Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified)) by mollari.NetBSD.org (Postfix) with ESMTPS id 9E8E11A9239 for ; Tue, 11 Jan 2022 08:02:06 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id D6B0384E85; Tue, 11 Jan 2022 08:02:05 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 1C5C184D66 for ; Tue, 11 Jan 2022 08:02:05 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 8FD3JzYlapvR for ; Tue, 11 Jan 2022 08:02:04 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 8D26C84CFC for ; Tue, 11 Jan 2022 08:02:04 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 86D70FB24; Tue, 11 Jan 2022 08:02:04 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1641888124262750" MIME-Version: 1.0 Date: Tue, 11 Jan 2022 08:02:04 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/lang/nodejs To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20220111080204.86D70FB24@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1641888124262750 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Tue Jan 11 08:02:04 UTC 2022 Modified Files: pkgsrc/lang/nodejs: Makefile distinfo Log Message: nodejs: updated to 14.18.3 Version 14.18.3 'Fermium' (LTS) Notable changes Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531) Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532) Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533) Prototype pollution via console.table properties (Low)(CVE-2022-21824) To generate a diff of this commit: cvs rdiff -u -r1.223 -r1.224 pkgsrc/lang/nodejs/Makefile cvs rdiff -u -r1.206 -r1.207 pkgsrc/lang/nodejs/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1641888124262750 Content-Disposition: inline Content-Length: 1692 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/nodejs/Makefile diff -u pkgsrc/lang/nodejs/Makefile:1.223 pkgsrc/lang/nodejs/Makefile:1.224 --- pkgsrc/lang/nodejs/Makefile:1.223 Wed Dec 8 20:38:58 2021 +++ pkgsrc/lang/nodejs/Makefile Tue Jan 11 08:02:04 2022 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.223 2021/12/08 20:38:58 adam Exp $ +# $NetBSD: Makefile,v 1.224 2022/01/11 08:02:04 adam Exp $ -DISTNAME= node-v14.18.2 +DISTNAME= node-v14.18.3 EXTRACT_SUFX= .tar.xz USE_LANGUAGES= c gnu++14 Index: pkgsrc/lang/nodejs/distinfo diff -u pkgsrc/lang/nodejs/distinfo:1.206 pkgsrc/lang/nodejs/distinfo:1.207 --- pkgsrc/lang/nodejs/distinfo:1.206 Wed Dec 8 20:38:58 2021 +++ pkgsrc/lang/nodejs/distinfo Tue Jan 11 08:02:04 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.206 2021/12/08 20:38:58 adam Exp $ +$NetBSD: distinfo,v 1.207 2022/01/11 08:02:04 adam Exp $ -BLAKE2s (node-v14.18.2.tar.xz) = 1ab2dff0306b324a923ca44db24e87e70a3a5d73f0a781878196f1e9e1bd9e94 -SHA512 (node-v14.18.2.tar.xz) = 9179321e09e91ae68e8833b57fcd8e76aef11546cb9e75a95dc80480513fef46211f308138c10653a050decc687bb31d7975adb388654bc64d41be625fc2e76b -Size (node-v14.18.2.tar.xz) = 34076860 bytes +BLAKE2s (node-v14.18.3.tar.xz) = 3c027f66a3841f301aa8004bd8b53647eb5cee221b84ccb51b4b42fce29a6654 +SHA512 (node-v14.18.3.tar.xz) = f0c77e00d7fde59d50f9f25edaad3ecad3ed13e9f399a557cecb98205c839220d182dec65aef3ba768c51dea6d2c6ebdfbdbe509c3e2d45df578b48d2bafb58f +Size (node-v14.18.3.tar.xz) = 34118448 bytes SHA1 (patch-common.gypi) = f0bd2962bf7c8466db24b35a35154897ecad6316 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3 --_----------=_1641888124262750--