./lang/nodejs14, V8 JavaScript for clients and servers

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2022Q3, Version: 14.20.1, Package name: nodejs-14.20.1, Maintainer: pkgsrc-users

Node.js is an evented I/O framework for the V8 JavaScript engine. It is
intended for writing scalable network programs such as web servers.

This package holds the 14.x LTS release.



Package options: openssl

Master sites:

Filesize: 33674.688 KB

Version history: (Expand)

CVS history: (Expand)


   2022-10-03 16:02:17 by Benny Siegert | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #6674 - requested by taca
lang/nodejs14: security fix

Revisions pulled up:
- lang/nodejs14/Makefile                                        1.5
- lang/nodejs14/distinfo                                        1.4

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Sep 27 07:54:19 UTC 2022

   Modified Files:
   	pkgsrc/lang/nodejs14: Makefile distinfo

   Log message:
   nodejs14: updated to 14.20.1

   Version 14.20.1 'Fermium' (LTS)

   This is a security release.

   Notable changes

   The following CVEs are fixed in this release:

   CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
   CVE-2022-32213: bypass via obs-fold mechanic (Medium)
   CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header \ 
Fields (Medium)