Received: by mail.netbsd.org (Postfix, from userid 605) id 01C3F84D58; Wed, 3 Jun 2020 08:41:26 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 7F1CA84CDC for ; Wed, 3 Jun 2020 08:41:25 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id vowvq0Cm-ny4 for ; Wed, 3 Jun 2020 08:41:25 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id F21D584CDB for ; Wed, 3 Jun 2020 08:41:24 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id EFCA1FB27; Wed, 3 Jun 2020 08:41:24 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1591173684251290" MIME-Version: 1.0 Date: Wed, 3 Jun 2020 08:41:24 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/lang/nodejs To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20200603084124.EFCA1FB27@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1591173684251290 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Wed Jun 3 08:41:24 UTC 2020 Modified Files: pkgsrc/lang/nodejs: Makefile distinfo Log Message: nodejs: updated to 14.4.0 Version 14.4.0 (Current) Notable changes This is a security release. Vulnerabilities fixed: CVE-2020-8172: TLS session reuse can lead to host certificate verification bypass (High). CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low). CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High). Commits - crypto: update root certificates - (SEMVER-MINOR) deps: update nghttp2 to 1.41.0 - (SEMVER-MINOR) http2: implement support for max settings entries - napi: fix memory corruption vulnerability - tls: emit session after verifying certificate - tools: update certdata.txt To generate a diff of this commit: cvs rdiff -u -r1.183 -r1.184 pkgsrc/lang/nodejs/Makefile cvs rdiff -u -r1.171 -r1.172 pkgsrc/lang/nodejs/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1591173684251290 Content-Disposition: inline Content-Length: 1881 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/nodejs/Makefile diff -u pkgsrc/lang/nodejs/Makefile:1.183 pkgsrc/lang/nodejs/Makefile:1.184 --- pkgsrc/lang/nodejs/Makefile:1.183 Tue Jun 2 08:22:45 2020 +++ pkgsrc/lang/nodejs/Makefile Wed Jun 3 08:41:24 2020 @@ -1,11 +1,10 @@ -# $NetBSD: Makefile,v 1.183 2020/06/02 08:22:45 adam Exp $ +# $NetBSD: Makefile,v 1.184 2020/06/03 08:41:24 adam Exp $ -DISTNAME= node-v14.3.0 +DISTNAME= node-v14.4.0 EXTRACT_SUFX= .tar.xz USE_LANGUAGES= c gnu++14 -PKGREVISION= 1 .include "../../mk/bsd.prefs.mk" # XXX: figure out a way to add rpaths to torque Index: pkgsrc/lang/nodejs/distinfo diff -u pkgsrc/lang/nodejs/distinfo:1.171 pkgsrc/lang/nodejs/distinfo:1.172 --- pkgsrc/lang/nodejs/distinfo:1.171 Wed May 20 06:58:35 2020 +++ pkgsrc/lang/nodejs/distinfo Wed Jun 3 08:41:24 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.171 2020/05/20 06:58:35 adam Exp $ +$NetBSD: distinfo,v 1.172 2020/06/03 08:41:24 adam Exp $ -SHA1 (node-v14.3.0.tar.xz) = 5c83a27cf71559f8afdc30572f51860a3f900bca -RMD160 (node-v14.3.0.tar.xz) = 0095c9ddf3890dfd6e3291cd734bddad04c1e6fe -SHA512 (node-v14.3.0.tar.xz) = 3afcc430bad57150baa8d1c0e5ef0f64691ef6549a052be654a86313fe28f31e7fdfeea4d2b3993798a7141bc6d7b1642747d1bc2636139e2f2fd79441580148 -Size (node-v14.3.0.tar.xz) = 32985344 bytes +SHA1 (node-v14.4.0.tar.xz) = 410b41fc6723af146914d1359ef2c19646d3bde2 +RMD160 (node-v14.4.0.tar.xz) = 830ab17bad8cbb9d04877216c157e86cb149c58f +SHA512 (node-v14.4.0.tar.xz) = f1a7c788a8a149b942ec2b90a4314baaa5355c381029eda45002728ce7209925c016323b0ec1e0dfe2359fddb24f494df125805d0d266b738a333dcddb3f59c3 +Size (node-v14.4.0.tar.xz) = 33005312 bytes SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3 --_----------=_1591173684251290--