A tracking issue for the upcoming OpenSSL security patch release coming on the 9th. Announced at https://mta.openssl.org/pipermail/openssl-announce/2015-July/000037.html

Note the severity is "high" (their highest, see security policy). As this impacts version 1.0.1 and both Node.js 0.10 and 0.12 bundle this version expect patch releases of both soon after.

io.js is tracking this at nodejs/node#2115