Skip to content
Heist/ feed
UnratedFix available

February 2016 Security Release Summary

Type: patchSource: Node.js announcements1 source record

Node.js released security updates for four release lines, including fixes for announced vulnerabilities and OpenSSL updates. The v4.2.x line is no longer updated; users are advised to upgrade.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.

Node.js

Node.js v0.10.42 and v0.12.10 upgrade the bundled version of OpenSSL from 1.0.1q to 1.0.1r.
Affected versions
Not stated in this extraction
Fixed versions
v0.10.42
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v0.12.10
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v4.3.0
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
v5.6.0
We had released Node.js v0.10.42 (Maintenance), v0.12.10 (LTS), v4.3.0 "Argon" (LTS) and v5.6.0 (Current) with fixes for the announced vulnerabilities and updates to OpenSSL.
Prerequisites
Not stated in this extraction

Publisher severity

No explicit severity was extracted.

Event
#68191 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement