Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v17.7.2 proposal #42381

Merged
merged 5 commits into from
Mar 18, 2022
Merged

v17.7.2 proposal #42381

merged 5 commits into from
Mar 18, 2022

Commits on Mar 17, 2022

  1. test: renew certificates for specific test 

    Renew the certificates used by
`test/parallel/test-https-selfsigned-no-keycertsign-no-crash.js` by
running the `https_renew_cert.sh` script under the same directory.

PR-URL: #42342
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
    @lpinca @richardlau
    lpinca authored and richardlau committed Mar 17, 2022
    Configuration menu
    Copy the full SHA
    457e31e View commit details
    Browse the repository at this point in the history

  2. deps: upgrade openssl sources to quictls/openssl-3.0.2+quic 

    This updates all sources in deps/openssl/openssl by:
    $ git clone git@github.com:quictls/openssl.git
    $ cd openssl
    $ cd ../node/deps/openssl
    $ rm -rf openssl
    $ cp -R ../openssl openssl
    $ rm -rf openssl/.git* openssl/.travis*
    $ git add --all openssl
    $ git commit openssl

PR-URL: #42356
Refs: https://mta.openssl.org/pipermail/openssl-announce/2022-March/000217.html
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Michael Dawson <midawson@redhat.com>
    @hassaanp @richardlau
    hassaanp authored and richardlau committed Mar 17, 2022
    Configuration menu
    Copy the full SHA
    b8d0906 View commit details
    Browse the repository at this point in the history

  3. deps: update archs files for quictls/openssl-3.0.2+quic 

    After an OpenSSL source update, all the config files need to be
regenerated and committed by:
    $ make -C deps/openssl/config
    $ git add deps/openssl/config/archs
    $ git add deps/openssl/openssl
    $ git commit

PR-URL: #42356
Refs: https://mta.openssl.org/pipermail/openssl-announce/2022-March/000217.html
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Michael Dawson <midawson@redhat.com>
    @hassaanp @richardlau
    hassaanp authored and richardlau committed Mar 17, 2022
    Configuration menu
    Copy the full SHA
    55e293e View commit details
    Browse the repository at this point in the history

  4. test: fix tests affected by OpenSSL update 

    Last OpenSSL 3 update changes behaviour back to be
closer to that of OpenSSL 1.1.1. Remove some instances
where we expected different errors from OpenSSL 3 versus
OpenSSL 1.1.1.

Signed-off-by: Michael Dawson <midawson@redhat.com>

PR-URL: #42356
Refs: https://mta.openssl.org/pipermail/openssl-announce/2022-March/000217.html
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Michael Dawson <midawson@redhat.com>
    @mhdawson @richardlau
    mhdawson authored and richardlau committed Mar 17, 2022
    Configuration menu
    Copy the full SHA
    c8b6d92 View commit details
    Browse the repository at this point in the history

  5. 2022-03-17, Version 17.7.2 (Current) 

    This is a security release.

Notable changes:

Update to OpenSSL 3.0.2, which addresses the following vulnerability:
- Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
  More details are available at https://www.openssl.org/news/secadv/20220315.txt

PR-URL: #42381
    @richardlau
    richardlau committed Mar 17, 2022
    Configuration menu
    Copy the full SHA
    db3d882 View commit details
    Browse the repository at this point in the history