Skip to content

deps: update OpenSSL to 3.5.4 - #60100

Closed
nodejs-github-bot wants to merge 3 commits into
mainfrom
actions/tools-update-openssl
Closed

nodejs-github-bot wants to merge 3 commits into
mainfrom
actions/tools-update-openssl

Conversation

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

This is an automated update of OpenSSL to 3.5.4.

@nodejs-github-bot nodejs-github-bot added dependencies PRs that add, update, or configure Node.js dependencies. openssl Issues and PRs related to the OpenSSL dependency. labels Oct 1, 2025
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator Author

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added the needs-ci PRs that need a full CI run. label Oct 1, 2025
@targos targos closed this Oct 1, 2025
@targos
targos deleted the actions/tools-update-openssl branch October 1, 2025 18:49
@chrisharrison

Copy link
Copy Markdown

OpenSSL < 3.5.4 is vulnerable. Currently the latest versions of Node 22 and 24 have a vulnerable version of OpenSSL embedded.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies PRs that add, update, or configure Node.js dependencies. needs-ci PRs that need a full CI run. openssl Issues and PRs related to the OpenSSL dependency.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants