UnratedFix available
February 2016 Security Release Summary
Node.js released security updates for four release lines, including fixes for announced vulnerabilities and OpenSSL updates. The v4.2.x line is no longer updated; users are advised to upgrade.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
Node.js
Node.js v0.10.42 and v0.12.10 upgrade the bundled version of OpenSSL from 1.0.1q to 1.0.1r.
- Affected versions
- Not stated in this extraction
- Fixed versions
- v0.10.42
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v0.12.10We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v4.3.0We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v5.6.0We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #68191 · Revision 1
- Added to Heist Feed
- Publisher date