A concern about v12.16.2 update openssl to 1.1.1e

[pdh0710]

(Please excuse my English)

Recently Node.js Erbium LTS version was updated to v12.16.2. And the v12.16.2 updated Openssl to 1.1.1e. However Openssl 1.1.1e had some serious bugs. Thus Openssl 1.1.1e was quickly updated to 1.1.1f.
Please check if Node.js v12.16.2 is affected by Openssl 1.1.1e bugs.

In my case, I had a problem in building an Nginx web server with Openssl 1.1.1e. And the problem was related to this.

[sam-github]

None of our unit tests detected any issue with openssl 1.1.1e.

Have you found any issues when using Node.js specifically?

By the way, the 1.1.1f update has landed in master, and will roll out into the LTS lines in the normal course of release updates: #32583

[pdh0710]

I'm still using v12.16.1. I will not upgrade to v12.16.2, unless there is a specific reason. Because I already experienced a problem with Openssl 1.1.1e, as I mentioned above (though the problem was related to Nginx not Node.js).

[sam-github]

OK, so your request was that we check if node.js is affected by issues with stricter error handling in openssl1.1.1e (later reverted in 1.1.1f, but AFAICT, intended to come back in 3.0.0).

We have run our tests, they are fairly comprehensive, and we've received no reports of issues from users. I'll close this for now, but feel free to follow up if further info becomes available.