pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang/nodejs nodejs: updated to 14.17.4



details:   https://anonhg.NetBSD.org/pkgsrc/rev/31f0db79d660
branches:  trunk
changeset: 456613:31f0db79d660
user:      adam <adam%pkgsrc.org@localhost>
date:      Wed Aug 04 09:08:32 2021 +0000

description:
nodejs: updated to 14.17.4

Version 14.17.4 'Fermium' (LTS)

This is a security release.

Notable Changes

CVE-2021-22930: Use after free on close http2 on stream canceling (High)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. You can read more about it in 
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930
This releases also fixes some regressions with internationalization introduced by the ICU updates in Node.js 14.17.0 and 14.17.1.

diffstat:

 lang/nodejs/Makefile |   4 ++--
 lang/nodejs/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r d0838f711c65 -r 31f0db79d660 lang/nodejs/Makefile
--- a/lang/nodejs/Makefile      Wed Aug 04 09:07:38 2021 +0000
+++ b/lang/nodejs/Makefile      Wed Aug 04 09:08:32 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.217 2021/07/06 07:05:39 adam Exp $
+# $NetBSD: Makefile,v 1.218 2021/08/04 09:08:32 adam Exp $
 
-DISTNAME=      node-v14.17.3
+DISTNAME=      node-v14.17.4
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++14
diff -r d0838f711c65 -r 31f0db79d660 lang/nodejs/distinfo
--- a/lang/nodejs/distinfo      Wed Aug 04 09:07:38 2021 +0000
+++ b/lang/nodejs/distinfo      Wed Aug 04 09:08:32 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.199 2021/07/06 07:05:39 adam Exp $
+$NetBSD: distinfo,v 1.200 2021/08/04 09:08:32 adam Exp $
 
-SHA1 (node-v14.17.3.tar.xz) = 248ddc0f050c7fc1396f2d2e83a503a64b4e0eaa
-RMD160 (node-v14.17.3.tar.xz) = 5f392a980922dfab4b608ab010bea572e07885b8
-SHA512 (node-v14.17.3.tar.xz) = c6096715299f155b96df873976da91e854da7e99cde635cdb65d5c962abc5283dac86b8ddce4f5a9f7498f9793ff08943645b5e5b0b23395dfe035f7295218bb
-Size (node-v14.17.3.tar.xz) = 33585080 bytes
+SHA1 (node-v14.17.4.tar.xz) = 8fe99963072062051d14005b01e4e7124b30b472
+RMD160 (node-v14.17.4.tar.xz) = 72517cf54d051a3d1ff687d990712d2eb8c6728d
+SHA512 (node-v14.17.4.tar.xz) = c06228f1a82cf887fa1557be58a8814027926f5c9750c9f1a1656afd6f58151be08e05203343c62fb9a3957d99a73bee6fe509e52543fdbc5bd4c05a1e76c3cf
+Size (node-v14.17.4.tar.xz) = 33592020 bytes
 SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3



Home | Main Index | Thread Index | Old Index