Skip to content

Commit ed1fbf1

Browse files
committed
Blog: Update January OpenSSL post with releases
PR-URL: #1120
1 parent 34fad98 commit ed1fbf1

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

locale/en/blog/vulnerability/openssl-january-2017.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,22 @@ layout: blog-post.hbs
77
author: Rod Vagg
88
---
99

10+
## _(Update 1-February-2017)_ Releases available
11+
12+
Updates are now available for all active Node.js release lines.
13+
14+
The following releases are bundled with OpenSSL 1.0.2k:
15+
16+
* [Node.js 7.5.0 (Current)](https://nodejs.org/en/blog/release/v7.5.0/)
17+
* [Node.js 6.9.5 (LTS "Boron")](https://nodejs.org/en/blog/release/v6.9.5/)
18+
* [Node.js 4.7.3 (LTS "Argon")](https://nodejs.org/en/blog/release/v4.7.3/)
19+
20+
While this is not a critical update, all users of these release lines should upgrade at their earliest convenience.
21+
22+
***Original post is included below***
23+
24+
--------------------------------------
25+
1026
The OpenSSL project has [announced](https://mta.openssl.org/pipermail/openssl-announce/2017-January/000092.html) the immediate availability of OpenSSL version 1.0.2k.
1127

1228
Although the OpenSSL team have determined a maximum severity rating of "moderate", the Node.js crypto team (Ben Noordhuis, Shigeki Ohtsu and Fedor Indutny) have determined the impact to Node users is "low". Details on this determination can be found below.

0 commit comments

Comments
 (0)