{"action":"created","comment":{"url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/comments/82627723","pull_request_review_id":3520848,"id":82627723,"diff_hunk":"@@ -0,0 +1,113 @@\n+---\n+category: articles\n+title: Node v0.10.47(유지보수)\n+author: Rod Vagg\n+ref: Node v0.10.47 (Maintenance)\n+refurl: https://nodejs.org/en/blog/release/v0.10.47\n+translator: marocchino\n+---\n+\n+<!-- **This is an important security release**. All Node.js users should consult the [security release summary](https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/) at for details on patched vulnerabilities. -->\n+\n+**중요한 보안 릴리스입니다**. 모든 Node.js 사용자는 수정된 취약점에 대한 자세한 내용을 [보안 릴리스 요약](https://nodejs.github.io/nodejs-ko/articles/2016/09/25/security-updates-for-all-active-release-lines-september-2016/)에서 확인하세요.\n+\n+<!-- ### Notable changes: -->\n+\n+### 주요 변경사항:\n+\n+<!--\n+* buffer: Zero-fill excess bytes in new `Buffer` objects created with `Buffer.concat()` while providing a `totalLength` parameter that exceeds the total length of the original `Buffer` objects being concatenated. (Сковорода Никита Андреевич)\n+* http:\n+  - CVE-2016-5325 - Properly validate for allowable characters in the `reason` argument in `ServerResponse#writeHead()`. Fixes a possible response splitting attack vector. This introduces a new case where `throw` may occur when configuring HTTP responses, users should already be adopting try/catch here. Originally reported independently by Evan Lucas and Romain Gaucher. (Evan Lucas)\n+  - Invalid status codes can no longer be sent. Limited to 3 digit numbers between 100 - 999. Lack of proper validation may also serve as a potential response splitting attack vector. Backported from v4.x. (Brian White)\n+* openssl: Upgrade to 1.0.1u, fixes a number of defects impacting Node.js: CVE-2016-6304 (\"OCSP Status Request extension unbounded memory growth\", high severity), CVE-2016-2183, CVE-2016-2183, CVE-2016-2178 and CVE-2016-6306.\n+* tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of `*.` in the wildcard string. Originally reported by Alexander Minozhenko and James Bunton (Atlassian) (Ben Noordhuis)\n+-->\n+\n+* buffer: `Buffer.concat()`으로 생성된 새 `Buffer` 객체에 원본 `Buffer` 객체의 총 길이를 초과하는 `totalLength` 파라미터를 넘길 때 초과된 바이트에 0를 채워넣습니다.(Сковорода Никита Андреевич)\n+* http:\n+  - CVE-2016-5325 - `ServerResponse#writeHead()`의 `reason` 인자의 허용된 문자를 올바르게 검증합니다. 응답 분리(response splitting) 공격의 가능성을 수정했습니다. 이 변경으로 HTTP 응답 설정에서 `throw`가 발생할 수 있습니다. 사용자는 이 부분에 try/catch를 적용하셔야 합니다. Evan Lucas, Romain Gaucher가 각각 처음 보고했습니다.(Evan Lucas)\n+  - 이제 부적절한 상태 코드를 보낼 수 없습니다. 100 - 999 사이의 3자리 수로 제한됩니다. 적절한 검증이 없으면 응답 분절 공격을 받을 가능성이 있습니다. v4.x에서 백포트 했습니다. (Brian White)\n+* openssl: 1.0.1u로 업그레이드, Node.js에 영향을 주는 몇몇 결함 CVE-2016-6304(\"OCSP 상태 요청이 무한 메모리 증가로 확장, 높은 심각도), CVE-2016-2183, CVE-2016-6303, CVE-2016-2178, CVE-2016-6306을 수정했습니다.","path":"source/_posts/2016-09-28-release-v0.10.47.md","position":30,"original_position":31,"commit_id":"cfe9c1bd0d2bf2474adb87c64e7b437ff1ba257c","original_commit_id":"cfe9c1bd0d2bf2474adb87c64e7b437ff1ba257c","user":{"login":"yous","id":853977,"avatar_url":"https://avatars.githubusercontent.com/u/853977?v=3","gravatar_id":"","url":"https://api.github.com/users/yous","html_url":"https://github.com/yous","followers_url":"https://api.github.com/users/yous/followers","following_url":"https://api.github.com/users/yous/following{/other_user}","gists_url":"https://api.github.com/users/yous/gists{/gist_id}","starred_url":"https://api.github.com/users/yous/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yous/subscriptions","organizations_url":"https://api.github.com/users/yous/orgs","repos_url":"https://api.github.com/users/yous/repos","events_url":"https://api.github.com/users/yous/events{/privacy}","received_events_url":"https://api.github.com/users/yous/received_events","type":"User","site_admin":false},"body":"- \"OCSP 상태 요청이 ... 확장 → \"OCSP 상태 요청이 ... 