pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/lang/nodejs



Module Name:    pkgsrc
Committed By:   fhajny
Date:           Thu Sep 24 14:17:18 UTC 2015

Modified Files:
        pkgsrc/lang/nodejs: Makefile PLIST distinfo

Log Message:
Update lang/nodejs to 4.1.1. ok by jperkin.

- buffer: Fixed a bug introduced in v4.1.0 where allocating
  a new zero-length buffer can result in the next allocation
  of a TypedArray in JavaScript not being zero-filled. In
  certain circumstances this could result in data leakage
  via reuse of memory space in TypedArrays, breaking the
  normally safe assumption that TypedArrays should be always
  zero-filled.
- http: Guard against response-splitting of HTTP trailing headers
  added via response.addTrailers() by removing new-line ([\r\n])
  characters from values. Note that standard header values are
  already stripped of new-line characters. The expected security
  impact is low because trailing headers are rarely used.
- npm: Upgrade to npm 2.14.4 from 2.14.3, see release notes for
  full details
  - Upgrades graceful-fs on multiple dependencies to no longer rely
    on monkey-patching fs
  - Fix npm link for pre-release / RC builds of Node
- v8: Update post-mortem metadata to allow post-mortem debugging tools
  to find and inspect:
  - JavaScript objects that use dictionary properties
  - ScopeInfo and thus closures


To generate a diff of this commit:
cvs rdiff -u -r1.41 -r1.42 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/lang/nodejs/PLIST
cvs rdiff -u -r1.38 -r1.39 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index