Node.js v17.7.2 and v16.14.2 released!

[NewsBot]

Node.js v17.7.2 and v16.14.2 has been released.

This is a security release.

Notable Changes

Update to OpenSSL 3.0.2, which addresses the following vulnerability:

• Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
  More details are available at https://www.openssl.org/news/secadv/20220315.txt

Commits

• [55e293e05f] - deps: update archs files for quictls/openssl-3.0.2+quic (Hassaan Pasha) #42356
• [b8d090603d] - deps: upgrade openssl sources to quictls/openssl-3.0.2+quic (Hassaan Pasha) #42356
• [c8b6d92af0] - test: fix tests affected by OpenSSL update (Michael Dawson) #42356
• [457e31ea09] - test…

Link: Release 2022-03-17, Version 17.7.2 (Current), @richardlau · nodejs/node · GitHub

This is a security release.

Notable Changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:

• Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
  More details are available at https://www.openssl.org/news/secadv/20220315.txt

Commits

• [3924618c74] - deps: update archs files for OpenSSL-1.1.1 (Hassaan Pasha) #42352
• [7a6a870d58] - deps: upgrade openssl sources to OpenSSL_1_1_1n (Hassaan Pasha) #42352
• [c533b430f4] - test: fix tests affected by OpenSSL update (Michael Dawson) #42352

Link: Release 2022-03-17, Version 16.14.2 'Gallium' (LTS), @richardlau · nodejs/node · GitHub