Skip to content
Heist/ feed
HighFix available

Node.js 4.6.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 4.6.0 (LTS) is an important security release that updates OpenSSL and patches HTTP and TLS vulnerabilities, among other security changes.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is an important security release.

Node.js

Node.js 4.6.0 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
4.6.0
Node.js 4.6.0 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2016-6304
CVE-2016-6304
CVE-2016-2183
CVE-2016-2183
CVE-2016-6303
CVE-2016-6303
CVE-2016-2178
CVE-2016-2178
CVE-2016-6306
CVE-2016-6306
CVE-2016-7052
CVE-2016-7052
CVE-2016-5325
CVE-2016-5325
CVE-2016-7099
CVE-2016-7099

Publisher severity

high

CVE-2016-6304 ("OCSP Status Request extension unbounded memory growth", high severity)
Event
#62746 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement