Skip to content
Heist/ feed
UnratedFix available

Node.js 4.3.0 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 4.3.0 is an important security release. It changes HTTP header parsing to address request smuggling and response splitting, and updates OpenSSL and http-parser.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is an important security release.

Node.js

Node.js 4.3.0 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
4.3.0
Node.js 4.3.0 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2016-2086
that can allow request smuggling (CVE-2016-2086)
CVE-2016-2216
or response splitting (CVE-2016-2216)

Publisher severity

No explicit severity was extracted.

Event
#68899 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement