CVS commit: pkgsrc/lang/nodejs

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Oct 16 19:15:17 UTC 2023

Modified Files:
        pkgsrc/lang/nodejs: Makefile distinfo

Log Message:
nodejs: updated to 20.8.1

Version 20.8.1 (Current)

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

CVE-2023-44487: nghttp2 Security Release (High)
CVE-2023-45143: undici Security Release (High)
CVE-2023-39332: Path traversal through path stored in Uint8Array (High)
CVE-2023-39331: Permission model improperly protects against path traversal (High)
CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium)
CVE-2023-39333: Code injection via WebAssembly export names (Low)


To generate a diff of this commit:
cvs rdiff -u -r1.274 -r1.275 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.246 -r1.247 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs/Makefile
diff -u pkgsrc/lang/nodejs/Makefile:1.274 pkgsrc/lang/nodejs/Makefile:1.275
--- pkgsrc/lang/nodejs/Makefile:1.274   Sun Oct  1 16:00:13 2023
+++ pkgsrc/lang/nodejs/Makefile Mon Oct 16 19:15:17 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.274 2023/10/01 16:00:13 adam Exp $
+# $NetBSD: Makefile,v 1.275 2023/10/16 19:15:17 adam Exp $
 
-DISTNAME=      node-v20.8.0
+DISTNAME=      node-v20.8.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++17

Index: pkgsrc/lang/nodejs/distinfo
diff -u pkgsrc/lang/nodejs/distinfo:1.246 pkgsrc/lang/nodejs/distinfo:1.247
--- pkgsrc/lang/nodejs/distinfo:1.246   Sun Oct  1 16:00:13 2023
+++ pkgsrc/lang/nodejs/distinfo Mon Oct 16 19:15:17 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.246 2023/10/01 16:00:13 adam Exp $
+$NetBSD: distinfo,v 1.247 2023/10/16 19:15:17 adam Exp $
 
-BLAKE2s (node-v20.8.0.tar.xz) = fd3cef6d97ddb955327baed0dfc2aaaa7deb544d89480ce4c51a7b51486a9a3e
-SHA512 (node-v20.8.0.tar.xz) = 9b2a8c14aee765f1fb039ce949eac635160b44cc3ae6507fe96637b9c8fc4e90a492dd3e0ce2173e190fa534dcd5d76e2639d9812406e0a9de4ec2e2ec1b4e2d
-Size (node-v20.8.0.tar.xz) = 41855692 bytes
+BLAKE2s (node-v20.8.1.tar.xz) = 2fedcaa70f6e4017469e0513e035ee2159c24b6d6f7cdf450413b9c6d5d99165
+SHA512 (node-v20.8.1.tar.xz) = d76245a8ec35fdb481e898efc457d3804d425a0d8e2da9175cdcc41036c57b5a6c23a5c2e84b7b417d3f48be631bff86708b2cae9e65ca3a22908caa3190ed1b
+Size (node-v20.8.1.tar.xz) = 41863408 bytes
 SHA1 (patch-common.gypi) = f50615affd26c2c7902d2112c8e9f2704c057b9c
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec