Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v4.8.7 proposal #17534

Merged
merged 8 commits into from Dec 8, 2017
Merged

v4.8.7 proposal #17534

merged 8 commits into from Dec 8, 2017

Commits on Dec 7, 2017

  1. deps: upgrade openssl sources to 1.0.2n 

    This replaces all sources of openssl-1.0.2n.tar.gz into
deps/openssl/openssl

PR-URL: #17526
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    @shigeki @MylesBorins
    shigeki authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    b3afedf View commit details
    Browse the repository at this point in the history

  2. deps: copy all openssl header files to include dir 

    All symlink files in `deps/openssl/openssl/include/openssl/`
are removed and replaced with real header files to avoid
issues on Windows. Two files of opensslconf.h in crypto and
include dir are replaced to refer config/opensslconf.h.

PR-URL: #17526
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    @shigeki @MylesBorins
    shigeki authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    dd6a2df View commit details
    Browse the repository at this point in the history

  3. deps: fix openssl assembly error on ia32 win32 

    `x86masm.pl` was mistakenly using .486 instruction set, why `cpuid` (and
perhaps others) are requiring .686 .

Fixes: #589
PR-URL: #1389
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
    @indutny @MylesBorins
    indutny authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    b0ed4c5 View commit details
    Browse the repository at this point in the history

  4. deps: fix asm build error of openssl in x86_win32 

    See
https://mta.openssl.org/pipermail/openssl-dev/2015-February/000651.html

iojs needs to stop using masm and move to nasm or yasm on Win32.

Fixes: #589
PR-URL: #1389
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    @MylesBorins
    Shigeki Ohtsu authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    3e6b0b0 View commit details
    Browse the repository at this point in the history

  5. openssl: fix keypress requirement in apps on win32 

    Reapply b910613 .

Fixes: #589
PR-URL: #1389
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    @MylesBorins
    Shigeki Ohtsu authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    f7eb162 View commit details
    Browse the repository at this point in the history

  6. deps: add -no_rand_screen to openssl s_client 

    In openssl s_client on Windows, RAND_screen() is invoked to initialize
random state but it takes several seconds in each connection.
This added -no_rand_screen to openssl s_client on Windows to skip
RAND_screen() and gets a better performance in the unit test of
test-tls-server-verify.
Do not enable this except to use in the unit test.

Fixes: #1461
PR-URL: #1836
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    @MylesBorins
    Shigeki Ohtsu authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    eacd090 View commit details
    Browse the repository at this point in the history

  7. deps: update openssl asm and asm_obsolete files 

    Regenerate asm files with Makefile and CC=gcc and ASM=nasm where gcc
version was 5.4.0 and nasm version was 2.11.08.

Also asm files in asm_obsolete dir to support old compiler and
assembler are regenerated without CC and ASM envs.

PR-URL: #17526
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    @shigeki @MylesBorins
    shigeki authored and MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    4f8fae3 View commit details
    Browse the repository at this point in the history

  8. 2017-12-08, Version 4.8.7 'Argon' (LTS) 

    This is a security release. All Node.js users should consult the
security release summary at
https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/
for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

* CVE-2017-15896
* CVE-2017-3738 (from the openssl project)

Notable Changes:

* deps:
  * openssl updated to 1.0.2n (Shigeki Ohtsu)
    #17526

PR-URL: #17534
    @MylesBorins
    MylesBorins committed Dec 7, 2017
    Configuration menu
    Copy the full SHA
    e6ea634 View commit details
    Browse the repository at this point in the history