[pkgsrc/trunk]: pkgsrc/lang/nodejs12 nodejs12: updated to 12.20.1

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/2054e07e4df5
branches:  trunk
changeset: 444336:2054e07e4df5
user:      adam <adam%pkgsrc.org@localhost>
date:      Tue Jan 05 08:34:57 2021 +0000

description:
nodejs12: updated to 12.20.1

Version 12.20.1 'Erbium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8265: use-after-free in TLSWrap (High) Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, 
node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the 
caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits
CVE-2020-8287: HTTP Request Smuggling in nodejs Affected versions of Node.js allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case 
Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html).
CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High) This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in 
https://www.openssl.org/news/secadv/20201208.txt

diffstat:

 lang/nodejs12/Makefile |   4 ++--
 lang/nodejs12/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r 419056eb04aa -r 2054e07e4df5 lang/nodejs12/Makefile
--- a/lang/nodejs12/Makefile    Tue Jan 05 08:31:04 2021 +0000
+++ b/lang/nodejs12/Makefile    Tue Jan 05 08:34:57 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2020/12/31 20:04:12 nia Exp $
+# $NetBSD: Makefile,v 1.28 2021/01/05 08:34:57 adam Exp $
 
-DISTNAME=      node-v12.20.0
+DISTNAME=      node-v12.20.1
 
 USE_LANGUAGES= c gnu++14
 
diff -r 419056eb04aa -r 2054e07e4df5 lang/nodejs12/distinfo
--- a/lang/nodejs12/distinfo    Tue Jan 05 08:31:04 2021 +0000
+++ b/lang/nodejs12/distinfo    Tue Jan 05 08:34:57 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.18 2020/12/16 07:42:39 adam Exp $
+$NetBSD: distinfo,v 1.19 2021/01/05 08:34:57 adam Exp $
 
-SHA1 (node-v12.20.0.tar.gz) = 5b8ec841c387ae867b652f1a078afb4c910caea8
-RMD160 (node-v12.20.0.tar.gz) = ea2b77cf3cc38258e4f2880adbbe1ea98ee230c8
-SHA512 (node-v12.20.0.tar.gz) = 7b7ad8ee4059f106938c8716cb1bba5be6ca5b6a8d3592aa18d9142095a2f2cbca835f9ec0a7c533178d6232fcf18db5779c9b7077fd30c6ead394b1eb12284d
-Size (node-v12.20.0.tar.gz) = 53497742 bytes
+SHA1 (node-v12.20.1.tar.gz) = c5b4cdc23dd7c4f766c671f9f4746bf2a34eae94
+RMD160 (node-v12.20.1.tar.gz) = b21e32b78531b71dccdb3f9c5e69bc83e1559d49
+SHA512 (node-v12.20.1.tar.gz) = ce00f10f20e59711c3e57caadb333af29002b832c653c4776fb446167fc1b544d9963b58c726f589c56d53a4f6f2acd3842ec119b402f83dfcd79b9ca6940f00
+Size (node-v12.20.1.tar.gz) = 53249523 bytes
 SHA1 (patch-common.gypi) = a3fa3b5b974f910b3c8fea640ded4dca262e1ba8
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3