Skip to content

Commit 0a492c4

Browse files
sam-githubTrott
authored andcommitted
blog: announce no impact from openssl release
1 parent b309034 commit 0a492c4

2 files changed

Lines changed: 16 additions & 3 deletions

File tree

build.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -272,7 +272,7 @@ function getSource (callback) {
272272
lts: latestVersion.lts(versions)
273273
},
274274
banner: {
275-
visible: true,
275+
visible: false,
276276
text: 'Security releases may be necessary for all release lines',
277277
link: '/en/blog/vulnerability/april-2020-openssl-updates/'
278278
}

locale/en/blog/vulnerability/april-2020-openssl-updates.md

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,25 @@
11
---
2-
date: 2020-04-17T12:00:00.000Z
2+
date: 2020-04-21T12:00:00.000Z
33
category: vulnerability
4-
title: OpenSSL security releases may require Node.js security releases
4+
title: OpenSSL security releases do not require Node.js security releases
55
slug: openssl-and-low-severity-fixes-april-2020
66
layout: blog-post.hbs
77
author: Sam Roberts
88
---
99

10+
### Update
11+
12+
The OpenSSL project has released a description of the issue fixed in the
13+
OpenSSL 1.1.1g update. It only affects a function which is *not called*
14+
by Node.js (or its dependencies), and as such, does not affect Node.js.
15+
16+
No Node.js security releases are required.
17+
18+
For more information, see the OpenSSL
19+
[announcement](https://www.openssl.org/news/secadv/20200421.txt).
20+
21+
The previous Node.js announcement can be found below.
22+
1023
### Summary
1124

1225
The Node.js project may be releasing new versions across all of its supported

0 commit comments

Comments
 (0)