CVS commit: pkgsrc/lang/nodejs

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Aug  4 09:08:32 UTC 2021

Modified Files:
        pkgsrc/lang/nodejs: Makefile distinfo

Log Message:
nodejs: updated to 14.17.4

Version 14.17.4 'Fermium' (LTS)

This is a security release.

Notable Changes

CVE-2021-22930: Use after free on close http2 on stream canceling (High)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. You can read more about it in 
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930
This releases also fixes some regressions with internationalization introduced by the ICU updates in Node.js 14.17.0 and 14.17.1.


To generate a diff of this commit:
cvs rdiff -u -r1.217 -r1.218 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.199 -r1.200 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs/Makefile
diff -u pkgsrc/lang/nodejs/Makefile:1.217 pkgsrc/lang/nodejs/Makefile:1.218
--- pkgsrc/lang/nodejs/Makefile:1.217   Tue Jul  6 07:05:39 2021
+++ pkgsrc/lang/nodejs/Makefile Wed Aug  4 09:08:32 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.217 2021/07/06 07:05:39 adam Exp $
+# $NetBSD: Makefile,v 1.218 2021/08/04 09:08:32 adam Exp $
 
-DISTNAME=      node-v14.17.3
+DISTNAME=      node-v14.17.4
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++14

Index: pkgsrc/lang/nodejs/distinfo
diff -u pkgsrc/lang/nodejs/distinfo:1.199 pkgsrc/lang/nodejs/distinfo:1.200
--- pkgsrc/lang/nodejs/distinfo:1.199   Tue Jul  6 07:05:39 2021
+++ pkgsrc/lang/nodejs/distinfo Wed Aug  4 09:08:32 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.199 2021/07/06 07:05:39 adam Exp $
+$NetBSD: distinfo,v 1.200 2021/08/04 09:08:32 adam Exp $
 
-SHA1 (node-v14.17.3.tar.xz) = 248ddc0f050c7fc1396f2d2e83a503a64b4e0eaa
-RMD160 (node-v14.17.3.tar.xz) = 5f392a980922dfab4b608ab010bea572e07885b8
-SHA512 (node-v14.17.3.tar.xz) = c6096715299f155b96df873976da91e854da7e99cde635cdb65d5c962abc5283dac86b8ddce4f5a9f7498f9793ff08943645b5e5b0b23395dfe035f7295218bb
-Size (node-v14.17.3.tar.xz) = 33585080 bytes
+SHA1 (node-v14.17.4.tar.xz) = 8fe99963072062051d14005b01e4e7124b30b472
+RMD160 (node-v14.17.4.tar.xz) = 72517cf54d051a3d1ff687d990712d2eb8c6728d
+SHA512 (node-v14.17.4.tar.xz) = c06228f1a82cf887fa1557be58a8814027926f5c9750c9f1a1656afd6f58151be08e05203343c62fb9a3957d99a73bee6fe509e52543fdbc5bd4c05a1e76c3cf
+Size (node-v14.17.4.tar.xz) = 33592020 bytes
 SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3