5e98f4256ed3438d40a350b0d34771e4c4076f81031e6e25 win-x86/node_pdb.7z
64b132aa4e8a8cd2614e0419194be7de868a19434e9d98eaed367cf12f75cfec win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE3Y8jOLrnUB491ax4wnN5L32DVF0FAlt012gACgkQwnN5L32D
VF2Z5Qf/X3rFnatr+qrZPvyoIUtq06DwkZbyN9cmcl5Uh8kmCMoMG1+jNmh9hJlh
7HCmyX0JKnFZfsz+RtP3/MtASGJcDph6MzuwlOVE7FAG949g67VtRC7Oa+3qvDth
iw24fijFxSKaTgLCldLn8l1gGVc+SQpbI9xqAWHauwtSDQfmqtsugETnJSdhFn/E
OYU//P2j4IJSh0aYpHtuBNcqIFuTUJg8lH9HqSj1b/XaRS1mqlCpi5Wu4NQORc42
6+tc8uXcfd+v7KLGWg1cbsIlknpKisRyBVxC2QRGInm5VivD/uAw/4twOiiXidN8
hNHIlDZ14pbzKPtCCF12ci7FpEiJFA==
=YWdO
-----END PGP SIGNATURE-----