Node v6.2.1 (Current) 发布了。改进记录如下:
- buffer: Ignore negative lengths in calls to
Buffer()
andBuffer.allocUnsafe()
. This fixes a possible security concern (reported by Feross Aboukhadijeh) where user input is passed unchecked to the Buffer constructor orallocUnsafe()
as it can expose parts of the memory slab used by other Buffers in the application. Note that negative lengths are not supported by the Buffer API and user input to the constructor should always be sanitised and type-checked. (Anna Henningsen)#7051 - npm: Upgrade npm to 3.9.3 (Kat Marchán) #7030
npm/npm@42d71be
npm/npm#12685 When usingnpm ls <pkg>
without a semver specifier,npm ls
would skip any packages in your tree that matched by name, but had a prerelease version in theirpackage.json
. (@zkat)npm/npm@f04e05
npm/npm#10013read-package-tree@5.1.4
: Fixes an issue wherenpm install
would fail if yournode_modules
was symlinked. (@iarna)b894413
#12372 Changing a nested dependency in annpm-shrinkwrap.json
and then runningnpm install
would not get up the updated package. This corrects that. (@misterbyrne)- This release includes
npm@3.9.0
, which is the result of our Windows testing push — the test suite (should) pass on Windows now. We’re working on getting AppVeyor to a place where we can just rely on it like Travis.
- tty: Default to blocking mode for stdio on OS X. A bug fix in libuv 1.9.0, introduced in Node.js v6.0.0, exposed problems with Node’s use of non-blocking stdio, particularly on OS X which has a small output buffer. This change should fix CLI applications that have been having problems with output since Node.js v6.0.0 on OS X. The core team is continuing to address stdio concerns that exist across supported platforms and progress can be tracked athttps://github.com/nodejs/node/issues/6980. (Jeremiah Senkpiel) #6895
- V8: Upgrade to V8 5.0.71.52. This includes a fix that addresses problems experienced by users of node-inspector since Node.js v6.0.0, see https://github.com/node-inspector/node-inspector/issues/864 for details. (Michaël Zasso) #6928
更多信息,查看完整发布说明。
下载地址:
Windows 32-bit Installer: https://nodejs.org/dist/v6.2.1/node-v6.2.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v6.2.1/node-v6.2.1-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v6.2.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v6.2.1/win-x64/node.exe
Mac OS X 64-bit Installer: https://nodejs.org/dist/v6.2.1/node-v6.2.1.pkg
Mac OS X 64-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-darwin-x64.tar.gz
Linux 32-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-x86.tar.xz
Linux 64-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-ppc64le.tar.xz
SunOS 32-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-sunos-x86.tar.xz
SunOS 64-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-sunos-x64.tar.xz
ARMv6 32-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-armv6l.tar.xz
ARMv7 32-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v6.2.1/node-v6.2.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v6.2.1/node-v6.2.1.tar.gz
Other release files: https://nodejs.org/dist/v6.2.1/
Documentation: https://nodejs.org/docs/v6.2.1/api/