UnratedFix available
OpenSSL update, 1.0.2m
Node.js releases for active lines include the OpenSSL 1.0.2m update, addressing OpenSSL security flaws. The announcement says the impact is low and does not classify these as strictly security releases.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Node v4.8.6 "Argon" (Maintenance LTS) Node v6.12.0 "Boron" (Active LTS) Node v8.9.1 "Carbon" (Active LTS) Node v9.1.0 (Current)
Node.js
Node.js Releases
- Affected versions
- Not stated in this extraction
- Fixed versions
- v4.8.6
Node v4.8.6 "Argon" (Maintenance LTS)
v6.12.0Node v6.12.0 "Boron" (Active LTS)
v8.9.1Node v8.9.1 "Carbon" (Active LTS)
v9.1.0Node v9.1.0 (Current)
- Prerequisites
- Not stated in this extraction
OpenSSL
each including the OpenSSL 1.0.2m update.
- Affected versions
- Not stated in this extraction
- Fixed versions
- 1.0.2m
each including the OpenSSL 1.0.2m update.
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2017-3735
CVE-2017-3735: OOB read parsing IPAdressFamily in an X.509 certificate
CVE-2017-3736CVE-2017-3736: Carry propagating bug in the x86_64 Montgomery squaring procedure
Publisher severity
No explicit severity was extracted.
- Event
- #57299 · Revision 1
- Added to Heist Feed
- Publisher date