Node.js - v12.22.11

Security

This is a security release.

Notable changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:
* Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
More details are available at https://www.openssl.org/news/secadv/20220315.txt

Fix for building Node.js 12.x with Visual Studio 2019 to allow us to continue to
run CI tests.

Commits

  • [e3e5bf11ba] - build: pin Windows GitHub runner to windows-2019 (Richard Lau) #42349
  • [f41e7771bf] - build: fix detection of Visual Studio 2019 (Richard Lau) #42349
  • [c372ec207d] - deps: update archs files for OpenSSL-1.1.n (Richard Lau) #42348
  • [d574a1dccb] - deps: upgrade openssl sources to 1.1.1n (Richard Lau) #42348

Details

date
March 18, 2022, 12:41 a.m.
name
2022-03-17, Version 12.22.11 'Erbium' (LTS), @richardlau
type
Patch
👇
Register or login to:
  • 🔍View and search all Node.js releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or