News for hackers. Stuff that matters.
Re:Node v0.10.21 Stable has critical security fix by ak217 on Saturday October 19, 2013 @01:26AM (#6575463)
Unsurprising because the new streams API, which is responsible for this bug, was introduced in node 0.10. Try with earlier 0.10 versions instead.
Re:Node v0.10.21 Stable has critical security fix by jkrems on Saturday October 19, 2013 @01:40AM (#6575483)
Well, in that case lets add confusion about affected versions to the list of things being suboptimal about this whole thing: http://blog.nodejs.org/2013/10/18/node-v0-8-26-maintenance/ - the same warning about the same error and they did backport the fix to 0.8: https://github.com/joyent/node/commit/653d4db71f569ddc87a0bc...
Re:Node v0.10.21 Stable has critical security fix by ak217 on Saturday October 19, 2013 @02:10PM (#6577231)
You're right, that is confusing. I'm not sure how it's exploitable in 0.8.