Skip to content
Closed
Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
c161dfe
chore(github issue): fit with nodejs.dev
AugustinMauroy Jan 24, 2023
507ea02
Merge branch 'main' into main
Jan 25, 2023
8071ea8
Merge branch 'main' into main
Feb 5, 2023
3d1bc0a
doc: announce Feb security release (#5042)
mhdawson Feb 7, 2023
cb1e39c
fix banner start date for security release announce (#5043)
mhdawson Feb 7, 2023
d548a3c
docs(security): typo-squirting => typosquatting (#5044)
ferdnyc Feb 12, 2023
9476a8c
doc: share new target for security releases (#5047)
mhdawson Feb 14, 2023
5006544
doc: update banner for new security release date (#5048)
mhdawson Feb 14, 2023
3cc96a6
Blog: v14.21.3 release post (#5051)
richardlau Feb 16, 2023
f745585
Blog: v16.19.1 release post (#5052)
richardlau Feb 16, 2023
7dbb7c1
Blog: v18.14.1 release post (#5054)
RafaelGSS Feb 16, 2023
7ea374d
Blog: v19.6.1 release post (#5053)
RafaelGSS Feb 16, 2023
6469baf
doc: update security annouce for binaries ready (#5055)
mhdawson Feb 16, 2023
96525c8
blog: release notes for v19.7.0 and v18.14.2 (#5064)
MylesBorins Feb 21, 2023
adade26
doc: fix typos in security release announcement (#5056)
tniessen Feb 22, 2023
abe8aa9
fix(docs): misspelled words (#5049)
CodytTorgerson Feb 27, 2023
903c1c6
ru:replace jargon in Russian text (#5027)Co-authored-by: Claudio Wund…
gurugray Feb 27, 2023
78c1867
doc: added example for Readable stream back-pressure (#5066)Co-author…
RishabhKodes Feb 27, 2023
7315680
ru: correct translation for index.md (#5045)Co-authored-by: Alexandr …
KruASe76 Feb 27, 2023
5f9862c
Blog: v18.15.0 release post (#5073)
juanarbol Mar 7, 2023
ec1ebcc
feat(infra): migrate to next.js infrastructure (#4991)Co-authored-by:…
ovflowd Mar 8, 2023
93407da
chore(i18n): removed unused hebrew language (#5074)
ovflowd Mar 8, 2023
80dbb74
chore(readme): add nodejs logo
AugustinMauroy Mar 8, 2023
f79046b
Merge branch 'main' of https://github.com/AugustinMauroy/nodejs.org
AugustinMauroy Mar 8, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
doc: announce Feb security release (#5042)
* doc: announce Feb security release

Signed-off-by: Michael Dawson <[email protected]>

* Update locale/en/blog/vulnerability/february-2023-security-releases.md

Signed-off-by: Michael Dawson <[email protected]>

---------

Signed-off-by: Michael Dawson <[email protected]>
  • Loading branch information
mhdawson authored Feb 7, 2023
commit 3d1bc0a8568f5d27b8a5216bc1b18096cc5ecfbf
42 changes: 42 additions & 0 deletions locale/en/blog/vulnerability/february-2023-security-releases.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
---
date: 2023-02-07T17:00:00.000Z
category: vulnerability
title: Tuesday February 14 2023 Security Releases
slug: february-2023-security-releases
layout: blog-post.hbs
author: Michael Dawson
---

Pre-release announce

# Summary

The Node.js project will release new versions of the 14.x, 16.x, 18.x and 19.x
releases lines on or shortly after, Tuesday February 14 2023 in order to address:

* 2 low severity issues.
* 2 medium severity issues.
* 1 high severity issues.
* OpenSSL security updates for which the highest vulnerability severity is high. You
can read more about this update in the
[OpenSSL security advisory](https://www.openssl.org/news/secadv/20230207.txt).

## Impact

The 19.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues and 1 high severity issue and the OpenSSL vulnerabilities.

The 18.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues and 1 high severity issue and the OpenSSL vulnerabilities.

The 16.x release line of Node.js is vulnerable to 2 low severity issues, 2 medium severity issues, and 1 high severity issue and the OpenSSL vulnerabilities.

The 14.x release line of Node.js is vulnerable to 1 low severity issue, and 1 high severity issue and the OpenSSL vulnerabilities.

## Release timing

Releases will be available on, or shortly after, Tuesday February 14 2023.

## Contact and future updates

The current Node.js security policy can be found at https://nodejs.org/en/security/. Please follow the process outlined in https://github.com/nodejs/node/blob/master/SECURITY.md if you wish to report a vulnerability in Node.js.

Subscribe to the low-volume announcement-only nodejs-sec mailing list at https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.
8 changes: 4 additions & 4 deletions locale/en/site.json
Original file line number Diff line number Diff line change
Expand Up @@ -131,10 +131,10 @@
},
"banners": {
"index": {
"startDate": "2022-12-16T17:00:00.000Z",
"endDate": "2022-12-30T16:00:00.000Z",
"text": "Node.js assessment of OpenSSL 3.0.7 security advisory",
"link": "https://nodejs.org/en/blog/vulnerability/openssl-fixes-in-regular-releases-dec2022/"
"startDate": "2023-02-14T16:00:00.000Z",
"endDate": "2023-03-07T23:00:00.000Z",
"text": "New security releases to be made available February 14th, 2023",
"link": "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/"
},
"blacklivesmatter": {
"visible": false,
Expand Down