mirror of
https://github.com/nodejs/node.git
synced 2026-11-09 15:11:11 -05:00
OpenSSL-3.0.1: OpenSSL-3.0.1 contains a fix for CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl (Moderate). This is a vulnerability in OpenSSL that may be exploited through Node.js. More information can be read here: https://www.openssl.org/news/secadv/20211214.txt. Contributed by Richard Lau https://github.com/nodejs/node/pull/41177 Other Notable Changes: * lib: * make AbortSignal cloneable/transferable (James M Snell) https://github.com/nodejs/node/pull/41050 * deps: * upgrade npm to 8.3.0 (npm team) https://github.com/nodejs/node/pull/41127 * doc: * add @bnb as a collaborator (Tierney Cyren) https://github.com/nodejs/node/pull/41100 * process: * add `getActiveResourcesInfo()` (Darshan Sen) https://github.com/nodejs/node/pull/40813 * timers: * add experimental scheduler api (James M Snell) https://github.com/nodejs/node/pull/40909 PR-URL: https://github.com/nodejs/node/pull/41167