New Node.js Runtimes Contain a Fix for OpenSSL Vulnerability

The Node.js runtimes: v10.23.1, v12.20.1, and v14.15.4 contain a fix for an OpenSSL security vulnerability (CVE-2020-1971).

OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference which impacts all 10.x, 12.x, and 14.x runtimes.

These runtimes (v10.23.1, v12.20.1, v14.15.4) are not yet included in the Node.js buildpack. However, the user can specify these runtimes in their package.json to download the required runtime. For example:

"engines": {
     "node": "12.20.1"
}

The buildpack does not support semver when downloading runtimes and a specific version must be specified.

Learn more

Raymond Xu

Software Engineer

Success and recognition of IBM offerings in G2 Summer Reports

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories. This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.” With over 90 million visitors each year and hosting more than 2.6…

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

3 min read - Security operations is getting more complex and inefficient with too many tools, too much data and simply too much to do. According to a study done by IBM, SOC team members are only able to handle half of the alerts that they should be reviewing in a typical workday. This potentially leads to missing the important alerts that are critical to an organization's security. Thus, choosing the right SIEM solution can be transformative for security teams, helping them manage alerts…

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

3 min read - In today's dynamic economic landscape, businesses demand continuous innovation and speed of execution. At IBM Consulting®, our unwavering focus on partnerships and shared commitment to delivering enterprise-level solutions to mutual clients have been core to our success.  We are thrilled to announce that IBM® has recently gained five competencies from Amazon Web Services (AWS) in vital domains including Cloud Operations, Internet of Things (IoT), Life Sciences, Mainframe Modernization, and Telecommunications. With these credentials, IBM further establishes its position as a…

The Node.js runtimes: v10.23.1, v12.20.1, and v14.15.4 contain a fix for an OpenSSL security vulnerability (CVE-2020-1971).

Learn more

More from Announcements

Success and recognition of IBM offerings in G2 Summer Reports

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

IBM Newsletters