diff options
| author | fhajny <fhajny@pkgsrc.org> | 2016-02-10 11:14:36 +0000 |
|---|---|---|
| committer | fhajny <fhajny@pkgsrc.org> | 2016-02-10 11:14:36 +0000 |
| commit | 2d41a6eab4c4fa3879807a99e8d799f4cdc5f3a4 (patch) | |
| tree | 7739fa3def868c80a5b2ceb80034e26cdf391e8c /lang/nodejs4/distinfo | |
| parent | 4b3de2e33a902830b23a19d00e92a77cac4c4e68 (diff) | |
| download | pkgsrc-2d41a6eab4c4fa3879807a99e8d799f4cdc5f3a4.tar.gz | |
Update lang/nodejs4 to 4.3.0.
Note that this release includes a non-backward compatible change
to address a security issue. This change increases the version
of the LTS v4.x line to v4.3.0. There will be no further updates
to v4.2.x.
- http: fix defects in HTTP header parsing for requests and
responses that can allow request smuggling (CVE-2016-2086)
or response splitting (CVE-2016-2216). HTTP header parsing
now aligns more closely with the HTTP spec including
restricting the acceptable characters.
- http-parser: upgrade from 2.5.0 to 2.5.1
- openssl: upgrade from 1.0.2e to 1.0.2f. To mitigate against
the Logjam attack, TLS clients now reject Diffie-Hellman
handshakes with parameters shorter than 1024-bits, up from
the previous limit of 768-bits.
- introduce new --security-revert={cvenum} command line flag
for selective reversion of specific CVE fixes
- allow the fix for CVE-2016-2216 to be selectively reverted
using --security-revert=CVE-2016-2216
Diffstat (limited to 'lang/nodejs4/distinfo')
| -rw-r--r-- | lang/nodejs4/distinfo | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/lang/nodejs4/distinfo b/lang/nodejs4/distinfo index c40f53f5554..f302333938b 100644 --- a/lang/nodejs4/distinfo +++ b/lang/nodejs4/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.5 2016/01/26 14:39:01 fhajny Exp $ +$NetBSD: distinfo,v 1.6 2016/02/10 11:14:36 fhajny Exp $ -SHA1 (node-v4.2.6.tar.gz) = f6508d8f92720284d05f6b651ee84e5b9bf9ee0d -RMD160 (node-v4.2.6.tar.gz) = 174fa292da5b84df6aeae105c5965f00b9a07c8f -SHA512 (node-v4.2.6.tar.gz) = ef5f4779a47cdaad07a7d617b73ade208858685114a6117999b1f5350294eb02645ca677ab7a2cde31127a7cfb0e04bc2d3254626586f615ab8cd428639efa4d -Size (node-v4.2.6.tar.gz) = 22508945 bytes +SHA1 (node-v4.3.0.tar.gz) = 9103d02f1de28b7f1606959e18613a1228d3ba6e +RMD160 (node-v4.3.0.tar.gz) = 873f1237a68376106b75a69c7ec08a51de2c67ca +SHA512 (node-v4.3.0.tar.gz) = e4e60ed6d4556190028b04be2034c49f33fb5ac82baf4c7f005704788cfbc7b9bf1ea4b75c792a96115c24b93f04d0e9d095ffcbc88d2e2863dfaae225db4836 +Size (node-v4.3.0.tar.gz) = 22521814 bytes SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50 |