./lang/nodejs4, V8 JavaScript for clients and servers

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2017Q3, Version: 4.8.5, Package name: nodejs-4.8.5, Maintainer: filip

Node.js is an evented I/O framework for the V8 JavaScript engine. It is
intended for writing scalable network programs such as web servers.

This package holds the 4.x LTS release.


Required to run:
[lang/python27] [security/openssl]

Required to build:
[sysutils/lockf] [pkgtools/cwrappers]

Package options: openssl

Master sites:

SHA1: 0302446a3b0c4d6638f9d116a7a471f70f2a9ef2
RMD160: 815741050c9babf22edfd9ec77639f2b41e6a929
Filesize: 22241.39 KB

Version history: (Expand)

CVS history: (Expand)


   2017-10-31 19:52:44 by S.P.Zeidler | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #5593 - requested by sevan
lang/nodejs4: security update

Revisions pulled up:
- lang/nodejs4/Makefile                                         1.35
- lang/nodejs4/distinfo                                         1.30

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   fhajny
   Date:           Wed Oct 25 13:56:01 UTC 2017

   Modified Files:
           pkgsrc/lang/nodejs4: Makefile distinfo

   Log message:
   Update lang/nodejs4 to 4.8.5.

   zlib:
   - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an
     error to be raised when a raw deflate stream is initialized with
     windowBits set to 8. On some versions this crashes Node and you cannot
     recover from it, while on some versions it throws an exception.
     Node.js will now gracefully set windowBits to 9 replicating the legacy
     behavior to avoid a DOS vector.

   To generate a diff of this commit:
   cvs rdiff -u -r1.34 -r1.35 pkgsrc/lang/nodejs4/Makefile
   cvs rdiff -u -r1.29 -r1.30 pkgsrc/lang/nodejs4/distinfo