UnratedFix available
Node.js 0.12.9 (LTS)
This security release fixes an HTTP pipelining denial-of-service issue and upgrades OpenSSL to 1.0.1q, which fixes CVE-2015-3194.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is an important security release. All Node.js users should consult our December Security Release Summary for details on patched vulnerabilities.
Node.js
Node.js 0.12.9 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 0.12.9
Node.js 0.12.9 (LTS)
- Prerequisites
- Not stated in this extraction
openssl
openssl: Upgrade to 1.0.1q
- Affected versions
- Not stated in this extraction
- Fixed versions
- 1.0.1q
openssl: Upgrade to 1.0.1q
- Prerequisites
- Node.js TLS servers using client authentication; TLS clients are also impacted.
a potential denial-of-service vector for Node.js TLS servers using client authentication; TLS clients are also impacted.
- Related CVEs
- CVE-2015-3194
fixes CVE-2015-3194
Publisher severity
No explicit severity was extracted.
- Event
- #70511 · Revision 1
- Added to Heist Feed
- Publisher date