pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/lang/nodejs lang/nodejs: Update to 10.4.1.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/941736a8ca8b
branches:  trunk
changeset: 309269:941736a8ca8b
user:      fhajny <fhajny%pkgsrc.org@localhost>
date:      Thu Jun 14 10:54:26 2018 +0000

description:
lang/nodejs: Update to 10.4.1.

- Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug introduced
  in 9.7.0 that increases the memory consumed when reading from the
  network into JavaScript using the net.Socket object directly as a
  stream.
- http2
  - (CVE-2018-7161): Fixes Denial of Service vulnerability by updating
    the http2 implementation to not crash under certain circumstances
    during cleanup
  - (CVE-2018-1000168): Fixes Denial of Service vulnerability by
    upgrading nghttp2 to 1.32.0
- tls (CVE-2018-7162): Fixes Denial of Service vulnerability by
  updating the TLS implementation to not crash upon receiving
- n-api: Prevent use-after-free in napi_delete_async_work

diffstat:

 lang/nodejs/Makefile |   4 ++--
 lang/nodejs/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r 89e62249f0c8 -r 941736a8ca8b lang/nodejs/Makefile
--- a/lang/nodejs/Makefile      Thu Jun 14 10:53:17 2018 +0000
+++ b/lang/nodejs/Makefile      Thu Jun 14 10:54:26 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.134 2018/06/12 09:06:46 fhajny Exp $
+# $NetBSD: Makefile,v 1.135 2018/06/14 10:54:26 fhajny Exp $
 
-DISTNAME=      node-v10.4.0
+DISTNAME=      node-v10.4.1
 
 USE_LANGUAGES= c gnu++14
 
diff -r 89e62249f0c8 -r 941736a8ca8b lang/nodejs/distinfo
--- a/lang/nodejs/distinfo      Thu Jun 14 10:53:17 2018 +0000
+++ b/lang/nodejs/distinfo      Thu Jun 14 10:54:26 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.127 2018/06/12 09:06:46 fhajny Exp $
+$NetBSD: distinfo,v 1.128 2018/06/14 10:54:26 fhajny Exp $
 
-SHA1 (node-v10.4.0.tar.gz) = f0aa0df32cb4ec75a5e298a193a1e172601a31ac
-RMD160 (node-v10.4.0.tar.gz) = 68ba178ba8ec32e5a73b28969339c32af57145bf
-SHA512 (node-v10.4.0.tar.gz) = 6cf1050f0dd756ab6c90ea11b1853be6cf0231aa0e38d07f34e940a25a4cd450c129ea95fd856a0879dd0bea0b195b972077b40718cb9dfd508198c3d750a7e8
-Size (node-v10.4.0.tar.gz) = 35357659 bytes
+SHA1 (node-v10.4.1.tar.gz) = e924e35d3547445b230df025317dc0fa6e44558c
+RMD160 (node-v10.4.1.tar.gz) = a74cf9c9be184de4c6ea736390f8a6eec601b19c
+SHA512 (node-v10.4.1.tar.gz) = 7b3d53501d30fc04e4e133d646b14aa90d069483cb0bed3169e221d4724fd57b04e57602c940fa8d6b5ea6941fa959b3489e9599a035bb1ed51346891f587485
+Size (node-v10.4.1.tar.gz) = 35360626 bytes
 SHA1 (patch-common.gypi) = de37949f38d9bd39a18b59d59ec74e528bd323ac
 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f
 SHA1 (patch-deps_openssl_config_opensslconf__asm.h) = 7b074ebd5353dff662ac66cf4012926f12dd7b7e



Home | Main Index | Thread Index | Old Index