Skip to content
Heist/ feed
LowFix available

Node.js 4.3.2 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 4.3.2 upgrades OpenSSL to 1.0.2g, fixing defects associated with denial of service or memory corruption, and the CacheBleed side-channel attack.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

openssl: Upgrade from 1.0.2f to 1.0.2g

Node.js

Node.js 4.3.2 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
4.3.2
Node.js 4.3.2 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2016-0705
More info is available at CVE-2016-0705.
CVE-2016-0797
More info is available at CVE-2016-0797.
CVE-2016-0702
More info is available at CVE-2016-0702.

Publisher severity

low

It is likely to be very difficult to use this defect for a practical attack and is therefore considered low severity for Node.js users.
Event
#67770 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement