Skip to content
Heist/ feed
UnratedFix available

Node.js 0.10.33 (Stable)

Type: patchSource: Node.js announcements1 source record

Node.js 0.10.33 disables SSLv2 and SSLv3 negotiation by default to address the POODLE vulnerability; these protocols can still be enabled explicitly.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default

Node.js

Node.js 0.10.33 (Stable)
Affected versions
Not stated in this extraction
Fixed versions
0.10.33
2014.10.20, Version 0.10.33 (Stable)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2014-3566
could be easily compromised as was shown by CVE-2014-3566

Publisher severity

No explicit severity was extracted.

Event
#73332 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement