pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/lang/nodejs



Module Name:    pkgsrc
Committed By:   fhajny
Date:           Wed Feb 10 11:09:23 UTC 2016

Modified Files:
        pkgsrc/lang/nodejs: Makefile PLIST distinfo

Log Message:
Update lang/nodejs to 5.6.0.

- http: fix defects in HTTP header parsing for requests and responses
  that can allow request smuggling (CVE-2016-2086) or response
  splitting (CVE-2016-2216). HTTP header parsing now aligns more
  closely with the HTTP spec including restricting the acceptable
  characters.
- http-parser: upgrade from 2.6.0 to 2.6.1
- npm: upgrade npm from 3.3.12 to 3.6.0 (Rebecca Turner) #4958
- openssl: upgrade from 1.0.2e to 1.0.2f. To mitigate against the
  Logjam attack, TLS clients now reject Diffie-Hellman handshakes
  with parameters shorter than 1024-bits, up from the previous
  limit of 768-bits.


To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/lang/nodejs/PLIST
cvs rdiff -u -r1.54 -r1.55 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index