Skip to content

Commit 5ecac2c

Browse files
BethGriggsBethGriggs
authored
Blog: v12.15.0 release post (#2934)
Refs: nodejs-private/node-private#197
1 parent b9602ab commit 5ecac2c

1 file changed

Lines changed: 108 additions & 0 deletions

File tree

‎locale/en/blog/release/v12.15.0.md‎

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
---
2+
date: 2020-02-06T03:13:05.970Z
3+
version: 12.15.0
4+
category: release
5+
title: Node v12.15.0 (LTS)
6+
slug: node-v12-15-0
7+
layout: blog-post.hbs
8+
author: Bethany Nicolle Griggs
9+
---
10+
11+
### Notable changes
12+
13+
This is a security release.
14+
15+
Vulnerabilities fixed:
16+
* **CVE-2019-15606**: HTTP header values do not have trailing OWS trimmed.
17+
* **CVE-2019-15605**: HTTP request smuggling using malformed Transfer-Encoding header.
18+
* **CVE-2019-15604**: Remotely trigger an assertion on a TLS server with a malformed certificate string.
19+
20+
Also, HTTP parsing is more strict to be more secure. Since this may
21+
cause problems in interoperability with some non-conformant HTTP
22+
implementations, it is possible to disable the strict checks with the
23+
`--insecure-http-parser` command line flag, or the `insecureHTTPParser`
24+
http option. Using the insecure HTTP parser should be avoided.
25+
26+
### Commits
27+
28+
* [[`209767c7a2`](https://github.com/nodejs/node/commit/209767c7a2)] - **benchmark**: support optional headers with wrk (Sam Roberts) [nodejs-private/node-private#189](https://github.com/nodejs-private/node-private/pull/189)
29+
* [[`02c8905051`](https://github.com/nodejs/node/commit/02c8905051)] - **crypto**: fix assertion caused by unsupported ext (Fedor Indutny) [nodejs-private/node-private#175](https://github.com/nodejs-private/node-private/pull/175)
30+
* [[`25d6011912`](https://github.com/nodejs/node/commit/25d6011912)] - **deps**: update llhttp to 2.0.4 (Beth Griggs) [nodejs-private/llhttp-private#1](https://github.com/nodejs-private/llhttp-private/pull/1)
31+
* [[`8162f0e194`](https://github.com/nodejs/node/commit/8162f0e194)] - **deps**: upgrade http-parser to v2.9.3 (Sam Roberts) [nodejs-private/http-parser-private#4](https://github.com/nodejs-private/http-parser-private/pull/4)
32+
* [[`d41314ef99`](https://github.com/nodejs/node/commit/d41314ef99)] - **(SEMVER-MINOR)** **deps**: upgrade http-parser to v2.9.1 (Sam Roberts) [#30473](https://github.com/nodejs/node/pull/30473)
33+
* [[`7fc565666c`](https://github.com/nodejs/node/commit/7fc565666c)] - **(SEMVER-MINOR)** **http**: make --insecure-http-parser configurable per-stream or per-server (Anna Henningsen) [#31448](https://github.com/nodejs/node/pull/31448)
34+
* [[`496736ff78`](https://github.com/nodejs/node/commit/496736ff78)] - **(SEMVER-MINOR)** **http**: opt-in insecure HTTP header parsing (Sam Roberts) [#30567](https://github.com/nodejs/node/pull/30567)
35+
