[pkgsrc/pkgsrc-2022Q3]: pkgsrc/lang/nodejs14 Pullup ticket #6674 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/7cf7e18dff72
branches:  pkgsrc-2022Q3
changeset: 386228:7cf7e18dff72
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Mon Oct 03 14:02:17 2022 +0000

description:
Pullup ticket #6674 - requested by taca
lang/nodejs14: security fix

Revisions pulled up:
- lang/nodejs14/Makefile                                        1.5
- lang/nodejs14/distinfo                                        1.4

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Sep 27 07:54:19 UTC 2022

   Modified Files:
        pkgsrc/lang/nodejs14: Makefile distinfo

   Log Message:
   nodejs14: updated to 14.20.1

   Version 14.20.1 'Fermium' (LTS)

   This is a security release.

   Notable changes

   The following CVEs are fixed in this release:

   CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
   CVE-2022-32213: bypass via obs-fold mechanic (Medium)
   CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium)

diffstat:

 lang/nodejs14/Makefile |  10 +++++-----
 lang/nodejs14/distinfo |   8 ++++----
 2 files changed, 9 insertions(+), 9 deletions(-)

diffs (41 lines):

diff -r 0ef48071f4cd -r 7cf7e18dff72 lang/nodejs14/Makefile
--- a/lang/nodejs14/Makefile    Mon Oct 03 11:25:45 2022 +0000
+++ b/lang/nodejs14/Makefile    Mon Oct 03 14:02:17 2022 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2022/07/08 13:29:36 adam Exp $
+# $NetBSD: Makefile,v 1.4.2.1 2022/10/03 14:02:17 bsiegert Exp $
 
-DISTNAME=      node-v14.20.0
+DISTNAME=      node-v14.20.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++14
@@ -27,9 +27,9 @@
 .include "../../lang/nodejs/options.mk"
 
 # Node turns on -latomic for arm, mips and ppc.
-.if !empty(MACHINE_ARCH:M*arm*) || \
-    !empty(MACHINE_ARCH:M*powerpc*) || \
-    !empty(MACHINE_ARCH:M*mips*)
+.if ${MACHINE_ARCH:M*arm*} || \
+    ${MACHINE_ARCH:M*powerpc*} || \
+    ${MACHINE_ARCH:M*mips*}
 .include "../../devel/libatomic/buildlink3.mk"
 .endif
 
diff -r 0ef48071f4cd -r 7cf7e18dff72 lang/nodejs14/distinfo
--- a/lang/nodejs14/distinfo    Mon Oct 03 11:25:45 2022 +0000
+++ b/lang/nodejs14/distinfo    Mon Oct 03 14:02:17 2022 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2022/07/08 13:29:36 adam Exp $
+$NetBSD: distinfo,v 1.3.2.1 2022/10/03 14:02:17 bsiegert Exp $
 
-BLAKE2s (node-v14.20.0.tar.xz) = 07861c31cc674f6238b64c0c04c3320c4db9e3f3ed4cac9a743519ce1f441cec
-SHA512 (node-v14.20.0.tar.xz) = 400eb247c1d37ca64f4d643ab1852d2e1415ee190cf726b1e9b058386a1ebd6d7a9f40092afff228ec7980f37a78978252c1ef115aee47ec5b90c065f136b10f
-Size (node-v14.20.0.tar.xz) = 34487684 bytes
+BLAKE2s (node-v14.20.1.tar.xz) = c888743d669032cd93fe1e04f83b678ab100f379c1704922f86b36be268af7db
+SHA512 (node-v14.20.1.tar.xz) = 27186e6b877189c7976fe566cbc4f5e961941f74af7e2f96a0829d6061b880569095666da70545f61a017f1b520050ab6ef5fc98e2e71e72253633f88a9264fb
+Size (node-v14.20.1.tar.xz) = 34482880 bytes
 SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3