확장\"\r\n- 원문에 'CVE-2016-2183'이 두 번 나오는데 원문 쪽이 잘못된 건가요?","created_at":"2016-10-10T15:32:55Z","updated_at":"2016-10-10T15:32:55Z","html_url":"https://github.com/nodejs/nodejs-ko/pull/438#discussion_r82627723","pull_request_url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438","_links":{"self":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/comments/82627723"},"html":{"href":"https://github.com/nodejs/nodejs-ko/pull/438#discussion_r82627723"},"pull_request":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438"}}},"pull_request":{"url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438","id":88188860,"html_url":"https://github.com/nodejs/nodejs-ko/pull/438","diff_url":"https://github.com/nodejs/nodejs-ko/pull/438.diff","patch_url":"https://github.com/nodejs/nodejs-ko/pull/438.patch","issue_url":"https://api.github.com/repos/nodejs/nodejs-ko/issues/438","number":438,"state":"open","locked":false,"title":"Translates security release news","user":{"login":"marocchino","id":128431,"avatar_url":"https://avatars.githubusercontent.com/u/128431?v=3","gravatar_id":"","url":"https://api.github.com/users/marocchino","html_url":"https://github.com/marocchino","followers_url":"https://api.github.com/users/marocchino/followers","following_url":"https://api.github.com/users/marocchino/following{/other_user}","gists_url":"https://api.github.com/users/marocchino/gists{/gist_id}","starred_url":"https://api.github.com/users/marocchino/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marocchino/subscriptions","organizations_url":"https://api.github.com/users/marocchino/orgs","repos_url":"https://api.github.com/users/marocchino/repos","events_url":"https://api.github.com/users/marocchino/events{/privacy}","received_events_url":"https://api.github.com/users/marocchino/received_events","type":"User","site_admin":false},"body":"close #432, #431 and #430 ","created_at":"2016-10-06T02:18:32Z","updated_at":"2016-10-10T15:35:32Z","closed_at":null,"merged_at":null,"merge_commit_sha":"3ddcde61f072918658d8870422b430b1cf088579","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438/commits","review_comments_url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438/comments","review_comment_url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/comments{/number}","comments_url":"https://api.github.com/repos/nodejs/nodejs-ko/issues/438/comments","statuses_url":"https://api.github.com/repos/nodejs/nodejs-ko/statuses/cfe9c1bd0d2bf2474adb87c64e7b437ff1ba257c","head":{"label":"marocchino:security-news","ref":"security-news","sha":"cfe9c1bd0d2bf2474adb87c64e7b437ff1ba257c","user":{"login":"marocchino","id":128431,"avatar_url":"https://avatars.githubusercontent.com/u/128431?v=3","gravatar_id":"","url":"https://api.github.com/users/marocchino","html_url":"https://github.com/marocchino","followers_url":"https://api.github.com/users/marocchino/followers","following_url":"https://api.github.com/users/marocchino/following{/other_user}","gists_url":"https://api.github.com/users/marocchino/gists{/gist_id}","starred_url":"https://api.github.com/users/marocchino/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marocchino/subscriptions","organizations_url":"https://api.github.com/users/marocchino/orgs","repos_url":"https://api.github.com/users/marocchino/repos","events_url":"https://api.github.com/users/marocchino/events{/privacy}","received_events_url":"https://api.github.com/users/marocchino/received_events","type":"User","site_admin":false},"repo":{"id":30640801,"name":"nodejs-ko","full_name":"marocchino/nodejs-ko","owner":{"login":"marocchino","id":128431,"avatar_url":"https://avatars.githubusercontent.com/u/128431?v=3","gravatar_id":"","url":"https://api.github.com/users/marocchino","html_url":"https://github.com/marocchino","followers_url":"https://api.github.com/users/marocchino/followers","following_url":"https://api.github.com/users/marocchino/following{/other_user}","gists_url":"https://api.github.com/users/marocchino/gists{/gist_id}","starred_url":"https://api.github.com/users/marocchino/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marocchino/subscriptions","organizations_url":"https://api.github.com/users/marocchino/orgs","repos_url":"https://api.github.com/users/marocchino/repos","events_url":"https://api.github.com/users/marocchino/events{/privacy}","received_events_url":"https://api.github.com/users/marocchino/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/marocchino/nodejs-ko","description":"io.js 한국어 