Skip to content

Commit 20edd8a

Browse files
committed
Blog: v15.5.0 release post CVE note
Refs: nodejs/node#36798
1 parent d39b1db commit 20edd8a

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

locale/en/blog/release/v15.5.0.md

+6
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,12 @@ author: Michaël Zasso
1010

1111
### Notable Changes
1212

13+
#### OpenSSL-1.1.1i
14+
15+
OpenSSL-1.1.1i contains a fix for CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High). This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt
16+
17+
Contributed by Myles Borins [#36520](https://github.com/nodejs/node/pull/36520).
18+
1319
#### Extended support for `AbortSignal` in child_process and stream
1420

1521
The following APIs now support an `AbortSignal` in their options object:

0 commit comments

Comments
 (0)