CVS commit: pkgsrc/lang/nodejs12

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jan  5 08:34:57 UTC 2021

Modified Files:
        pkgsrc/lang/nodejs12: Makefile distinfo

Log Message:
nodejs12: updated to 12.20.1

Version 12.20.1 'Erbium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8265: use-after-free in TLSWrap (High) Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, 
node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the 
caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits
CVE-2020-8287: HTTP Request Smuggling in nodejs Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case 
Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).
CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High) This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in 
https://www.openssl.org/news/secadv/20201208.txt


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/lang/nodejs12/Makefile
cvs rdiff -u -r1.18 -r1.19 pkgsrc/lang/nodejs12/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs12/Makefile
diff -u pkgsrc/lang/nodejs12/Makefile:1.27 pkgsrc/lang/nodejs12/Makefile:1.28
--- pkgsrc/lang/nodejs12/Makefile:1.27  Thu Dec 31 20:04:12 2020
+++ pkgsrc/lang/nodejs12/Makefile       Tue Jan  5 08:34:57 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2020/12/31 20:04:12 nia Exp $
+# $NetBSD: Makefile,v 1.28 2021/01/05 08:34:57 adam Exp $
 
-DISTNAME=      node-v12.20.0
+DISTNAME=      node-v12.20.1
 
 USE_LANGUAGES= c gnu++14
 

Index: pkgsrc/lang/nodejs12/distinfo
diff -u pkgsrc/lang/nodejs12/distinfo:1.18 pkgsrc/lang/nodejs12/distinfo:1.19
--- pkgsrc/lang/nodejs12/distinfo:1.18  Wed Dec 16 07:42:39 2020
+++ pkgsrc/lang/nodejs12/distinfo       Tue Jan  5 08:34:57 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.18 2020/12/16 07:42:39 adam Exp $
+$NetBSD: distinfo,v 1.19 2021/01/05 08:34:57 adam Exp $
 
-SHA1 (node-v12.20.0.tar.gz) = 5b8ec841c387ae867b652f1a078afb4c910caea8
-RMD160 (node-v12.20.0.tar.gz) = ea2b77cf3cc38258e4f2880adbbe1ea98ee230c8
-SHA512 (node-v12.20.0.tar.gz) = 7b7ad8ee4059f106938c8716cb1bba5be6ca5b6a8d3592aa18d9142095a2f2cbca835f9ec0a7c533178d6232fcf18db5779c9b7077fd30c6ead394b1eb12284d
-Size (node-v12.20.0.tar.gz) = 53497742 bytes
+SHA1 (node-v12.20.1.tar.gz) = c5b4cdc23dd7c4f766c671f9f4746bf2a34eae94
+RMD160 (node-v12.20.1.tar.gz) = b21e32b78531b71dccdb3f9c5e69bc83e1559d49
+SHA512 (node-v12.20.1.tar.gz) = ce00f10f20e59711c3e57caadb333af29002b832c653c4776fb446167fc1b544d9963b58c726f589c56d53a4f6f2acd3842ec119b402f83dfcd79b9ca6940f00
+Size (node-v12.20.1.tar.gz) = 53249523 bytes
 SHA1 (patch-common.gypi) = a3fa3b5b974f910b3c8fea640ded4dca262e1ba8
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3