* [[`76fd8910e9`](https://github.com/nodejs/node/commit/76fd8910e9)] - **http**: strip trailing OWS from header values (Sam Roberts) [nodejs-private/node-private#189](https://github.com/nodejs-private/node-private/pull/189)
36+
* [[`9cd155eb4a`](https://github.com/nodejs/node/commit/9cd155eb4a)] - **test**: using TE to smuggle reqs is not possible (Sam Roberts) [nodejs-private/node-private#192](https://github.com/nodejs-private/node-private/pull/192)
37+
* [[`ab1fcb89cb`](https://github.com/nodejs/node/commit/ab1fcb89cb)] - **test**: check that --insecure-http-parser works (Sam Roberts) [#31253](https://github.com/nodejs/node/pull/31253)
38+
39+
Windows 32-bit Installer: https://nodejs.org/dist/v12.15.0/node-v12.15.0-x86.msi<br>
40+
Windows 64-bit Installer: https://nodejs.org/dist/v12.15.0/node-v12.15.0-x64.msi<br>
41+
Windows 32-bit Binary: https://nodejs.org/dist/v12.15.0/win-x86/node.exe<br>
42+
Windows 64-bit Binary: https://nodejs.org/dist/v12.15.0/win-x64/node.exe<br>
43+
macOS 64-bit Installer: https://nodejs.org/dist/v12.15.0/node-v12.15.0.pkg<br>
44+
macOS 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-darwin-x64.tar.gz<br>
45+
Linux 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-linux-x64.tar.xz<br>
46+
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-linux-ppc64le.tar.xz<br>
47+
Linux s390x 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-linux-s390x.tar.xz<br>
48+
AIX 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-aix-ppc64.tar.gz<br>
49+
SmartOS 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-sunos-x64.tar.xz<br>
50+
ARMv7 32-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-linux-armv7l.tar.xz<br>
51+
ARMv8 64-bit Binary: https://nodejs.org/dist/v12.15.0/node-v12.15.0-linux-arm64.tar.xz<br>
52+
Source Code: https://nodejs.org/dist/v12.15.0/node-v12.15.0.tar.gz<br>
53+
Other release files: https://nodejs.org/dist/v12.15.0/<br>
54+
Documentation: https://nodejs.org/docs/v12.15.0/api/
55+
56+
### SHASUMS
57+
58+
```
59+
-----BEGIN PGP SIGNED MESSAGE-----
60+
Hash: SHA256
61+
62+
4674d94402b8c0d79a9e20d4320652830032f0a7171cea2c815858b76d3d2ee9 node-v12.15.0-aix-ppc64.tar.gz
63+
b6449cec39ac15b37abe4e59ef0eae50dcdfbf060c5276a01cc590f2a3372b7d node-v12.15.0-darwin-x64.tar.gz
64+
fc2b68255c61663fe74338d372678fbb1fec367fef46924498e6d1b5e220c0b1 node-v12.15.0-darwin-x64.tar.xz
65+
48e8ba40339e6cb9edc820f320b690b3401643e2c6bd36a7f2267ebf84cf98f2 node-v12.15.0-headers.tar.gz
66+
44217fee8c0d003888783f65c36eec871d36b93d7347333b659633e30cbd85db node-v12.15.0-headers.tar.xz
67+
9349bb00a522da9ecd0d2f9453b500904ccd56e271852ab2defb51a8c77a1aca node-v12.15.0-linux-arm64.tar.gz
68+
c582cb65a0ec7f648618d3d33b4f87c374a3f930518b57eca1693828c965d6e5 node-v12.15.0-linux-arm64.tar.xz
69+
53c4b21b23b8dc31da0ab9b5bdae7041d87fd7b7247e0b6cecaca36ca1d7e05d node-v12.15.0-linux-armv7l.tar.gz
70+
a865e69914c568fcb28be7a1bf970236725a06a8fc66530799300181d2584a49 node-v12.15.0-linux-armv7l.tar.xz
71+
