Fri Aug 11 05:55:02 2023 UTC ()
nodejs: updated to 16.20.2

Version 16.20.2 'Gallium' (LTS)

Notable Changes

The following CVEs are fixed in this release:

* CVE-2023-32002: Policies can be bypassed via Module.\_load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases


(adam)
diff -r1.17 -r1.18 pkgsrc/lang/nodejs16/Makefile
diff -r1.12 -r1.13 pkgsrc/lang/nodejs16/distinfo
Fri Aug 11 14:55:02 2023
Tue Jul 11 15:13:10 2023
pkgsrc/lang/nodejs16/Makefile,v
anoncvs not yet been updated
Fri Aug 11 14:55:02 2023
Mon Jun 26 19:38:58 2023
pkgsrc/lang/nodejs16/distinfo,v
anoncvs not yet been updated
cvs diff -r1.17 -r1.18 pkgsrc/lang/nodejs16/Makefile (expand / switch to unified diff)

--- pkgsrc/lang/nodejs16/Makefile 2023/07/11 06:13:10 1.17
+++ pkgsrc/lang/nodejs16/Makefile 1.18
@@ -1,50 +0,0 @@ @@ -1,50 +0,0 @@
1# $NetBSD: Makefile,v 1.17 2023/07/11 06:13:10 adam Exp $ 
2 
3DISTNAME= node-v16.20.1 
4EXTRACT_SUFX= .tar.xz 
5 
6USE_LANGUAGES= c gnu++14 
7 
8TOOL_DEPENDS+= ${PYPKGPREFIX}-expat>=0:../../textproc/py-expat 
9 
10PKGREVISION= 1 
11.include "../../mk/bsd.prefs.mk" 
12 
13# XXX: figure out a way to add rpaths to torque 
14MAKE_ENV+= LD_LIBRARY_PATH=${PREFIX}/lib 
15 
16CONFIGURE_ARGS+= --shared-nghttp3 
17CONFIGURE_ARGS+= --shared-ngtcp2 
18CONFIGURE_ARGS+= --without-dtrace 
19 
20PYTHON_VERSIONS_INCOMPATIBLE= 27 
21 
22CHECK_INTERPRETER_SKIP+= lib/node_modules/corepack/shims/*.ps1 
23CHECK_PORTABILITY_SKIP+= deps/v8/tools/cppgc/export_to_github.sh 
24CHECK_PORTABILITY_SKIP+= deps/v8/tools/cppgc/test_cmake.sh 
25CHECK_PORTABILITY_SKIP+= tools/macos-installer/pkgbuild/npm/scripts/preinstall 
26 
27.if ${MACHINE_ARCH} == "i386" 
28# required for SSE2 code under i386. 
29CXXFLAGS+= -mstackrealign 
30.endif 
31 
32.PHONY: minusx 
33post-install: minusx 
34minusx: 
35 ${CHMOD} -x ${DESTDIR}${PREFIX}/lib/node_modules/corepack/shims/*.cmd 
36 
37.include "../../lang/nodejs/options.mk" 
38 
39# Node turns on -latomic for arm, mips and ppc. 
40.if ${MACHINE_ARCH:M*arm*} || \ 
41 ${MACHINE_ARCH:M*powerpc*} || \ 
42 ${MACHINE_ARCH:M*mips*} 
43.include "../../devel/libatomic/buildlink3.mk" 
44.endif 
45 
46.include "../../lang/nodejs/Makefile.common" 
47.include "../../net/ngtcp2/buildlink3.mk" 
48.include "../../www/nghttp3/buildlink3.mk" 
49.include "../../mk/atomic64.mk" 
50.include "../../mk/bsd.pkg.mk" 
cvs diff -r1.12 -r1.13 pkgsrc/lang/nodejs16/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/nodejs16/distinfo 2023/06/21 15:15:43 1.12
+++ pkgsrc/lang/nodejs16/distinfo 1.13
@@ -1,27 +0,0 @@ @@ -1,27 +0,0 @@
1$NetBSD: distinfo,v 1.12 2023/06/21 15:15:43 adam Exp $ 
2 
3BLAKE2s (node-v16.20.1.tar.xz) = c6175cfed8190615163dff457e7c6e6680e5d0c759bbe65b1ade0b34642ed41c 
4SHA512 (node-v16.20.1.tar.xz) = 3179c4b598f211f21c6d7ba378cd03a7ca4a06d99ae8e5bd5b8c0f1a895dc83222858a349cfb7589deecb7c654e9f25ce89c30aef9981ee18d4e24d6bbd5822e 
5Size (node-v16.20.1.tar.xz) = 35556440 bytes 
6SHA1 (patch-common.gypi) = 15393846d9dce28f963ef66faa504d5bb3e92018 
7SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32 
8SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3 
9SHA1 (patch-deps_uvwasi_include_wasi__serdes.h) = 32b85ef5824b96b35aba9280bbe7aa7899d9e5cf 
10SHA1 (patch-deps_v8_src_base_platform_platform-freebsd.cc) = b47025f33d2991275bbcd15dbabb28900afab0e1 
11SHA1 (patch-deps_v8_src_base_platform_platform-openbsd.cc) = 5e593879dbab095f99e82593272a0de91043f9a8 
12SHA1 (patch-deps_v8_src_base_platform_platform-posix.cc) = fb0ac6f40233ef3ae03143a97ea7628be00245a8 
13SHA1 (patch-deps_v8_src_base_platform_semaphore.cc) = 802a95f1b1d131e0d85c1f99c659cc68b31ba2f6 
14SHA1 (patch-deps_v8_src_base_strings.h) = 4d2b37491f2f74f1a573f8c1942790204e23a8bb 
15SHA1 (patch-deps_v8_src_codegen_arm_cpu-arm.cc) = 84c75d61bc99c2ff9adeac3152f5b11ebb0e582b 
16SHA1 (patch-deps_v8_src_common_globals.h) = 86637724864389f2b24251904de41669a2f00fbc 
17SHA1 (patch-deps_v8_src_compiler_types.h) = 2a212282ab9d71e98ae56827fdb1d9778a6047a5 
18SHA1 (patch-deps_v8_src_heap_code-range.cc) = 60a6049ac33b0b60c998da09b2d272bec669214f 
19SHA1 (patch-deps_v8_tools_run-llprof.sh) = 39aa3faf77492ef8dd35b411b7b0e4605b469af3 
20SHA1 (patch-node.gypi) = 4a104dba6c22702211009bc60a6be6f87554e2fa 
21SHA1 (patch-src_crypto_crypto__rsa.cc) = 497007952507326ceba89c1d2cf76d0e7d00936c 
22SHA1 (patch-src_inspector__agent.cc) = d3de81b0cb439731fb73339c55d33fe4f1b30ae7 
23SHA1 (patch-src_node__postmortem__metadata.cc) = 9938482d724ad6636af5dc3fa719ec26ed8539ff 
24SHA1 (patch-tools_gyp_pylib_gyp_generator_make.py) = 570fe9889767c555468a225cd7f0b398ea6a193c 
25SHA1 (patch-tools_gyp_pylib_gyp_xcode__emulation.py) = 4ee24115f5e97ffbd23aaa6dc62f408d381d4e22 
26SHA1 (patch-tools_install.py) = c01515e3001bebd50f12bcada548f1cc0c25a49f 
27SHA1 (patch-tools_v8_gypfiles_v8.gyp) = a1a40e77ee2f28d9d3dec11d6d73f2deff0d4701