diff --git a/CHANGELOG.md b/CHANGELOG.md index e2d115311e646d..e9d89a6776e915 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -85,7 +85,8 @@ release. 8.0.0
-6.15.0
+6.15.1
+6.15.0
6.14.4
6.14.3
6.14.2
diff --git a/doc/changelogs/CHANGELOG_V6.md b/doc/changelogs/CHANGELOG_V6.md index 1b245b32b86a96..c2806db4cb08a6 100644 --- a/doc/changelogs/CHANGELOG_V6.md +++ b/doc/changelogs/CHANGELOG_V6.md @@ -10,6 +10,7 @@ +6.15.1
6.15.0
6.14.4
6.14.3
@@ -74,6 +75,17 @@ [Node.js Long Term Support Plan](https://github.com/nodejs/LTS) and will be supported actively until April 2018 and maintained until April 2019. + +## 2018-12-03, Version 6.15.1 'Boron' (LTS), @rvagg + +### Notable Changes + +This is a patch release to address a bad backport of the fix for "Slowloris HTTP Denial of Service" (CVE-2018-12122). Node.js 6.15.0 misapplies the headers timeout to an entire keep-alive HTTP session, resulting in prematurely disconnected sockets. + +### Commits + +* [[`5d9005c359`](https://github.com/nodejs/node/commit/5d9005c359)] - **http**: fix backport of Slowloris headers (Matteo Collina) [#24796](https://github.com/nodejs/node/pull/24796) + ## 2018-11-27, Version 6.15.0 'Boron' (LTS), @rvagg