Friday, September 23, 2022

[security] lang/node 16.17.1

Index: Makefile
===================================================================
RCS file: /cvs/ports/lang/node/Makefile,v
retrieving revision 1.107
diff -u -p -r1.107 Makefile
--- Makefile 1 Sep 2022 20:42:56 -0000 1.107
+++ Makefile 23 Sep 2022 16:48:19 -0000
@@ -5,7 +5,7 @@ USE_WXNEEDED = Yes

COMMENT = JavaScript runtime built on Chrome's V8 JavaScript engine

-NODE_VERSION = v16.17.0
+NODE_VERSION = v16.17.1
PLEDGE_VER = 1.1.2
DISTFILES = node-pledge-{}${PLEDGE_VER}.tar.gz:0 \
${DISTNAME}-headers.tar.xz \
Index: distinfo
===================================================================
RCS file: /cvs/ports/lang/node/distinfo,v
retrieving revision 1.63
diff -u -p -r1.63 distinfo
--- distinfo 1 Sep 2022 20:42:56 -0000 1.63
+++ distinfo 23 Sep 2022 16:48:19 -0000
@@ -1,6 +1,6 @@
SHA256 (node-pledge-1.1.2.tar.gz) = zY/JcbZ32mmtqWXXNn3/9aTh7Y3F6fAAaADDA8SYwEk=
-SHA256 (node-v16.17.0-headers.tar.xz) = 0xXvroZshZyLkmnoSb/zGRQkf/8Bp4KFAwNpsM+M6RA=
-SHA256 (node-v16.17.0.tar.xz) = HSjChWheRGmFkhvJY1ZcqcDF9P2pdV5InAaAjql5VkU=
+SHA256 (node-v16.17.1-headers.tar.xz) = VUyNG0sW4PTAc7nffEnIk3FqOlM/JaxkbyNhn1zO598=
+SHA256 (node-v16.17.1.tar.xz) = ZyH+tBUtVtLGs1jOOXq9Wn8drwnuLiXFAhubTT+GozA=
SIZE (node-pledge-1.1.2.tar.gz) = 3155
-SIZE (node-v16.17.0-headers.tar.xz) = 385884
-SIZE (node-v16.17.0.tar.xz) = 35664964
+SIZE (node-v16.17.1-headers.tar.xz) = 386032
+SIZE (node-v16.17.1.tar.xz) = 35661452
Index: patches/patch-node_gyp
===================================================================
RCS file: /cvs/ports/lang/node/patches/patch-node_gyp,v
retrieving revision 1.14
diff -u -p -r1.14 patch-node_gyp
--- patches/patch-node_gyp 1 Sep 2022 20:42:56 -0000 1.14
+++ patches/patch-node_gyp 23 Sep 2022 16:48:19 -0000
@@ -10,7 +10,7 @@ Index: node.gyp
'deps/histogram/histogram.gyp:histogram',
'deps/uvwasi/uvwasi.gyp:uvwasi',
],
-@@ -1130,8 +1130,8 @@
+@@ -1132,8 +1132,8 @@

'dependencies': [
'<(node_lib_target_name)',
@@ -21,7 +21,7 @@ Index: node.gyp
'deps/histogram/histogram.gyp:histogram',
'deps/uvwasi/uvwasi.gyp:uvwasi',
'node_dtrace_header',
-@@ -1205,6 +1205,10 @@
+@@ -1207,6 +1207,10 @@
}],
['OS=="solaris"', {
'ldflags': [ '-I<(SHARED_INTERMEDIATE_DIR)' ]
node just released a security update to 16.17.1

https://github.com/nodejs/node/releases/tag/v16.17.1

The diff to v16.17.0 is limited exclusively to patches addressing just
those issues, so it's highly unlikely that updating would cause any
fallout prior to 7.2.

Tested on amd64 by checking my usual set of language servers and
building firefox 105.0.1.

No comments:

Post a Comment