번역팀","fork":true,"url":"https://api.github.com/repos/marocchino/nodejs-ko","forks_url":"https://api.github.com/repos/marocchino/nodejs-ko/forks","keys_url":"https://api.github.com/repos/marocchino/nodejs-ko/keys{/key_id}","collaborators_url":"https://api.github.com/repos/marocchino/nodejs-ko/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/marocchino/nodejs-ko/teams","hooks_url":"https://api.github.com/repos/marocchino/nodejs-ko/hooks","issue_events_url":"https://api.github.com/repos/marocchino/nodejs-ko/issues/events{/number}","events_url":"https://api.github.com/repos/marocchino/nodejs-ko/events","assignees_url":"https://api.github.com/repos/marocchino/nodejs-ko/assignees{/user}","branches_url":"https://api.github.com/repos/marocchino/nodejs-ko/branches{/branch}","tags_url":"https://api.github.com/repos/marocchino/nodejs-ko/tags","blobs_url":"https://api.github.com/repos/marocchino/nodejs-ko/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/marocchino/nodejs-ko/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/marocchino/nodejs-ko/git/refs{/sha}","trees_url":"https://api.github.com/repos/marocchino/nodejs-ko/git/trees{/sha}","statuses_url":"https://api.github.com/repos/marocchino/nodejs-ko/statuses/{sha}","languages_url":"https://api.github.com/repos/marocchino/nodejs-ko/languages","stargazers_url":"https://api.github.com/repos/marocchino/nodejs-ko/stargazers","contributors_url":"https://api.github.com/repos/marocchino/nodejs-ko/contributors","subscribers_url":"https://api.github.com/repos/marocchino/nodejs-ko/subscribers","subscription_url":"https://api.github.com/repos/marocchino/nodejs-ko/subscription","commits_url":"https://api.github.com/repos/marocchino/nodejs-ko/commits{/sha}","git_commits_url":"https://api.github.com/repos/marocchino/nodejs-ko/git/commits{/sha}","comments_url":"https://api.github.com/repos/marocchino/nodejs-ko/comments{/number}","issue_comment_url":"https://api.github.com/repos/marocchino/nodejs-ko/issues/comments{/number}","contents_url":"https://api.github.com/repos/marocchino/nodejs-ko/contents/{+path}","compare_url":"https://api.github.com/repos/marocchino/nodejs-ko/compare/{base}...{head}","merges_url":"https://api.github.com/repos/marocchino/nodejs-ko/merges","archive_url":"https://api.github.com/repos/marocchino/nodejs-ko/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/marocchino/nodejs-ko/downloads","issues_url":"https://api.github.com/repos/marocchino/nodejs-ko/issues{/number}","pulls_url":"https://api.github.com/repos/marocchino/nodejs-ko/pulls{/number}","milestones_url":"https://api.github.com/repos/marocchino/nodejs-ko/milestones{/number}","notifications_url":"https://api.github.com/repos/marocchino/nodejs-ko/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/marocchino/nodejs-ko/labels{/name}","releases_url":"https://api.github.com/repos/marocchino/nodejs-ko/releases{/id}","deployments_url":"https://api.github.com/repos/marocchino/nodejs-ko/deployments","created_at":"2015-02-11T09:39:39Z","updated_at":"2016-03-03T22:40:24Z","pushed_at":"2016-10-07T07:31:52Z","git_url":"git://github.com/marocchino/nodejs-ko.git","ssh_url":"git@github.com:marocchino/nodejs-ko.git","clone_url":"https://github.com/marocchino/nodejs-ko.git","svn_url":"https://github.com/marocchino/nodejs-ko","homepage":"","size":4256,"stargazers_count":0,"watchers_count":0,"language":"CSS","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"nodejs:master","ref":"master","sha":"2a414300965cdb406518f7b89d9abdc8b00d73dc","user":{"login":"nodejs","id":9950313,"avatar_url":"https://avatars.githubusercontent.com/u/9950313?v=3","gravatar_id":"","url":"https://api.github.com/users/nodejs","html_url":"https://github.com/nodejs","followers_url":"https://api.github.com/users/nodejs/followers","following_url":"https://api.github.com/users/nodejs/following{/other_user}","gists_url":"https://api.github.com/users/nodejs/gists{/gist_id}","starred_url":"https://api.github.com/users/nodejs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nodejs/subscriptions","organizations_url":"https://api.github.com/users/nodejs/orgs","repos_url":"https://api.github.com/users/nodejs/repos","events_url":"https://api.github.com/users/nodejs/events{/privacy}","received_events_url":"https://api.github.com/users/nodejs/received_events","type":"Organization","site_admin":false},"repo":{"id":30468251,"name":"nodejs-ko","full_name":"nodejs/nodejs-ko","owner":{"login":"nodejs","id":9950313,"avatar_url":"https://avatars.githubusercontent.com/u/9950313?v=3","gravatar_id":"","url":"https://api.github.com/users/nodejs","html_url":"https://github.com/nodejs","followers_url":"https://api.github.com/users/nodejs/followers","following_url":"https://api.github.com/users/nodejs/following{/other_user}","gists_url":"https://api.github.com/users/nodejs/gists{/gist_id}","starred_url":"https://api.github.com/users/nodejs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nodejs/subscriptions","organizations_url":"https://api.github.com/users/nodejs/orgs","repos_url":"https://api.github.com/users/nodejs/repos","events_url":"https://api.github.com/users/nodejs/events{/privacy}","received_events_url":"https://api.github.com/users/nodejs/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/nodejs/nodejs-ko","description":"node.js 