CVS commit: pkgsrc/lang/nodejs10

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jun  3 09:25:38 UTC 2020

Modified Files:
        pkgsrc/lang/nodejs10: Makefile buildlink3.mk distinfo

Log Message:
nodejs10: updated to 10.21.0

Version 10.21.0 'Dubnium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).
CVE-2020-10531: ICU-20958 Prevent SEGV_MAPERR in append (High).
CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).

Commits

- deps: fix OPENSSLDIR on Windows
- deps: backport ICU-20958 to fix CVE-2020-10531
- (SEMVER-MINOR) deps: update nghttp2 to 1.41.0
- (SEMVER-MINOR) http2: implement support for max settings entries
- napi: fix memory corruption vulnerability


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/lang/nodejs10/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/nodejs10/buildlink3.mk
cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/nodejs10/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs10/Makefile
diff -u pkgsrc/lang/nodejs10/Makefile:1.12 pkgsrc/lang/nodejs10/Makefile:1.13
--- pkgsrc/lang/nodejs10/Makefile:1.12  Tue Jun  2 08:22:46 2020
+++ pkgsrc/lang/nodejs10/Makefile       Wed Jun  3 09:25:38 2020
@@ -1,13 +1,12 @@
-# $NetBSD: Makefile,v 1.12 2020/06/02 08:22:46 adam Exp $
+# $NetBSD: Makefile,v 1.13 2020/06/03 09:25:38 adam Exp $
 
-DISTNAME=      node-v10.20.1
+DISTNAME=      node-v10.21.0
 
 USE_LANGUAGES= c gnu++14
 
 # Requires http_parser_set_max_header_size
 BUILDLINK_API_DEPENDS.http-parser+=    http-parser>=2.9.0
 
-PKGREVISION= 2
 .include "../../mk/bsd.prefs.mk"
 
 # XXX: figure out a way to add rpaths to torque

Index: pkgsrc/lang/nodejs10/buildlink3.mk
diff -u pkgsrc/lang/nodejs10/buildlink3.mk:1.5 pkgsrc/lang/nodejs10/buildlink3.mk:1.6
--- pkgsrc/lang/nodejs10/buildlink3.mk:1.5      Tue Jun  2 08:22:46 2020
+++ pkgsrc/lang/nodejs10/buildlink3.mk  Wed Jun  3 09:25:38 2020
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.5 2020/06/02 08:22:46 adam Exp $
+# $NetBSD: buildlink3.mk,v 1.6 2020/06/03 09:25:38 adam Exp $
 
 BUILDLINK_TREE+=       nodejs
 
@@ -29,7 +29,7 @@ BUILDLINK_API_DEPENDS.http-parser+=   http
 pkgbase := nodejs
 .include "../../mk/pkg-build-options.mk"
 
-.if !empty(PKG_BUILD_OPTIONS.nodejs:Mopenssl)
+.if ${PKG_BUILD_OPTIONS.nodejs:Mopenssl}
 .  include "../../security/openssl/buildlink3.mk"
 .endif
 

Index: pkgsrc/lang/nodejs10/distinfo
diff -u pkgsrc/lang/nodejs10/distinfo:1.6 pkgsrc/lang/nodejs10/distinfo:1.7
--- pkgsrc/lang/nodejs10/distinfo:1.6   Sat May 30 20:44:39 2020
+++ pkgsrc/lang/nodejs10/distinfo       Wed Jun  3 09:25:38 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.6 2020/05/30 20:44:39 joerg Exp $
+$NetBSD: distinfo,v 1.7 2020/06/03 09:25:38 adam Exp $
 
-SHA1 (node-v10.20.1.tar.gz) = e1c366db82e4ee43b58de8a646a502988f47ad49
-RMD160 (node-v10.20.1.tar.gz) = ae5cabf5f953f74976daa17cf9015b780bf022cf
-SHA512 (node-v10.20.1.tar.gz) = ad9c8f54de901fe437738fa7cba4c5895253ee315e85a42294b7046eb723a61a37a4908e6b063300163aeab0a0a2a73a59c86c62fad370bf1aa58a2b42e7920d
-Size (node-v10.20.1.tar.gz) = 47181867 bytes
+SHA1 (node-v10.21.0.tar.gz) = bdb36bf43b52f2ce2f02753d3c9154c761dfea4b
+RMD160 (node-v10.21.0.tar.gz) = 82e6d8c6a1f5d36d7c6bfd9d931cc3c3561fec5d
+SHA512 (node-v10.21.0.tar.gz) = ebd2871d29e2fadf9f743e0cc73e76b7357d0b3834ea40746f6d71664ae0ec0a33c05bf82cb0ef9ae6f5cb5bcdd735e59481e15a5c67367603f5f2089faf1dea
+Size (node-v10.21.0.tar.gz) = 47193648 bytes
 SHA1 (patch-common.gypi) = de37949f38d9bd39a18b59d59ec74e528bd323ac
 SHA1 (patch-configure.py) = 0d5c5fb3b4f2618c15f96080b590baf6bde66391
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32