Node v4.1.1 (Stable) 发布

Node v4.1.1 (Stable) 发布，主要更新内容如下：

• buffer: Fixed a bug introduced in v4.1.0 where allocating a new zero-length buffer can result in the next allocation of a TypedArray in JavaScript not being zero-filled. In certain circumstances this could result in data leakage via reuse of memory space in TypedArrays, breaking the normally safe assumption that TypedArrays should be always zero-filled. (Trevor Norris) #2931.

• http: Guard against response-splitting of HTTP trailing headers added via response.addTrailers() by removing new-line ([\r\n]) characters from values. Note that standard header values are already stripped of new-line characters. The expected security impact is low because trailing headers are rarely used. (Ben Noordhuis) #2945.

• npm: 升级到 npm 2.14.4, 详情请看 release notes  (Kat Marchán) #2958

• Upgrades graceful-fs on multiple dependencies to no longer rely on monkey-patching fs

• Fix npm link for pre-release / RC builds of Node

• v8: 更新事后检验元数据，运行事后检验调试工具的搜索和检查:

• JavaScript objects that use dictionary properties (Julien Gilli) #2959

• ScopeInfo and thus closures (Julien Gilli) #2974

更多内容请查看：发行说明。

下载地址：