René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Node 20.20.0 built with openssl 3.0.17","articleBody":"### Version\n\nv20.20.0\n\n### Platform\n\n```text\nLinux 5af924a78c94 6.17.8-orbstack-00308-g8f9c941121b1 #1 SMP PREEMPT Thu Nov 20 09:34:02 UTC 2025 aarch64 Linux\n```\n\n### Subsystem\n\n_No response_\n\n### What steps will reproduce the bug?\n\nCVE-2025-15467 is patched in openssl 3.0.19, but node 20.20.0 is built using 3.0.17, AWS inspector finds 3.0.17 in 3 files:\n/usr/local/include/node/openssl/archs/linux-x86_64/asm/include/openssl/opensslv.h\n/usr/local/include/node/openssl/archs/linux-x86_64/asm_avx2/include/openssl/opensslv.h\n/usr/local/include/node/openssl/archs/linux-x86_64/no-asm/include/openssl/opensslv.h\n\n### How often does it reproduce? Is there a required condition?\n\neverytime, no required conditions\n\n### What is the expected behavior? Why is that the expected behavior?\n\n3.0.19 in the built version of node\n\n### What do you see instead?\n\n3.0.17\n\n### Additional information\n\n_No response_","author":{"url":"https://github.com/pooley182","@type":"Person","name":"pooley182"},"datePublished":"2026-02-19T15:46:42.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/61887/node/issues/61887"}