Node.js v4.1.2 has been released and is available for download at https://nodejs.org/download/release/v4.1.2/, updates are also being made available via common distribution channels. Please follow up with the maintainers of those channels if you do not have a v4.1.2 available to you shortly.
Please update now if you're using v4.x or io.js v3.x in production.
The bug that has been addressed is primarily concerned with HTTP pipelining. Issue #2639 is an example of the crash that can occur and this is caused by out-of-order responses being sent to the client within a single pipelined connection.
Please note that it is likely that this problem exists even behind a TLS terminator and/or load-balancer.
If you have any further concerns regarding this bug, or have any security-related issues to report please reach out to us at secu...@nodejs.org. General bug reports can be filed at https://github.com/nodejs/node and requests for general help with Node.js can be filed at the new https://github.com/nodejs/help repository.
-- Rod Vagg (Node.js TSC Member)