CVS commit: pkgsrc/lang/nodejs10

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Feb  7 09:50:36 UTC 2020

Modified Files:
        pkgsrc/lang/nodejs10: Makefile distinfo

Log Message:
nodejs10: updated to 10.19.0

Version 10.19.0 'Dubnium' (LTS):

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.

Also, HTTP parsing is more strict to be more secure. Since this may cause problems in interoperability with some non-conformant HTTP implementations, it is possible to disable the strict checks with 
the --insecure-http-parser command line flag, or the insecureHTTPParser http option. Using the insecure HTTP parser should be avoided.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/nodejs10/Makefile \
    pkgsrc/lang/nodejs10/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs10/Makefile
diff -u pkgsrc/lang/nodejs10/Makefile:1.3 pkgsrc/lang/nodejs10/Makefile:1.4
--- pkgsrc/lang/nodejs10/Makefile:1.3   Fri Jan 24 18:57:09 2020
+++ pkgsrc/lang/nodejs10/Makefile       Fri Feb  7 09:50:36 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2020/01/24 18:57:09 adam Exp $
+# $NetBSD: Makefile,v 1.4 2020/02/07 09:50:36 adam Exp $
 
-DISTNAME=      node-v10.18.1
+DISTNAME=      node-v10.19.0
 
 USE_LANGUAGES= c gnu++14
 
Index: pkgsrc/lang/nodejs10/distinfo
diff -u pkgsrc/lang/nodejs10/distinfo:1.3 pkgsrc/lang/nodejs10/distinfo:1.4
--- pkgsrc/lang/nodejs10/distinfo:1.3   Fri Jan 24 18:57:09 2020
+++ pkgsrc/lang/nodejs10/distinfo       Fri Feb  7 09:50:36 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.3 2020/01/24 18:57:09 adam Exp $
+$NetBSD: distinfo,v 1.4 2020/02/07 09:50:36 adam Exp $
 
-SHA1 (node-v10.18.1.tar.gz) = 272a6c0377e8cf6759407af14f9f39de393cdb51
-RMD160 (node-v10.18.1.tar.gz) = 6b03617ef1df6962e455311bae3c3b93cecc1dc7
-SHA512 (node-v10.18.1.tar.gz) = df8f1e58c645c457b6a271f3ed532020bc2420c97b80cb60dffcef9d1fd45a59234820d730b7ccb9d1fa764b1d3e68c69cafd415a5505de806677a91765b8176
-Size (node-v10.18.1.tar.gz) = 46995278 bytes
+SHA1 (node-v10.19.0.tar.gz) = eb57b9bd5db653a0c5de587f88491d1188650534
+RMD160 (node-v10.19.0.tar.gz) = d91870e2d10afe83a7f28bc9072af01d972ee979
+SHA512 (node-v10.19.0.tar.gz) = 59f584e27dfd99453a031722ca3e094d658a90e77316a85a7048868fe6a6164b8aef0f03b60cbe681ace273d902434210bf3cd10a638583b74264d8b42bf2565
+Size (node-v10.19.0.tar.gz) = 46995598 bytes
 SHA1 (patch-common.gypi) = de37949f38d9bd39a18b59d59ec74e528bd323ac
 SHA1 (patch-configure.py) = 0d5c5fb3b4f2618c15f96080b590baf6bde66391
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32