Skip to content
Heist/ feed
UnratedFix available

Node.js 6.17.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 6.17.0 is a security release that patches HTTP keep-alive denial-of-service issues and includes an OpenSSL update addressing a padding-oracle vulnerability.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release. All Node.js users should consult the security release summary

Node.js

Node.js 6.17.0 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
6.17.0
Node.js 6.17.0 (LTS)
Prerequisites
Not stated in this extraction

OpenSSL

OpenSSL: 0-byte record padding oracle (CVE-2019-1559)
Affected versions
Not stated in this extraction
Fixed versions
1.0.2r
OpenSSL has been upgraded to 1.0.2r
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2019-5739
CVE-2019-5739
CVE-2019-5737
CVE-2019-5737
CVE-2019-1559
CVE-2019-1559

Publisher severity

No explicit severity was extracted.

Event
#51190 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement