|
| 1 | +--- |
| 2 | +date: 2023-02-07T17:00:00.000Z |
| 3 | +category: vulnerability |
| 4 | +title: Tuesday February 14 2023 Security Releases |
| 5 | +slug: february-2023-security-releases |
| 6 | +layout: blog-post.hbs |
| 7 | +author: Michael Dawson |
| 8 | +--- |
| 9 | + |
| 10 | +Pre-release announce |
| 11 | + |
| 12 | +# Summary |
| 13 | + |
| 14 | +The Node.js project will release new versions of the 14.x, 16.x, 18.x and 19.x |
| 15 | +releases lines on or shortly after, Tuesday February 14 2023 in order to address: |
| 16 | + |
| 17 | +* 2 low severity issues. |
| 18 | +* 2 medium severity issues. |
| 19 | +* 1 high severity issues. |
| 20 | +* OpenSSL security updates for which the highest vulnerability severity is high. You |
| 21 | + can read more about this update in the |
| 22 | + [OpenSSL security advisory](https://www.openssl.org/news/secadv/20230207.txt). |
| 23 | + |
| 24 | +## Impact |
| 25 | + |
| 26 | +The 19.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues and 1 high severity issue and the OpenSSL vulnerabilities. |
| 27 | + |
| 28 | +The 18.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues and 1 high severity issue and the OpenSSL vulnerabilities. |
| 29 | + |
| 30 | +The 16.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues, and 1 high severity issue and the OpenSSL vulnerabilities. |
| 31 | + |
| 32 | +The 14.x release line of Node.js is vulnerable to 1 low severity issue, and 1 high severity issue and the OpenSSL vulnerabilities. |
| 33 | + |
| 34 | +## Release timing |
| 35 | + |
| 36 | +Releases will be available on, or shortly after, Tuesday February 14 2023. |
| 37 | + |
| 38 | +## Contact and future updates |
| 39 | + |
| 40 | +The current Node.js security policy can be found at https://nodejs.org/en/security/. Please follow the process outlined in https://github.com/nodejs/node/blob/master/SECURITY.md if you wish to report a vulnerability in Node.js. |
| 41 | + |
| 42 | +Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization. |
0 commit comments