UnratedFix available
Node.js 0.12.12 (LTS)
Node.js 0.12.12 removes SSLv2 support and makes the --enable-ssl2 argument produce an error, addressing the risk associated with SSLv2 being enabled.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
openssl: Fully remove SSLv2 support, the --enable-ssl2 command line argument will now produce an error. The DROWN Attack (https://drownattack.com/) creates a vulnerability where SSLv2 is enabled by a server, even if a client connection is not using SSLv2.
Node.js
Node.js 0.12.12 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 0.12.12
Node.js 0.12.12 (LTS)
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #67427 · Revision 1
- Added to Heist Feed
- Publisher date