From 20edd8aab361f36114d58df36cefa7ac8ce7cba7 Mon Sep 17 00:00:00 2001 From: Beth Griggs Date: Wed, 6 Jan 2021 13:01:12 +0000 Subject: [PATCH] Blog: v15.5.0 release post CVE note Refs: https://github.com/nodejs/node/pull/36798 --- locale/en/blog/release/v15.5.0.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/locale/en/blog/release/v15.5.0.md b/locale/en/blog/release/v15.5.0.md index d9aba3b7b8a42..a8190bde71973 100644 --- a/locale/en/blog/release/v15.5.0.md +++ b/locale/en/blog/release/v15.5.0.md @@ -10,6 +10,12 @@ author: Michaël Zasso ### Notable Changes +#### OpenSSL-1.1.1i + +OpenSSL-1.1.1i contains a fix for CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High). This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20201208.txt + +Contributed by Myles Borins [#36520](https://github.com/nodejs/node/pull/36520). + #### Extended support for `AbortSignal` in child_process and stream The following APIs now support an `AbortSignal` in their options object: