summaryrefslogtreecommitdiff
path: root/lang
diff options
context:
space:
mode:
authorfhajny <fhajny@pkgsrc.org>2016-09-28 11:09:47 +0000
committerfhajny <fhajny@pkgsrc.org>2016-09-28 11:09:47 +0000
commitebb48ccf6e8c9c7c80de1a630ad07ced3b48acb0 (patch)
treef954af8c0b2243e8b06a46ef3b32891fbc6eb343 /lang
parentc51d182893737c34d78a45d0473a33d2332a9d37 (diff)
downloadpkgsrc-ebb48ccf6e8c9c7c80de1a630ad07ced3b48acb0.tar.gz
Update lang/nodejs4 to 4.6.0.
- openssl: Remove support for loading dynamic third-party engine modules. An attacker may be able to hide malicious code to be inserted into Node.js at runtime by masquerading as one of the dynamic engine modules. - http: CVE-2016-5325 - Properly validate for allowable characters in the reason argument in ServerResponse#writeHead(). - buffer: Zero-fill excess bytes in new Buffer objects created with Buffer.concat() while providing a totalLength parameter that exceeds the total length of the original Buffer objects being concatenated. - tls: CVE-2016-7099 - Fix invalid wildcard certificate validation check whereby a TLS server may be able to serve an invalid wildcard certificate for its hostname due to improper validation of *. in the wildcard string.
Diffstat (limited to 'lang')
-rw-r--r--lang/nodejs4/Makefile4
-rw-r--r--lang/nodejs4/distinfo10
2 files changed, 7 insertions, 7 deletions
diff --git a/lang/nodejs4/Makefile b/lang/nodejs4/Makefile
index 586c8398257..c04faa33581 100644
--- a/lang/nodejs4/Makefile
+++ b/lang/nodejs4/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2016/08/19 13:14:37 fhajny Exp $
+# $NetBSD: Makefile,v 1.20 2016/09/28 11:09:47 fhajny Exp $
-DISTNAME= node-v4.5.0
+DISTNAME= node-v4.6.0
.include "../../lang/nodejs/Makefile.common"
.include "../../mk/bsd.pkg.mk"
diff --git a/lang/nodejs4/distinfo b/lang/nodejs4/distinfo
index 28cbae353ca..b0bc88c4571 100644
--- a/lang/nodejs4/distinfo
+++ b/lang/nodejs4/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2016/08/27 18:11:12 joerg Exp $
+$NetBSD: distinfo,v 1.18 2016/09/28 11:09:47 fhajny Exp $
-SHA1 (node-v4.5.0.tar.gz) = e50ce4b67025be8361bbcf6fbdbef86fdec8ad8f
-RMD160 (node-v4.5.0.tar.gz) = f31d3440578c322ca8c1bf2ba4e0e74d5629e60f
-SHA512 (node-v4.5.0.tar.gz) = c4ad7382a387365febc664b11253b01d8e638501419daca0f26eecad9fa285dc9745d81c406aa015ad48d8f2e41371c216494b1318ce5e3c12a945d6e837e790
-Size (node-v4.5.0.tar.gz) = 22708609 bytes
+SHA1 (node-v4.6.0.tar.gz) = 6a5e2e733bf306414b5958e38ac365aa7dc17ca4
+RMD160 (node-v4.6.0.tar.gz) = 0c9c4515b3ed5f12986a19966786fc0a972d1ed5
+SHA512 (node-v4.6.0.tar.gz) = b6797c19859ee061ebb303df3e23026daf22a03d6c270da8c515331b432f304af3dd41d8188ce5c085c13025f2e83bcd3c7ec7a2d2dd5a20a85072c07a30e097
+Size (node-v4.6.0.tar.gz) = 22746881 bytes
SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6
SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f
SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50