CVS commit: pkgsrc/lang/nodejs18

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Feb 17 11:58:37 UTC 2023

Modified Files:
        pkgsrc/lang/nodejs18: Makefile distinfo

Log Message:
nodejs18: updated to 18.14.1

Version 18.14.1 'Hydrogen' (LTS)

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/lang/nodejs18/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/nodejs18/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs18/Makefile
diff -u pkgsrc/lang/nodejs18/Makefile:1.4 pkgsrc/lang/nodejs18/Makefile:1.5
--- pkgsrc/lang/nodejs18/Makefile:1.4   Fri Feb  3 11:49:19 2023
+++ pkgsrc/lang/nodejs18/Makefile       Fri Feb 17 11:58:36 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2023/02/03 11:49:19 adam Exp $
+# $NetBSD: Makefile,v 1.5 2023/02/17 11:58:36 adam Exp $
 
-DISTNAME=      node-v18.14.0
+DISTNAME=      node-v18.14.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c gnu++17

Index: pkgsrc/lang/nodejs18/distinfo
diff -u pkgsrc/lang/nodejs18/distinfo:1.3 pkgsrc/lang/nodejs18/distinfo:1.4
--- pkgsrc/lang/nodejs18/distinfo:1.3   Fri Feb  3 11:49:19 2023
+++ pkgsrc/lang/nodejs18/distinfo       Fri Feb 17 11:58:36 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2023/02/03 11:49:19 adam Exp $
+$NetBSD: distinfo,v 1.4 2023/02/17 11:58:36 adam Exp $
 
-BLAKE2s (node-v18.14.0.tar.xz) = cd283af85d9e9369f974c9bf864d05eaa47b5bdd7eae07e4899af6c4d09d5a95
-SHA512 (node-v18.14.0.tar.xz) = bf1072d17a5ae003310f792b5acf7c36c2f294a802aadbb0977df240e8214344b0d4e9c3ee6fc8351e6249154b4468f1e5db15561168715ae1ecdeb8868b884b
-Size (node-v18.14.0.tar.xz) = 41425240 bytes
+BLAKE2s (node-v18.14.1.tar.xz) = 9153b138377a95b96e3a7972298008de349f94442c5674efe13bb3f496d814e9
+SHA512 (node-v18.14.1.tar.xz) = 0462e7643ca6085088b6fa70df593b861d4d023f9194ed077a7c35cdc62446218b8bc637685adad2ebd96c1ae4a96d8edcbb58443806ca107a29fe53eb81e257
+Size (node-v18.14.1.tar.xz) = 41439328 bytes
 SHA1 (patch-common.gypi) = 80f3645498853b9939167d152365b4fa49528b70
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3