Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade the version of node shipped with the build #4387

Closed
megastef opened this issue Jul 4, 2015 · 2 comments
Closed

Upgrade the version of node shipped with the build #4387

megastef opened this issue Jul 4, 2015 · 2 comments

Comments

@megastef
Copy link

megastef commented Jul 4, 2015

Please stop distributing node.js v0.10 - and move to latest io.js or at least node 0.12.6 to make latest security patches available.

For example this one: https://medium.com/@iojs/important-security-upgrades-for-node-js-and-io-js-8ac14ece5852

I upgraded succesfully our Kibana 4.1.1 installation to io 2.3.3 on Linux 64 by following steps:

npm n -g 
n io 2.3.3
cd kibana/src
mv node_modules node_modules_old_0_10
npm i 

then change bin/kibana start script

NODE=/usr/local/bin/node 
@simianhacker
Copy link
Member

Node v0.10 wasn't affected by the security issue; the plan is for the next release to be based on io.js. @spalger is working on this as we speak, it will be part of the server refactor.

See https://twitter.com/nodejs/status/617131694617853952

@w33ble w33ble changed the title Support latest io.js or at least node 0.12.6 in releases for security reasons Upgrade the version of node shipped with the build Jul 7, 2015
@w33ble
Copy link
Contributor

w33ble commented Jul 7, 2015

Updated the title and assigned to @spalger since he's already working on this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants