Commit ff39464
doc: add OpenSSL CVE fix to notable changes in v15.5.0
PR-URL: #36798
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>1 parent 6db465a commit ff39464
1 file changed
Lines changed: 6 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -77,6 +77,12 @@ Vulnerabilities fixed: | |||
| 77 | 77 | ||
| 78 | 78 | ### Notable Changes | |
| 79 | 79 | ||
| 80 | + #### OpenSSL-1.1.1i | ||
| 81 | + | ||
| 82 | + OpenSSL-1.1.1i contains a fix for CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High). This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt | ||
| 83 | + | ||
| 84 | + Contributed by Myles Borins [#36520](https://github.com/nodejs/node/pull/36520). | ||
| 85 | + | ||
| 80 | 86 | #### Extended support for `AbortSignal` in child_process and stream | |
| 81 | 87 | ||
| 82 | 88 | The following APIs now support an `AbortSignal` in their options object: | |
0 commit comments