Skip to content

Commit a7376c9

Browse files
committed
2016-05-06 Version 0.12.14 (Maintenance) Release
Notable changes: * npm: Correct erroneous version number in v2.15.1 code (Forrest L Norvell) nodejs#5988 * openssl: Upgrade to v1.0.1t, addressing security vulnerabilities (Shigeki Ohtsu) nodejs#6553 - Fixes CVE-2016-2107 "Padding oracle in AES-NI CBC MAC check" - Fixes CVE-2016-2105 "EVP_EncodeUpdate overflow" - See https://nodejs.org/en/blog/vulnerability/openssl-may-2016/ for full details
1 parent 810fb21 commit a7376c9

2 files changed

Lines changed: 23 additions & 1 deletion

File tree

ChangeLog

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,25 @@
1+
2016-05-06, Version 0.12.14 (Maintenance), @rvagg
2+
3+
Notable changes:
4+
5+
* npm: Correct erroneous version number in v2.15.1 code (Forrest L Norvell) https://github.com/nodejs/node/pull/5988
6+
* openssl: Upgrade to v1.0.1t, addressing security vulnerabilities (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
7+
- Fixes CVE-2016-2107 "Padding oracle in AES-NI CBC MAC check"
8+
- Fixes CVE-2016-2105 "EVP_EncodeUpdate overflow"
9+
- See https://nodejs.org/en/blog/vulnerability/openssl-may-2016/ for full details
10+
11+
Commits:
12+
13+
* [3e99ee1b47] - deps: completely upgrade npm in LTS to 2.15.1 (Forrest L Norvell) https://github.com/nodejs/node/pull/5988
14+
* [2b63396e1f] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) https://github.com/joyent/node/pull/25368
15+
* [f21705df58] - deps: update openssl asm files (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
16+
* [02b6a6bc27] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) https://github.com/joyent/node/pull/25654
17+
* [1aecc668b0] - deps: separate sha256/sha512-x86_64.pl for openssl (Shigeki Ohtsu) https://github.com/joyent/node/pull/25654
18+
* [39380836a0] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
19+
* [08c8ae44a8] - deps: upgrade openssl sources to 1.0.1t (Shigeki Ohtsu) https://github.com/nodejs/node/pull/6553
20+
* [f5a961ab13] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) https://github.com/joyent/node/pull/25654
21+
* [810fb211a7] - tools: remove obsolete npm test-legacy command (Kat Marchán) https://github.com/nodejs/node/pull/5988
22+
123
2016-03-31, Version 0.12.13 (LTS), @rvagg
224

325
Notable changes:

src/node_version.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626
#define NODE_MINOR_VERSION 12
2727
#define NODE_PATCH_VERSION 14
2828

29-
#define NODE_VERSION_IS_RELEASE 0
29+
#define NODE_VERSION_IS_RELEASE 1
3030

3131
#ifndef NODE_STRINGIFY
3232
#define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)

0 commit comments

Comments
 (0)