Subject: CVS commit: pkgsrc/lang/nodejs12
From: Adam Ciarcinski
Date: 2021-10-20 12:27:17
Message id: 20211020102717.BB7E4FA97@cvs.NetBSD.org

Log Message:
nodejs12: updated to 12.22.7

Version 12.22.7 'Erbium' (LTS)

This is a security release.

Notable changes

CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
The http parser accepts requests with a space (SP) right after the header name \ 
before the colon. This can lead to HTTP Request Smuggling (HRS). More details \ 
will be available at CVE-2021-22959 after publication.
CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)
The parse ignores chunk extensions when parsing the body of chunked requests. \ 
This leads to HTTP Request Smuggling (HRS) under certain conditions. More \ 
details will be available at CVE-2021-22960 after publication.

Files:
RevisionActionfile
1.38modifypkgsrc/lang/nodejs12/Makefile
1.27modifypkgsrc/lang/nodejs12/distinfo