Subject: CVS commit: [pkgsrc-2017Q3] pkgsrc/lang/nodejs6
From: S.P.Zeidler
Date: 2017-11-01 20:35:16
Message id: 20171101193516.A1B20FBDE@cvs.NetBSD.org

Log Message:
Pullup ticket #5590 - requested by sevan
lang/nodejs6: security update

Revisions pulled up:
- lang/nodejs6/Makefile                                         1.16-1.17
- lang/nodejs6/distinfo                                         1.15-1.16
- lang/nodejs6/patches/patch-deps_cares_cares.gyp               1.2-1.3
- lang/nodejs6/patches/patch-deps_uv_uv.gyp                     1.1-1.2

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   fhajny
   Date:           Wed Oct  4 16:20:58 UTC 2017

   Modified Files:
           pkgsrc/lang/nodejs6: Makefile distinfo
           pkgsrc/lang/nodejs6/patches: patch-deps_cares_cares.gyp
   Added Files:
           pkgsrc/lang/nodejs6/patches: patch-deps_uv_uv.gyp

   Log Message:
   Update lang/nodejs6 to 6.11.4.

   - net: support passing undefined to listen() to match behavior
     in v4.x and v8.x

   To generate a diff of this commit:
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/nodejs6/Makefile
   cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/nodejs6/distinfo
   cvs rdiff -u -r1.1 -r1.2 \
       pkgsrc/lang/nodejs6/patches/patch-deps_cares_cares.gyp
   cvs rdiff -u -r0 -r1.1 pkgsrc/lang/nodejs6/patches/patch-deps_uv_uv.gyp

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   fhajny
   Date:           Wed Oct 25 13:45:18 UTC 2017

   Modified Files:
           pkgsrc/lang/nodejs6: Makefile distinfo
           pkgsrc/lang/nodejs6/patches: patch-deps_cares_cares.gyp
               patch-deps_uv_uv.gyp

   Log Message:
   Update lang/nodejs6 to 6.11.5.

   zlib:
   - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an
     error to be raised when a raw deflate stream is initialized with
     windowBits set to 8. On some versions this crashes Node and you cannot
     recover from it, while on some versions it throws an exception.
     Node.js will now gracefully set windowBits to 9 replicating the legacy
     behavior to avoid a DOS vector.

   To generate a diff of this commit:
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/nodejs6/Makefile
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/nodejs6/distinfo
   cvs rdiff -u -r1.2 -r1.3 \
       pkgsrc/lang/nodejs6/patches/patch-deps_cares_cares.gyp
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/lang/nodejs6/patches/patch-deps_uv_uv.gyp

Files:
RevisionActionfile
1.15.4.1modifypkgsrc/lang/nodejs6/Makefile
1.14.4.1modifypkgsrc/lang/nodejs6/distinfo
1.1.10.1modifypkgsrc/lang/nodejs6/patches/patch-deps_cares_cares.gyp
1.2.2.2addpkgsrc/lang/nodejs6/patches/patch-deps_uv_uv.gyp