Node v4.3.2 (LTS)
Myles Borins
Notable changes
- openssl: Upgrade from 1.0.2f to 1.0.2g (Ben Noordhuis) #5507
- Fix a double-free defect in parsing malformed DSA keys that may potentially be used for DoS or memory corruption attacks. It is likely to be very difficult to use this defect for a practical attack and is therefore considered low severity for Node.js users. More info is available at CVE-2016-0705.
- Fix a defect that can cause memory corruption in certain very rare cases relating to the internal
BN_hex2bn()andBN_dec2bn()functions. It is believed that Node.js is not invoking the code paths that use these functions so practical attacks via Node.js using this defect are unlikely to be possible. More info is available at CVE-2016-0797. - Fix a defect that makes the CacheBleed Attack possible. This defect enables attackers to execute side-channel attacks leading to the potential recovery of entire RSA private keys. It only affects the Intel Sandy Bridge (and possibly older) microarchitecture when using hyper-threading. Newer microarchitectures, including Haswell, are unaffected. More info is available at CVE-2016-0702.
Commits
- [
c133797d09] - deps: upgrade openssl to 1.0.2g (Ben Noordhuis) #5507
Windows 32-bit Installer: https://nodejs.org/dist/v4.3.2/node-v4.3.2-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v4.3.2/node-v4.3.2-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v4.3.2/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v4.3.2/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v4.3.2/node-v4.3.2.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-ppc64le.tar.xz
SmartOS 32-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-sunos-x86.tar.xz
SmartOS 64-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v4.3.2/node-v4.3.2-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v4.3.2/node-v4.3.2.tar.gz
Other release files: https://nodejs.org/dist/v4.3.2/
Documentation: https://nodejs.org/docs/v4.3.2/api/
Shasums (GPG signing hash: SHA512, file hash: SHA256):
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
6380a36500de02a48758f204c1c5931af986d93609cfa06db1f91216bec9a5eb node-v4.3.2-darwin-x64.tar.gz
47109a00cac344d80296c195451bb5eee7c21727fcef1594384ddfe1f852957a node-v4.3.2-darwin-x64.tar.xz
f532e7cd3886ac9fdc774cc2add0db21483052c966a23aace7c84ec69b91981f node-v4.3.2-headers.tar.gz
1f7c9a25c224ff3ce2da0cc858d813ba4359c3b6114e125b5c0abfcc6388a130 node-v4.3.2-headers.tar.xz
5d86c21d47cad54e3e5d7f36c1323b1e2416efc75e4615dafe35b202b59f26c8 node-v4.3.2-linux-arm64.tar.gz
606e85821fc88f389a20d4ed4e8e483d1e7627e808dada59931b282768041fb7 node-v4.3.2-linux-arm64.tar.xz
f8767c0bacc0ed516bfa22802dda573082b5bf463e5ea79a74087272ccb2d1e2 node-v4.3.2-linux-armv6l.tar.gz
3ea0b359efdb58ba693fdd67382ff0c086ee03899cde78c8aa2f29630c4d79fd node-v4.3.2-linux-armv6l.tar.xz
f4d5b9ae277aaec50cdbb735480ec1a04e6e02bd820e2a1fcfa913c0c25f2e3d node-v4.3.2-linux-armv7l.tar.gz
4e8cae9f7ad94edcc4eb29c9cfcf9e1e1f4cdd5a40156573d77ab352465a74c7 node-v4.3.2-linux-armv7l.tar.xz
568b13ae13588853cbf49b7a0772698bf50b6de1168f76cd7a7cd7d7d7ada7c7 node-v4.3.2-linux-ppc64le.tar.gz
a648fab221101408e5a2a740674686816c5ef26c9d3884c1c444fc14c3040b65 node-v4.3.2-linux-ppc64le.tar.xz
f307f173a96dff6652bc70d835af0c732864bb09875cf32a0b6ce7d70cebf77d node-v4.3.2-linux-x64.tar.gz
4350d0431b49697517c6cca5d66adf5f74eb9101c52f52ae959fa94225822d44 node-v4.3.2-linux-x64.tar.xz
3c668a2128db3982987c596c028f9ec1d08c6abf63502e24826d40e552f80a8c node-v4.3.2-linux-x86.tar.gz
ea45ccb7cf334789727dc5a1d1dfb0fa325e88de0b4a06d211dad6cb57c36e33 node-v4.3.2-linux-x86.tar.xz
f27eda062619f624d198012735cd996bbe7999715dbed1d6e47f3dbc4529b7a6 node-v4.3.2.pkg
80fdaa0c54b187d43933336b334b70bcbb79953350510006b07dbaa019929188 node-v4.3.2-sunos-x64.tar.gz
632d45df9172e54feeba5d5400220f946daf2023c282fb2527a3ff0b1e93be8f node-v4.3.2-sunos-x64.tar.xz
04705681dde835c383028bc5bab3cab9d14dd7977e062ac824c2cfaf999f7c43 node-v4.3.2-sunos-x86.tar.gz
1ad766e22773f3ad9ac2274fbf2f277e24d1234957a358e64bea2ea3ce6fe66a node-v4.3.2-sunos-x86.tar.xz
1f92f6d31f7292ce56db57d6703efccf3e6c945948f5901610cefa69e78d3498 node-v4.3.2.tar.gz
f0c5761a7e4f520ab8793cb2dcabbd7dfd7f5839ce4f2cf79d9d52d1c2da5bca node-v4.3.2.tar.xz
49abd7e2855b4d124ad87f48162f6c0f0b26048bef17e1ab8f4ec8144d6914f3 node-v4.3.2-x64.msi
206ef690925231c9a527aeffc5b2c3d77d2497d91f581a21ba9689bfff9556a1 node-v4.3.2-x86.msi
606c44c42d17866c017c50c0afadad411d9492ac4281d2431b937f881911614e win-x64/node.exe
451a40570099a95488d6438f175813629e0430f87f23c8659bc18dc42494820a win-x64/node.lib
e41d283a6e3999dcf90742e97dd5d858a6b9d2b767087a4ef0087c0ed82f9bd9 win-x86/node.exe
1a6f27f9cee7dc117c51eb1a9c2b1ab336020fd46673b87c4bf2719ef4d2d00c win-x86/node.lib
-----BEGIN PGP SIGNATURE-----
iQEcBAEBAgAGBQJW11/yAAoJEJM7AfQLXKlGYDYH/11wCIjqnoJq/mrx++DkwTPH
/xcS6GPg+M6okP/+12BDxzJ3veMBCXFEe21wKcX68B7vzc9QyfcWR/FDbuu3Jpwl
nhY0GwA8KqKQwKKl8ecchORWvVCX+b6D6bSSuC1gnO3w0C88usV0MLvdje2WjKdM
Rg4fy/lzwpNp63yxghwuEwqemxoAt/B/KlJhRqDktcHnsJC4RL8gRr5CXa5E0l81
ph71mN4nLnES9kYSwb7+XoXsbTXGwRMiWHjjT8s2DP3Tn+WeE1JJzT7JLRRN89KF
rUnjnEW/76Rb4mk+9W8S30wdBBNEUL0JXAqlEQGANcp5Kdpr1SwwkDoaWSZOprc=
=hltr
-----END PGP SIGNATURE-----