한국 커뮤니티","fork":false,"url":"https://api.github.com/repos/nodejs/nodejs-ko","forks_url":"https://api.github.com/repos/nodejs/nodejs-ko/forks","keys_url":"https://api.github.com/repos/nodejs/nodejs-ko/keys{/key_id}","collaborators_url":"https://api.github.com/repos/nodejs/nodejs-ko/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/nodejs/nodejs-ko/teams","hooks_url":"https://api.github.com/repos/nodejs/nodejs-ko/hooks","issue_events_url":"https://api.github.com/repos/nodejs/nodejs-ko/issues/events{/number}","events_url":"https://api.github.com/repos/nodejs/nodejs-ko/events","assignees_url":"https://api.github.com/repos/nodejs/nodejs-ko/assignees{/user}","branches_url":"https://api.github.com/repos/nodejs/nodejs-ko/branches{/branch}","tags_url":"https://api.github.com/repos/nodejs/nodejs-ko/tags","blobs_url":"https://api.github.com/repos/nodejs/nodejs-ko/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/nodejs/nodejs-ko/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/nodejs/nodejs-ko/git/refs{/sha}","trees_url":"https://api.github.com/repos/nodejs/nodejs-ko/git/trees{/sha}","statuses_url":"https://api.github.com/repos/nodejs/nodejs-ko/statuses/{sha}","languages_url":"https://api.github.com/repos/nodejs/nodejs-ko/languages","stargazers_url":"https://api.github.com/repos/nodejs/nodejs-ko/stargazers","contributors_url":"https://api.github.com/repos/nodejs/nodejs-ko/contributors","subscribers_url":"https://api.github.com/repos/nodejs/nodejs-ko/subscribers","subscription_url":"https://api.github.com/repos/nodejs/nodejs-ko/subscription","commits_url":"https://api.github.com/repos/nodejs/nodejs-ko/commits{/sha}","git_commits_url":"https://api.github.com/repos/nodejs/nodejs-ko/git/commits{/sha}","comments_url":"https://api.github.com/repos/nodejs/nodejs-ko/comments{/number}","issue_comment_url":"https://api.github.com/repos/nodejs/nodejs-ko/issues/comments{/number}","contents_url":"https://api.github.com/repos/nodejs/nodejs-ko/contents/{+path}","compare_url":"https://api.github.com/repos/nodejs/nodejs-ko/compare/{base}...{head}","merges_url":"https://api.github.com/repos/nodejs/nodejs-ko/merges","archive_url":"https://api.github.com/repos/nodejs/nodejs-ko/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/nodejs/nodejs-ko/downloads","issues_url":"https://api.github.com/repos/nodejs/nodejs-ko/issues{/number}","pulls_url":"https://api.github.com/repos/nodejs/nodejs-ko/pulls{/number}","milestones_url":"https://api.github.com/repos/nodejs/nodejs-ko/milestones{/number}","notifications_url":"https://api.github.com/repos/nodejs/nodejs-ko/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/nodejs/nodejs-ko/labels{/name}","releases_url":"https://api.github.com/repos/nodejs/nodejs-ko/releases{/id}","deployments_url":"https://api.github.com/repos/nodejs/nodejs-ko/deployments","created_at":"2015-02-07T20:00:23Z","updated_at":"2016-09-30T07:58:19Z","pushed_at":"2016-10-08T11:17:37Z","git_url":"git://github.com/nodejs/nodejs-ko.git","ssh_url":"git@github.com:nodejs/nodejs-ko.git","clone_url":"https://github.com/nodejs/nodejs-ko.git","svn_url":"https://github.com/nodejs/nodejs-ko","homepage":"https://nodejs.github.io/nodejs-ko/","size":4623,"stargazers_count":141,"watchers_count":141,"language":"CSS","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":40,"mirror_url":null,"open_issues_count":12,"forks":40,"open_issues":12,"watchers":141,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438"},"html":{"href":"https://github.com/nodejs/nodejs-ko/pull/438"},"issue":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/issues/438"},"comments":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/issues/438/comments"},"review_comments":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438/comments"},"review_comment":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/pulls/438/commits"},"statuses":{"href":"https://api.github.com/repos/nodejs/nodejs-ko/statuses/cfe9c1bd0d2bf2474adb87c64e7b437ff1ba257c"}}}}
{"actor":{"display_login":"yous"}}