CVS commit: pkgsrc/lang/nodejs10

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Apr  7 06:19:21 UTC 2021

Modified Files:
        pkgsrc/lang/nodejs10: Makefile distinfo

Log Message:
nodejs10: updated to 10.24.1

Version 10.24.1 'Dubnium' (LTS)

This is a security release.

Notable Changes

Vulerabilties fixed:

CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
Impacts:
All versions of the 15.x, 14.x, 12.x and 10.x releases lines

CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
Impacts:
All versions of the 15.x, 14.x, 12.x and 10.x releases lines

CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in https://github.com/advisories/GHSA-c4w7-xm78-47vh
Impacts:
All versions of the 14.x, 12.x and 10.x releases lines


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 pkgsrc/lang/nodejs10/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/nodejs10/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs10/Makefile
diff -u pkgsrc/lang/nodejs10/Makefile:1.22 pkgsrc/lang/nodejs10/Makefile:1.23
--- pkgsrc/lang/nodejs10/Makefile:1.22  Wed Feb 24 11:10:11 2021
+++ pkgsrc/lang/nodejs10/Makefile       Wed Apr  7 06:19:21 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.22 2021/02/24 11:10:11 adam Exp $
+# $NetBSD: Makefile,v 1.23 2021/04/07 06:19:21 adam Exp $
 
-DISTNAME=      node-v10.24.0
+DISTNAME=      node-v10.24.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++14

Index: pkgsrc/lang/nodejs10/distinfo
diff -u pkgsrc/lang/nodejs10/distinfo:1.14 pkgsrc/lang/nodejs10/distinfo:1.15
--- pkgsrc/lang/nodejs10/distinfo:1.14  Wed Feb 24 11:10:11 2021
+++ pkgsrc/lang/nodejs10/distinfo       Wed Apr  7 06:19:21 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.14 2021/02/24 11:10:11 adam Exp $
+$NetBSD: distinfo,v 1.15 2021/04/07 06:19:21 adam Exp $
 
-SHA1 (node-v10.24.0.tar.xz) = 01f110a36a890ed5a527646a2bb85b7fe8eb9847
-RMD160 (node-v10.24.0.tar.xz) = 149c2a5aa49c8a179c879e04d0528db64ac53663
-SHA512 (node-v10.24.0.tar.xz) = 9fe6b48762da06774fb57922cda444e4d1ab2341d555d94c91bc7def3882c68f0e71f89926903b4845fc35af1a48abe5d518a414a5a619f0aef1ac0615b91248
-Size (node-v10.24.0.tar.xz) = 21649616 bytes
+SHA1 (node-v10.24.1.tar.xz) = b476e5aaa305798d903ed0de424ee0a5c8b4eed2
+RMD160 (node-v10.24.1.tar.xz) = 1e59704c06219ced68b1f47abd2e1e176a144f41
+SHA512 (node-v10.24.1.tar.xz) = c25eca3c26dfb82be2e2e2f7b5401fb1811a9586732e12944929bcb6ad1f2bd7a3a97681008922cd28bf330b2672907dd637c718e8c7c55444b9028a2bafdb6d
+Size (node-v10.24.1.tar.xz) = 21647996 bytes
 SHA1 (patch-common.gypi) = de37949f38d9bd39a18b59d59ec74e528bd323ac
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3