pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang/nodejs Update lang/nodejs to 6.9.0.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/a627e89e34c8
branches:  trunk
changeset: 354017:a627e89e34c8
user:      fhajny <fhajny%pkgsrc.org@localhost>
date:      Tue Oct 18 20:44:34 2016 +0000

description:
Update lang/nodejs to 6.9.0.

- crypto: Don't automatically attempt to load an OpenSSL
  configuration file, from the OPENSSL_CONF environment variable
  or from the default location for the current platform. Always
  triggering a configuration file load attempt may allow an attacker
  to load compromised OpenSSL configuration into a Node.js process
  if they are able to place a file in a default location.
- node: Introduce the process.release.lts property, set to "Boron".
  This value is "Argon" for v4 LTS releases and undefined for all
  other releases.
- V8: Backport fix for CVE-2016-5172, an arbitrary memory read.
- v8_inspector: Generate a UUID for each execution of the
  inspector. This provides additional security to prevent
  unauthorized clients from connecting to the Node.js process via
  the v8_inspector port when running with --inspect.

diffstat:

 lang/nodejs/Makefile               |   4 ++--
 lang/nodejs/distinfo               |  11 +++++------
 lang/nodejs/patches/patch-node.gyp |  16 ----------------
 3 files changed, 7 insertions(+), 24 deletions(-)

diffs (58 lines):

diff -r f0ac7541b5b6 -r a627e89e34c8 lang/nodejs/Makefile
--- a/lang/nodejs/Makefile      Tue Oct 18 20:38:08 2016 +0000
+++ b/lang/nodejs/Makefile      Tue Oct 18 20:44:34 2016 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.77 2016/10/13 14:09:11 fhajny Exp $
+# $NetBSD: Makefile,v 1.78 2016/10/18 20:44:34 fhajny Exp $
 
-DISTNAME=      node-v6.8.0
+DISTNAME=      node-v6.9.0
 
 .include "../../lang/nodejs/Makefile.common"
 .include "../../mk/bsd.pkg.mk"
diff -r f0ac7541b5b6 -r a627e89e34c8 lang/nodejs/distinfo
--- a/lang/nodejs/distinfo      Tue Oct 18 20:38:08 2016 +0000
+++ b/lang/nodejs/distinfo      Tue Oct 18 20:44:34 2016 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.76 2016/10/13 14:09:11 fhajny Exp $
+$NetBSD: distinfo,v 1.77 2016/10/18 20:44:34 fhajny Exp $
 
-SHA1 (node-v6.8.0.tar.gz) = aedccc259f9b641e9820e694721a916e73f4ba8f
-RMD160 (node-v6.8.0.tar.gz) = 6d73d4f71afbf125d7c7e351350afbab1142161a
-SHA512 (node-v6.8.0.tar.gz) = 040572dd7ed9297f557d1e9f158086f6bdcc31fcef3fd940e911ef599f396c419f40dec3e62b48a0a84594ce880c27c3934bae1a68bf34410028fbe4e5016f89
-Size (node-v6.8.0.tar.gz) = 26502047 bytes
+SHA1 (node-v6.9.0.tar.gz) = 3d17aaee256e1e817deb09c90ec7a431fdc08647
+RMD160 (node-v6.9.0.tar.gz) = 019b9e876b5974981f94d1290ab90411d0d85b20
+SHA512 (node-v6.9.0.tar.gz) = 7cefa97e4d460d84e58afec7f99f615c66e9a8a4dc1c42f50d5342333f36085f21ef1cecbcda148886d1bd48156c4881a9fed5ad28a143f85782236321626fe1
+Size (node-v6.9.0.tar.gz) = 26503327 bytes
 SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6
 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f
 SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50
@@ -19,7 +19,6 @@
 SHA1 (patch-deps_v8_src_log-utils.h) = 32bbf2de2af7a8ab6900a4d5e968dcc1357f6de2
 SHA1 (patch-deps_v8_src_types.h) = 250ab540fa28caeea034ed02b84182bc770cdf35
 SHA1 (patch-deps_v8_tools_run-llprof.sh) = 39aa3faf77492ef8dd35b411b7b0e4605b469af3
-SHA1 (patch-node.gyp) = 918c4124aeb0e1043686b33a1bc43f563f49b813
 SHA1 (patch-src_cares__wrap.cc) = d9510afd0cd4b0156a604d9197d9f97d6e3b291f
 SHA1 (patch-src_node.cc) = 7004baf140e252861494b4fb003beeaa8581be78
 SHA1 (patch-tools_gyp_pylib_gyp_common.py) = 132008f362ea696e43a4d19bf9d8a0ac754ef55c
diff -r f0ac7541b5b6 -r a627e89e34c8 lang/nodejs/patches/patch-node.gyp
--- a/lang/nodejs/patches/patch-node.gyp        Tue Oct 18 20:38:08 2016 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,16 +0,0 @@
-$NetBSD: patch-node.gyp,v 1.1 2016/10/13 14:09:12 fhajny Exp $
-
-Backport system zlib fix from upstream master.
-https://github.com/nodejs/node/pull/9077
-
---- node.gyp.orig      2016-10-12 19:04:28.000000000 +0000
-+++ node.gyp
-@@ -477,6 +477,8 @@
-         }],
-         [ 'node_shared_zlib=="false"', {
-           'dependencies': [ 'deps/zlib/zlib.gyp:zlib' ],
-+        }, {
-+          'defines': [ 'ZLIB_CONST' ],
-         }],
- 
-         [ 'node_shared_http_parser=="false"', {



Home | Main Index | Thread Index | Old Index