Received: by mail.netbsd.org (Postfix, from userid 605) id E500B84D30; Wed, 25 Oct 2017 13:56:02 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 701A484CED for ; Wed, 25 Oct 2017 13:56:02 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id lCMO6ztbcVH8 for ; Wed, 25 Oct 2017 13:56:02 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id F0FBA84CDC for ; Wed, 25 Oct 2017 13:56:01 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id EC143FBDE; Wed, 25 Oct 2017 13:56:01 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1508939761100030" MIME-Version: 1.0 Date: Wed, 25 Oct 2017 13:56:01 +0000 From: "Filip Hajny" Subject: CVS commit: pkgsrc/lang/nodejs4 To: pkgsrc-changes@NetBSD.org Reply-To: fhajny@netbsd.org X-Mailer: log_accum Message-Id: <20171025135601.EC143FBDE@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1508939761100030 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: fhajny Date: Wed Oct 25 13:56:01 UTC 2017 Modified Files: pkgsrc/lang/nodejs4: Makefile distinfo Log Message: Update lang/nodejs4 to 4.8.5. zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. To generate a diff of this commit: cvs rdiff -u -r1.34 -r1.35 pkgsrc/lang/nodejs4/Makefile cvs rdiff -u -r1.29 -r1.30 pkgsrc/lang/nodejs4/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1508939761100030 Content-Disposition: inline Content-Length: 1861 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/nodejs4/Makefile diff -u pkgsrc/lang/nodejs4/Makefile:1.34 pkgsrc/lang/nodejs4/Makefile:1.35 --- pkgsrc/lang/nodejs4/Makefile:1.34 Mon Sep 18 09:53:25 2017 +++ pkgsrc/lang/nodejs4/Makefile Wed Oct 25 13:56:01 2017 @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.34 2017/09/18 09:53:25 maya Exp $ +# $NetBSD: Makefile,v 1.35 2017/10/25 13:56:01 fhajny Exp $ -DISTNAME= node-v4.8.4 +DISTNAME= node-v4.8.5 -PKGREVISION= 1 .include "../../lang/nodejs/Makefile.common" .include "../../mk/bsd.pkg.mk" Index: pkgsrc/lang/nodejs4/distinfo diff -u pkgsrc/lang/nodejs4/distinfo:1.29 pkgsrc/lang/nodejs4/distinfo:1.30 --- pkgsrc/lang/nodejs4/distinfo:1.29 Tue Jul 11 19:16:46 2017 +++ pkgsrc/lang/nodejs4/distinfo Wed Oct 25 13:56:01 2017 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.29 2017/07/11 19:16:46 fhajny Exp $ +$NetBSD: distinfo,v 1.30 2017/10/25 13:56:01 fhajny Exp $ -SHA1 (node-v4.8.4.tar.gz) = f93917817c620c4314ba622a70af4c9565b11286 -RMD160 (node-v4.8.4.tar.gz) = 6ef96faf5f404d6f7d60b9db5d9491ac87fc9b68 -SHA512 (node-v4.8.4.tar.gz) = 6fd1fb7f3197db5b0469439cf2cf8b8ba7192bb9a4decd94f41134c424977dbe8304f812d2d73804d8d10f8bfa1c6e24c220d016b6cee7a4c7247ada4ed2392d -Size (node-v4.8.4.tar.gz) = 22774599 bytes +SHA1 (node-v4.8.5.tar.gz) = 0302446a3b0c4d6638f9d116a7a471f70f2a9ef2 +RMD160 (node-v4.8.5.tar.gz) = 815741050c9babf22edfd9ec77639f2b41e6a929 +SHA512 (node-v4.8.5.tar.gz) = 5936a1128a334bf5415a755a5e1bc810d67e7deb6ea0260f6626c304f491fda9ba885e9b1e0dd8fd9e729c615a8eba450865464c605e5e909026ebccd575eb6e +Size (node-v4.8.5.tar.gz) = 22775183 bytes SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50 --_----------=_1508939761100030--