91c4d019e2c86d088fcb0874f3dab6a074c354d4fe0fcce1fa2f535c86396f5e node-v12.15.0-linux-ppc64le.tar.gz
72+
9b0c4faf637e9cd272964052933e7ff2ca05c50d89a473cf6f40031f55783fd0 node-v12.15.0-linux-ppc64le.tar.xz
73+
3594746ef6a98d21e56b4f1c7a60526c53fd97750c9ba2347ffc3df24ea3b21a node-v12.15.0-linux-s390x.tar.gz
74+
30f150720cc1a9f53d4d9a881961431428603dfe151cd487cdaec555f29db0c7 node-v12.15.0-linux-s390x.tar.xz
75+
218279a33603b8bc958c46cce04c14851fd9d685bd21f5a39d6b98d08d80aae5 node-v12.15.0-linux-x64.tar.gz
76+
63df953deb091c1500e1044bef01d1953117970e757e74e90d915e1a4a0d1c9c node-v12.15.0-linux-x64.tar.xz
77+
f3c3103bcceb33898a8bc44c54d337c5bcb709dcdca95408e9307b6d4a86ca31 node-v12.15.0.pkg
78+
4783ba63bcdfb8fa54cd4526401051df32835dc112cf7c11d64d98451ece20a6 node-v12.15.0-sunos-x64.tar.gz
79+
b14aab80ccdf268f6347b17bd449217139fe46df3cceac00960e59ef835cec8b node-v12.15.0-sunos-x64.tar.xz
80+
fb357de9262f60425ea3970dd09afd63312006a7b8355a808d358694e867f4fd node-v12.15.0.tar.gz
81+
d2fb4fa80ccf321570552b0a6e6b5f2aedeb281a8450207b057cf54c54d5a81b node-v12.15.0.tar.xz
82+
5b7d4beb9fc4c16b08b06de394b738caeec94f3d22d38f78ca02f386b9897f83 node-v12.15.0-win-x64.7z
83+
48b29cab597962f12b0aac081522e6192bc8642c582cd0fc1bf51557273888da node-v12.15.0-win-x64.zip
84+
a033ff4501155b3f0d63f08a40bf02d3bebd98485895ffd0cb638c6071eb6f6c node-v12.15.0-win-x86.7z
85+
e76057fda953d964e9f53c1a210ca4daf7104072574744616eb079e053a0d3d9 node-v12.15.0-win-x86.zip
86+
615fe16ec99ebb7de92cb0e1c343979f7ac9d943373e61cff17cd6a9f76547e8 node-v12.15.0-x64.msi
87+
f558f19deea306c6caf167a687fe1ee65c4b191b1d327188c7f0d9fa7966d818 node-v12.15.0-x86.msi
88+
51d09b8ce41fa3e6b7206141609e52e92f435b99e44932592cd529a9463bbf17 win-x64/node.exe
89+
bd0c3ac36b1e484ddbc3de5e04abe399c1221057fabf16e74155b44af012504d win-x64/node.lib
90+
9a644dfb80d9d6a4e01e83993b8c5de219130a39e5324ea78696d0ca7303c3bb win-x64/node_pdb.7z
91+
7f7e3cff51f3d475e9f5427a74968cb83b2ef9625bcea006a9ac8ea1bc4fdf96 win-x64/node_pdb.zip
92+
839ef38f0ed23a9dcca4f0a807e205f95e26370f35ec9ea9915721c06eda04f2 win-x86/node.exe
93+
95fd2202f2ba9695cf4db59e932f50d3c96052e1d171797dfa955e348d96df1f win-x86/node.lib
94+
d3659e3381a6c6fa7eec2ee0b340bc6049e47f23c055ef0d724d25bacabe4fdc win-x86/node_pdb.7z
95+
cf15fcc38600ef4dc89c9a6e9eeb58a44ca35f9a59d9823dd0f839a8d6ee95d4 win-x86/node_pdb.zip
96+
-----BEGIN PGP SIGNATURE-----
97+
98+
iQEzBAEBCAAdFiEETtd49TnjY0x3nIfG1wYoSKGrAFwFAl47g5kACgkQ1wYoSKGr
99+
AFxTTAf+KUOw9HAEJkE+e6VF3S3bnadaT0ItS42lyOIqaRgeIVh15HR3vi4+KBc3
100+
3ifsE7b8blLBFiyX/TQWl4prlK/fRvPmw9Q6VMpiu/qqdiwGFncAjhGiJBEJBGFs
101+
9jdQJbHnL0n7UTNQcBPljWEk9JHvyExRFn+WFY52VEV6R2jO1FtWoMEwj1HEA73Y
102+
ICiwVss0gduFiYVrBghLtC7BaI/gtf3Z5XTon07cB+cXXQqnZJCSLDitXGdk7Iwk
103+
kHmTrLligB0iWnNffQtAkfvjqXJith9Ya2hPQhZJsdz16U+L3K5q59s6jeOdrgv9
104+
L1vXMNIioydW/l9BcN4FjTrhm35CSg==
105+
=oRsp
106+
-----END PGP SIGNATURE-----
107+
108+
```

0 commit comments

Comments
 (0)