pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang/nodejs4 Update lang/nodejs4 to 4.6.0.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/a33cda3e1e3a
branches:  trunk
changeset: 353102:a33cda3e1e3a
user:      fhajny <fhajny%pkgsrc.org@localhost>
date:      Wed Sep 28 11:09:47 2016 +0000

description:
Update lang/nodejs4 to 4.6.0.

- openssl: Remove support for loading dynamic third-party engine
  modules. An attacker may be able to hide malicious code to be
  inserted into Node.js at runtime by masquerading as one of the
  dynamic engine modules.
- http: CVE-2016-5325 - Properly validate for allowable characters
  in the reason argument in ServerResponse#writeHead().
- buffer: Zero-fill excess bytes in new Buffer objects created
  with Buffer.concat() while providing a totalLength parameter
  that exceeds the total length of the original Buffer objects
  being concatenated.
- tls: CVE-2016-7099 - Fix invalid wildcard certificate validation
  check whereby a TLS server may be able to serve an invalid
  wildcard certificate for its hostname due to improper validation
  of *. in the wildcard string.

diffstat:

 lang/nodejs4/Makefile |   4 ++--
 lang/nodejs4/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r 44cc01181405 -r a33cda3e1e3a lang/nodejs4/Makefile
--- a/lang/nodejs4/Makefile     Wed Sep 28 10:07:05 2016 +0000
+++ b/lang/nodejs4/Makefile     Wed Sep 28 11:09:47 2016 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2016/08/19 13:14:37 fhajny Exp $
+# $NetBSD: Makefile,v 1.20 2016/09/28 11:09:47 fhajny Exp $
 
-DISTNAME=      node-v4.5.0
+DISTNAME=      node-v4.6.0
 
 .include "../../lang/nodejs/Makefile.common"
 .include "../../mk/bsd.pkg.mk"
diff -r 44cc01181405 -r a33cda3e1e3a lang/nodejs4/distinfo
--- a/lang/nodejs4/distinfo     Wed Sep 28 10:07:05 2016 +0000
+++ b/lang/nodejs4/distinfo     Wed Sep 28 11:09:47 2016 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2016/08/27 18:11:12 joerg Exp $
+$NetBSD: distinfo,v 1.18 2016/09/28 11:09:47 fhajny Exp $
 
-SHA1 (node-v4.5.0.tar.gz) = e50ce4b67025be8361bbcf6fbdbef86fdec8ad8f
-RMD160 (node-v4.5.0.tar.gz) = f31d3440578c322ca8c1bf2ba4e0e74d5629e60f
-SHA512 (node-v4.5.0.tar.gz) = c4ad7382a387365febc664b11253b01d8e638501419daca0f26eecad9fa285dc9745d81c406aa015ad48d8f2e41371c216494b1318ce5e3c12a945d6e837e790
-Size (node-v4.5.0.tar.gz) = 22708609 bytes
+SHA1 (node-v4.6.0.tar.gz) = 6a5e2e733bf306414b5958e38ac365aa7dc17ca4
+RMD160 (node-v4.6.0.tar.gz) = 0c9c4515b3ed5f12986a19966786fc0a972d1ed5
+SHA512 (node-v4.6.0.tar.gz) = b6797c19859ee061ebb303df3e23026daf22a03d6c270da8c515331b432f304af3dd41d8188ce5c085c13025f2e83bcd3c7ec7a2d2dd5a20a85072c07a30e097
+Size (node-v4.6.0.tar.gz) = 22746881 bytes
 SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6
 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f
 SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50



Home | Main Index | Thread Index | Old Index