Skip to content

Commit db3d882

Browse files
committed
2022-03-17, Version 17.7.2 (Current)
This is a security release. Notable changes: Update to OpenSSL 3.0.2, which addresses the following vulnerability: - Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778) More details are available at https://www.openssl.org/news/secadv/20220315.txt PR-URL: #42381
1 parent c8b6d92 commit db3d882

File tree

3 files changed

+24
-2
lines changed

3 files changed

+24
-2
lines changed

CHANGELOG.md

+2-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,8 @@ release.
3333
</tr>
3434
<tr>
3535
<td valign="top">
36-
<b><a href="doc/changelogs/CHANGELOG_V17.md#17.7.1">17.7.1</a></b><br/>
36+
<b><a href="doc/changelogs/CHANGELOG_V17.md#17.7.2">17.7.2</a></b><br/>
37+
<a href="doc/changelogs/CHANGELOG_V17.md#17.7.1">17.7.1</a><br/>
3738
<a href="doc/changelogs/CHANGELOG_V17.md#17.7.0">17.7.0</a><br/>
3839
<a href="doc/changelogs/CHANGELOG_V17.md#17.6.0">17.6.0</a><br/>
3940
<a href="doc/changelogs/CHANGELOG_V17.md#17.5.0">17.5.0</a><br/>

doc/changelogs/CHANGELOG_V17.md

+21
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
</tr>
99
<tr>
1010
<td>
11+
<a href="#17.7.2">17.7.2</a><br/>
1112
<a href="#17.7.1">17.7.1</a><br/>
1213
<a href="#17.7.0">17.7.0</a><br/>
1314
<a href="#17.6.0">17.6.0</a><br/>
@@ -42,6 +43,26 @@
4243
* [io.js](CHANGELOG_IOJS.md)
4344
* [Archive](CHANGELOG_ARCHIVE.md)
4445

46+
<a id="17.7.2"></a>
47+
48+
## 2022-03-17, Version 17.7.2 (Current), @richardlau
49+
50+
This is a security release.
51+
52+
### Notable Changes
53+
54+
Update to OpenSSL 3.0.2, which addresses the following vulnerability:
55+
56+
* Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates (High)(CVE-2022-0778)
57+
More details are available at <https://www.openssl.org/news/secadv/20220315.txt>
58+
59+
### Commits
60+
61+
* \[[`55e293e05f`](https://github.com/nodejs/node/commit/55e293e05f)] - **deps**: update archs files for quictls/openssl-3.0.2+quic (Hassaan Pasha) [#42356](https://github.com/nodejs/node/pull/42356)
62+
* \[[`b8d090603d`](https://github.com/nodejs/node/commit/b8d090603d)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.2+quic (Hassaan Pasha) [#42356](https://github.com/nodejs/node/pull/42356)
63+
* \[[`c8b6d92af0`](https://github.com/nodejs/node/commit/c8b6d92af0)] - **test**: fix tests affected by OpenSSL update (Michael Dawson) [#42356](https://github.com/nodejs/node/pull/42356)
64+
* \[[`457e31ea09`](https://github.com/nodejs/node/commit/457e31ea09)] - **test**: renew certificates for specific test (Luigi Pinca) [#42342](https://github.com/nodejs/node/pull/42342)
65+
4566
<a id="17.7.1"></a>
4667

4768
## 2022-03-10, Version 17.7.1 (Current), @BethGriggs prepared by @sxa

src/node_version.h

+1-1
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
#define NODE_VERSION_IS_LTS 0
3030
#define NODE_VERSION_LTS_CODENAME ""
3131

32-
#define NODE_VERSION_IS_RELEASE 0
32+
#define NODE_VERSION_IS_RELEASE 1
3333

3434
#ifndef NODE_STRINGIFY
3535
#define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)

0 commit comments

Comments
 (0)