UnratedFix available
Node.js 8.15.1 (LTS)
Node.js 8.15.1 is a security release that addresses Slowloris HTTP denial of service and includes OpenSSL 1.0.2r, which fixes a padding-oracle vulnerability.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release. All Node.js users should consult the security release summary at /blog/vulnerability/february-2019-security-releases/ for details on patched vulnerabilities.
Node.js
Node.js 8.15.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 8.15.1
Node.js 8.15.1 (LTS)
- Prerequisites
- Not stated in this extraction
OpenSSL
OpenSSL: 0-byte record padding oracle (CVE-2019-1559)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 1.0.2r
OpenSSL has been upgraded to 1.0.2r which contains a fix for CVE-2019-1559.
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2019-5737
Node.js: Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737)
CVE-2019-1559OpenSSL: 0-byte record padding oracle (CVE-2019-1559)
Publisher severity
No explicit severity was extracted.
- Event
- #50870 · Revision 1
- Added to Heist Feed
- Publisher date