node:25-alpine ships openssl 3.5.5-r0 — any plans to rebuild with patched OpenSSL? #2449
-
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V25.md#2026-02-10-version-2561-current-aduh95 shows that OpenSSL was updated to 3.5.5 in Node.js 25.6.1
nodejs/node#62629 has done the update and that will automatically be included in a future Node.js Docker build. The follow-on for Node.js 25 is Node.js 26. The update will probably not be in the first release v26.0.0 since there is already a build freeze in place. You can find some general background information in the SECURITY document. You can subscribe to Node.js releases by going to https://github.com/nodejs/node and selecting Watch -> Custom -> Releases. Check the release notes when they are available to see if the OpenSSL update is included. |
Beta Was this translation helpful? Give feedback.

https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V25.md#2026-02-10-version-2561-current-aduh95 shows that OpenSSL was updated to 3.5.5 in Node.js 25.6.1
I would expect the next release of Node.js 25 to have the OpenSSL 3.5.6 update included.Node.js 25 is now in maintenance mode, so there aren't any new regular releases expected. There may however be security releases during the remaining lifetime of Node.js 25.nodejs/node#62629 has done the update and that will automatically be included in a future Node.js Docker build. The follow-on for Node.js 25 is Node.js 26. The update will probably not be in the first release v26.0.0 since there is already a build freeze in place.
Y…