Authentication-Results: name.execsw.org; dkim=pass (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=0V6pnuBC; dkim=pass (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=DWlRq/Fg Received: by mail.netbsd.org (Postfix, from userid 605) id E6A8184E85; Thu, 11 Apr 2024 14:50:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1712847004; bh=/DD+GSoAQY3UMp6tvU30gsKHfU+sEPMJs9RZV5VSk2w=; h=Date:From:Subject:To:Reply-To:List-Id:List-Unsubscribe; b=0V6pnuBCauHOQM6/s90dAzGGIM7OLuqENxAMKIBLZ0SFol5H3hCy+JCwLDY+/dA4H Y1l9QzIyBlXWk3P9ZsNFSz+12L26eSjbSr6D1vfRGFqnejFR4QWQAuDdoEb7de4ZyX MfBdQ0IY8UT3LmWUvwWsnnxfNfQbnLn137V5YDpY= Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D860B84D29 for ; Thu, 11 Apr 2024 14:50:02 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Authentication-Results: mail.netbsd.org (amavisd-new); dkim=pass (1024-bit key) header.d=netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id pLyEfjZ9TD77 for ; Thu, 11 Apr 2024 14:50:02 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 54C6284CE2 for ; Thu, 11 Apr 2024 14:50:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1712847002; bh=/DD+GSoAQY3UMp6tvU30gsKHfU+sEPMJs9RZV5VSk2w=; h=Date:From:Subject:To:Reply-To; b=DWlRq/FgdxlfwWwTvBtoLU1yyT59fnNhIzFVTV36uEurf1d32eYsJLAZmdgXiK5Jr jFxgleOVTjDRGzuXu2oYDs/7UHzJcClCi2/RaoP+Kp6sATRiitolcqT4KqU1r+KNRX 0g/5Sa2TCPy9UYPVefI9ORrs4ERL1rOAz5k0yXY0= Received: by cvs.NetBSD.org (Postfix, from userid 500) id 51315FA2C; Thu, 11 Apr 2024 14:50:02 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_171284700267620" MIME-Version: 1.0 Date: Thu, 11 Apr 2024 14:50:02 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/lang/nodejs20 To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20240411145002.51315FA2C@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_171284700267620 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Thu Apr 11 14:50:02 UTC 2024 Modified Files: pkgsrc/lang/nodejs20: Makefile distinfo Log Message: nodejs20: updated to 20.12.2 Version 20.12.2 'Iron' (LTS) Notable Changes CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 pkgsrc/lang/nodejs20/Makefile cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/nodejs20/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_171284700267620 Content-Disposition: inline Content-Length: 1692 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/nodejs20/Makefile diff -u pkgsrc/lang/nodejs20/Makefile:1.7 pkgsrc/lang/nodejs20/Makefile:1.8 --- pkgsrc/lang/nodejs20/Makefile:1.7 Fri Apr 5 05:31:44 2024 +++ pkgsrc/lang/nodejs20/Makefile Thu Apr 11 14:50:02 2024 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.7 2024/04/05 05:31:44 adam Exp $ +# $NetBSD: Makefile,v 1.8 2024/04/11 14:50:02 adam Exp $ -DISTNAME= node-v20.12.1 +DISTNAME= node-v20.12.2 EXTRACT_SUFX= .tar.xz USE_LANGUAGES= c gnu++17 Index: pkgsrc/lang/nodejs20/distinfo diff -u pkgsrc/lang/nodejs20/distinfo:1.6 pkgsrc/lang/nodejs20/distinfo:1.7 --- pkgsrc/lang/nodejs20/distinfo:1.6 Fri Apr 5 05:31:44 2024 +++ pkgsrc/lang/nodejs20/distinfo Thu Apr 11 14:50:02 2024 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.6 2024/04/05 05:31:44 adam Exp $ +$NetBSD: distinfo,v 1.7 2024/04/11 14:50:02 adam Exp $ -BLAKE2s (node-v20.12.1.tar.xz) = 01500caaeeb52bee1806022df606ee88c50bde4a3329642f431f9d02baad8558 -SHA512 (node-v20.12.1.tar.xz) = c51c4aa37cc80f3fe34381f2cdf431053124ec6b83fc8490573502adfab48601c382448132c9962ab135bebaffc257a9d5b63334ba8ff480db57b5706bbfed67 -Size (node-v20.12.1.tar.xz) = 41743360 bytes +BLAKE2s (node-v20.12.2.tar.xz) = eaa411d640adc12d19ad8ec02f1b51a9fef4961a617948be41054427020e9198 +SHA512 (node-v20.12.2.tar.xz) = 2ff2873f3e1a15d529d07a74af601194c9dc7c24e566b989c96fadda8636d7ea1c97787642e9483a00db320cf1cf0817b43c4ba3ad45b15a241997c9f0c6c288 +Size (node-v20.12.2.tar.xz) = 41634476 bytes SHA1 (patch-common.gypi) = f50615affd26c2c7902d2112c8e9f2704c057b9c SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec --_----------=_171284700267620--