René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Node 24.13.0 built with openssl 3.5.4","articleBody":"### Version\n\n24.13.0\n\n### Platform\n\n```text\nDarwin 24.6.0 Darwin Kernel Version 24.6.0: Mon Jul 14 11:30:29 PDT 2025; root:xnu-11417.140.69~1/RELEASE_ARM64_T6000 arm64\n```\n\n### Subsystem\n\n_No response_\n\n### What steps will reproduce the bug?\n\n[CVE-2025-15467](https://security.alpinelinux.org/vuln/CVE-2025-15467) is patched in openssl 3.5.5, but node 24.13.0 is built using 3.5.4, AWS inspector finds 3.5.4 in 3 files:\n/usr/local/include/node/openssl/archs/linux-x86_64/asm/include/openssl/opensslv.h\n/usr/local/include/node/openssl/archs/linux-x86_64/asm_avx2/include/openssl/opensslv.h\n/usr/local/include/node/openssl/archs/linux-x86_64/no-asm/include/openssl/opensslv.h\n\n### How often does it reproduce? Is there a required condition?\n\nYou can cat out the files and see the version there\n\n### What is the expected behavior? Why is that the expected behavior?\n\nopenssl 3.5.5 in the node build\n\n### What do you see instead?\n\n3.5.4\n\n### Additional information\n\n_No response_","author":{"url":"https://github.com/sprintfalcon","@type":"Person","name":"sprintfalcon"},"datePublished":"2026-02-09T17:44:42.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4},"url":"https://github.com/61755/node/issues/61755"}