LowFix available
Node.js 5.7.1 security fixes
Node.js 5.7.1 upgrades OpenSSL to 1.0.2g and includes fixes for defects associated with three CVEs. The announcement describes the issues as low severity for Node.js users or unlikely to enable practical attacks in Node.js.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Node.js 5.7.1 (Current)
Node.js
Node.js 5.7.1 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 5.7.1
Node.js 5.7.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2016-0705
More info is available at CVE-2016-0705.
CVE-2016-0797More info is available at CVE-2016-0797.
CVE-2016-0702More info is available at CVE-2016-0702.
Publisher severity
low
It is likely to be very difficult to use this defect for a practical attack and is therefore considered low severity for Node.js users.
- Event
- #67656 · Revision 1
- Added to Heist Feed
- Publisher date