Does 0.11.13 or 0.11.14 come with the POODLE patch?

[Matt Fletcher]

Hi,

I'm running v0.11.13 on my dev machine, but I was wondering if it will have a security loophole regarding the POODLE vulnerability that 0.10.33 resolved?

Would it be recommended to roll back to a stable version? In fact, is there any reason to use the 0.11.* build?

Many thanks

[Fedor Indutny]

Hello Matt,

I'd just recommend using the latest version from `v0.12` branch. Next `v0.11.x` wasn't yet released, and the last one does not contain a patch for POODLE.

Cheers,

Fedor.

--
Job board: http://jobs.nodejs.org/
New group rules: https://gist.github.com/othiym23/9886289#file-moderation-policy-md
Old group rules: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
---
You received this message because you are subscribed to the Google Groups "nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nodejs+un...@googlegroups.com.
To post to this group, send email to nod...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/nodejs/c15d58b5-a29d-4156-a6d2-29455a7c4f60%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Richard Lau]

Hello Fedor,

Looking at the latest v0.12 branch I see no sign of the POODLE vulnerability being addressed. Do you know if there are any plans to do so?

regards,
Richard