Repository navigation
Pending OpenSSL 1.0.2b upgrade #1921
Description
Activity
/cc @nodejs/crypto
I've just made a test branch for upgrading the current HEAD of openssl-1.0.2 branch in
https://github.com/shigeki/io.js/commits/openssl-1.0.2b-pre .
CI works fine as https://jenkins-iojs.nodesource.com/job/iojs+any-pr+multi/782/ . But a test on Win32 is not made yet.There no longer need to apply several floating patches of openssl to iojs so upgrading procedure gets more simpler. I'll update the doc.
OpenSSL-1.0.2b has just been released.
Just looking the advisory at a glance, Malformed ECParameters causes infinite loop (CVE-2015-1788) seems to affect.
Update Branch: https://github.com/shigeki/io.js/tree/openssl-1.0.2b
CI: https://jenkins-iojs.nodesource.com/job/iojs+any-pr+multi/811/
Win32 build is now testing on my Windows.- added 6 commits that reference this issue
on Jun 12, 2015
https://mta.openssl.org/pipermail/openssl-announce/2015-June/000027.html
In a couple of days, on the 11th, there will be a new release containing security fixes. The highest of these is classified as "moderate" so this ought not be a big drama but it would be good for us to be on top of this and have a release out within a day or two max.