Skip to content

Commit eee5e70

Browse files
joesepimhdawsonrichardlau
authored
doc: Update mar-2022-security-releases.md (nodejs#4496)
* Update mar-2022-security-releases.md * Apply suggestions from code review Co-authored-by: Michael Dawson <mdawson@devrus.com> * Update locale/en/blog/vulnerability/mar-2022-security-releases.md Co-authored-by: Michael Dawson <mdawson@devrus.com> * Update locale/en/blog/vulnerability/mar-2022-security-releases.md * Update mar-2022-security-releases.md * Update locale/en/blog/vulnerability/mar-2022-security-releases.md * Update locale/en/blog/vulnerability/mar-2022-security-releases.md Co-authored-by: Richard Lau <rlau@redhat.com> Co-authored-by: Michael Dawson <mdawson@devrus.com> Co-authored-by: Richard Lau <rlau@redhat.com>
1 parent 7a48331 commit eee5e70

File tree

1 file changed

+32
-2
lines changed

1 file changed

+32
-2
lines changed

locale/en/blog/vulnerability/mar-2022-security-releases.md

Lines changed: 32 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,42 @@
11
---
2-
date: 2022-03-14T12:00:00.000Z
2+
date: 2022-03-16T23:22:00.000Z
33
category: vulnerability
4-
title: OpenSSL security releases may require Node.js security releases
4+
title: OpenSSL security releases require Node.js security releases
55
slug: openssl-and-high-severity-fixes-mar-2022
66
layout: blog-post.hbs
77
author: Joe Sepi
88
---
99

10+
# _(Update 16-Mar-2022)_ Summary
11+
12+
The Node.js project will release new versions of the 12.x, 14.x, 16.x, and 17.x
13+
releases lines on or shortly after Thursday, March 17th, 2022 to incorporate
14+
upstream patches from OpenSSL.
15+
16+
## Impact
17+
18+
The 17.x release line of Node.js is vulnerable to one High severity issue.
19+
20+
The 16.x release line of Node.js is vulnerable to one High severity issue.
21+
22+
The 14.x release line of Node.js is vulnerable to one High severity issue.
23+
24+
The 12.x release line of Node.js is vulnerable to one High severity issue.
25+
26+
## Release timing
27+
28+
Releases will be available on, or shortly after, Thursday, March 17th, 2022.
29+
30+
## Contact and future updates
31+
32+
The current Node.js security policy can be found at https://github.com/nodejs/node/blob/master/SECURITY.md.
33+
Please follow the process outlined in https://github.com/nodejs/node/blob/master/SECURITY.md
34+
if you wish to report a vulnerability in Node.js.
35+
36+
Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.
37+
38+
---
39+
1040
### Summary
1141

1242
The Node.js project may be releasing new versions across all of its supported

0 commit comments

Comments
 (0)