diff options
author | fhajny <fhajny@pkgsrc.org> | 2016-09-28 11:09:47 +0000 |
---|---|---|
committer | fhajny <fhajny@pkgsrc.org> | 2016-09-28 11:09:47 +0000 |
commit | ebb48ccf6e8c9c7c80de1a630ad07ced3b48acb0 (patch) | |
tree | f954af8c0b2243e8b06a46ef3b32891fbc6eb343 | |
parent | c51d182893737c34d78a45d0473a33d2332a9d37 (diff) | |
download | pkgsrc-ebb48ccf6e8c9c7c80de1a630ad07ced3b48acb0.tar.gz |
Update lang/nodejs4 to 4.6.0.
- openssl: Remove support for loading dynamic third-party engine
modules. An attacker may be able to hide malicious code to be
inserted into Node.js at runtime by masquerading as one of the
dynamic engine modules.
- http: CVE-2016-5325 - Properly validate for allowable characters
in the reason argument in ServerResponse#writeHead().
- buffer: Zero-fill excess bytes in new Buffer objects created
with Buffer.concat() while providing a totalLength parameter
that exceeds the total length of the original Buffer objects
being concatenated.
- tls: CVE-2016-7099 - Fix invalid wildcard certificate validation
check whereby a TLS server may be able to serve an invalid
wildcard certificate for its hostname due to improper validation
of *. in the wildcard string.
-rw-r--r-- | lang/nodejs4/Makefile | 4 | ||||
-rw-r--r-- | lang/nodejs4/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/lang/nodejs4/Makefile b/lang/nodejs4/Makefile index 586c8398257..c04faa33581 100644 --- a/lang/nodejs4/Makefile +++ b/lang/nodejs4/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.19 2016/08/19 13:14:37 fhajny Exp $ +# $NetBSD: Makefile,v 1.20 2016/09/28 11:09:47 fhajny Exp $ -DISTNAME= node-v4.5.0 +DISTNAME= node-v4.6.0 .include "../../lang/nodejs/Makefile.common" .include "../../mk/bsd.pkg.mk" diff --git a/lang/nodejs4/distinfo b/lang/nodejs4/distinfo index 28cbae353ca..b0bc88c4571 100644 --- a/lang/nodejs4/distinfo +++ b/lang/nodejs4/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.17 2016/08/27 18:11:12 joerg Exp $ +$NetBSD: distinfo,v 1.18 2016/09/28 11:09:47 fhajny Exp $ -SHA1 (node-v4.5.0.tar.gz) = e50ce4b67025be8361bbcf6fbdbef86fdec8ad8f -RMD160 (node-v4.5.0.tar.gz) = f31d3440578c322ca8c1bf2ba4e0e74d5629e60f -SHA512 (node-v4.5.0.tar.gz) = c4ad7382a387365febc664b11253b01d8e638501419daca0f26eecad9fa285dc9745d81c406aa015ad48d8f2e41371c216494b1318ce5e3c12a945d6e837e790 -Size (node-v4.5.0.tar.gz) = 22708609 bytes +SHA1 (node-v4.6.0.tar.gz) = 6a5e2e733bf306414b5958e38ac365aa7dc17ca4 +RMD160 (node-v4.6.0.tar.gz) = 0c9c4515b3ed5f12986a19966786fc0a972d1ed5 +SHA512 (node-v4.6.0.tar.gz) = b6797c19859ee061ebb303df3e23026daf22a03d6c270da8c515331b432f304af3dd41d8188ce5c085c13025f2e83bcd3c7ec7a2d2dd5a20a85072c07a30e097 +Size (node-v4.6.0.tar.gz) = 22746881 bytes SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50 |