CVS commit: [pkgsrc-2022Q3] pkgsrc/lang/nodejs14

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Oct  3 14:02:17 UTC 2022

Modified Files:
        pkgsrc/lang/nodejs14 [pkgsrc-2022Q3]: Makefile distinfo

Log Message:
Pullup ticket #6674 - requested by taca
lang/nodejs14: security fix

Revisions pulled up:
- lang/nodejs14/Makefile                                        1.5
- lang/nodejs14/distinfo                                        1.4

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Sep 27 07:54:19 UTC 2022

   Modified Files:
        pkgsrc/lang/nodejs14: Makefile distinfo

   Log Message:
   nodejs14: updated to 14.20.1

   Version 14.20.1 'Fermium' (LTS)

   This is a security release.

   Notable changes

   The following CVEs are fixed in this release:

   CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
   CVE-2022-32213: bypass via obs-fold mechanic (Medium)
   CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/lang/nodejs14/Makefile
cvs rdiff -u -r1.3 -r1.3.2.1 pkgsrc/lang/nodejs14/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs14/Makefile
diff -u pkgsrc/lang/nodejs14/Makefile:1.4 pkgsrc/lang/nodejs14/Makefile:1.4.2.1
--- pkgsrc/lang/nodejs14/Makefile:1.4   Fri Jul  8 13:29:36 2022
+++ pkgsrc/lang/nodejs14/Makefile       Mon Oct  3 14:02:17 2022
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2022/07/08 13:29:36 adam Exp $
+# $NetBSD: Makefile,v 1.4.2.1 2022/10/03 14:02:17 bsiegert Exp $
 
-DISTNAME=      node-v14.20.0
+DISTNAME=      node-v14.20.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++14
@@ -27,9 +27,9 @@ CXXFLAGS+=    -mstackrealign
 .include "../../lang/nodejs/options.mk"
 
 # Node turns on -latomic for arm, mips and ppc.
-.if !empty(MACHINE_ARCH:M*arm*) || \
-    !empty(MACHINE_ARCH:M*powerpc*) || \
-    !empty(MACHINE_ARCH:M*mips*)
+.if ${MACHINE_ARCH:M*arm*} || \
+    ${MACHINE_ARCH:M*powerpc*} || \
+    ${MACHINE_ARCH:M*mips*}
 .include "../../devel/libatomic/buildlink3.mk"
 .endif
 

Index: pkgsrc/lang/nodejs14/distinfo
diff -u pkgsrc/lang/nodejs14/distinfo:1.3 pkgsrc/lang/nodejs14/distinfo:1.3.2.1
--- pkgsrc/lang/nodejs14/distinfo:1.3   Fri Jul  8 13:29:36 2022
+++ pkgsrc/lang/nodejs14/distinfo       Mon Oct  3 14:02:17 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2022/07/08 13:29:36 adam Exp $
+$NetBSD: distinfo,v 1.3.2.1 2022/10/03 14:02:17 bsiegert Exp $
 
-BLAKE2s (node-v14.20.0.tar.xz) = 07861c31cc674f6238b64c0c04c3320c4db9e3f3ed4cac9a743519ce1f441cec
-SHA512 (node-v14.20.0.tar.xz) = 400eb247c1d37ca64f4d643ab1852d2e1415ee190cf726b1e9b058386a1ebd6d7a9f40092afff228ec7980f37a78978252c1ef115aee47ec5b90c065f136b10f
-Size (node-v14.20.0.tar.xz) = 34487684 bytes
+BLAKE2s (node-v14.20.1.tar.xz) = c888743d669032cd93fe1e04f83b678ab100f379c1704922f86b36be268af7db
+SHA512 (node-v14.20.1.tar.xz) = 27186e6b877189c7976fe566cbc4f5e961941f74af7e2f96a0829d6061b880569095666da70545f61a017f1b520050ab6ef5fc98e2e71e72253633f88a9264fb
+Size (node-v14.20.1.tar.xz) = 34482880 bytes
 SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3