From nobody Sun Oct 16 16:20:09 2022 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Mr52151qVz4fYF3; Sun, 16 Oct 2022 16:20:09 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Mr5214Qmtz3hJ1; Sun, 16 Oct 2022 16:20:09 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1665937209; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=OH5tpZOPKUlPcUgAvm26KtGHpKZuookTnQtiAmJx1EY=; b=h8NrHVQF+Dr72v5jf+6DLuWAten0SJUC47zo779moXowXGOpHeeYnigRvqc+uiz/FkZzUB N3yjzOfiSjqwUhgNTycgqnud+9hhIa9UAyF2wwdMJ3O+N2vLyYW8bFyA510Atww5JGQJNY 38mIHJOHmBFs25waj05lqEMOITW6+G32wbqaJoroRKAD+sHK/hYVkHj4j9uK/p/I0N9cjC sZCoTHL1S6Yqa7PzMm+zQpusRkVa+9ws9y4Z/CykX7fv8o40PLVjr9e7jcplVb5CpfwAIH CAeH8bVMnSPk4vEjwLQMSePU5jbcJGJwZ+Y6M+GvtywHVyHPMH6BdTGJChxIwg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Mr5213TKszWjs; Sun, 16 Oct 2022 16:20:09 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 29GGK9bx057340; Sun, 16 Oct 2022 16:20:09 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 29GGK9im057337; Sun, 16 Oct 2022 16:20:09 GMT (envelope-from git) Date: Sun, 16 Oct 2022 16:20:09 GMT Message-Id: <202210161620.29GGK9im057337@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Matthias Fechner Subject: git: 2bedef22cc3e - main - www/node16: Security update to 16.17.1 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mfechner X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 2bedef22cc3e8d539f63a6933b5396035093d61a Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1665937209; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=OH5tpZOPKUlPcUgAvm26KtGHpKZuookTnQtiAmJx1EY=; b=dPbs1yjDyRNOLAVc/7U0bx+ojfyPwGXC2PXvNfXeHwejO9lV0l0kOP7nMCwuNuPZe2KYdn lkVQ3tcsNEpamiexQKvT36Bw/jAxalkp4pK+5Kpxqcm3spOvQBxq+VD0vUIRZUumKKXNFG uohyb7kpi05x665Oqor4xcZ6I1RMRKXWU1GwZLEHsWIzS8FG1r48llN9YTapaXql6Cm/ai vEOjLy92UMJAE/dCxRgUAt+3IyXDZdlEhyNAp6hPZbmBPV7xJsFL5RE2gVZvO6I1SvoEf6 wbTOEyGYNn3cMdACWiH2adW+1E6MXkC4Elr1s+JW0Tx2mauha4s6udxTL/B/Mg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1665937209; a=rsa-sha256; cv=none; b=N2ISZI0PkuAyNRLnOZP16bo0Kf/CLTnin2/eTKl35ian56IJL6HKi1Dmcgyo/jRcBgMhwy nQq+voEUm4wwXbU13n81zJXNDv+dHLo69QXHZaSVn1LzsrhvKBGAawSueHScVDj7488LFs abK1uHdlNCnPYLIqGDhlTosdYNH9hKaz1g1lpfrfQh6CVsY3R64tfMHNC+B4mCYJAkW7Np 3QDv+4BVXynCnmEK6ng1chmZ4kXXOpEmqn+KrCK+us61Hc1M2IfpA/3/FJ2dFA/plTRbpZ 7t8I1lmaBGnK1A2rhXSY5fw5qX7WzOWW7OhJdu2G3oMPHllN+XmzQbqvZ3rBxg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by mfechner: URL: https://cgit.FreeBSD.org/ports/commit/?id=2bedef22cc3e8d539f63a6933b5396035093d61a commit 2bedef22cc3e8d539f63a6933b5396035093d61a Author: Juraj Lutter AuthorDate: 2022-10-16 08:24:42 +0000 Commit: Matthias Fechner CommitDate: 2022-10-16 16:19:49 +0000 www/node16: Security update to 16.17.1 Changelog: https://github.com/nodejs/node/releases/tag/v16.17.1 The following CVEs are fixed in this release: CVE-2022-32212: DNS rebinding in --inspect on macOS CVE-2022-32213: bypass via obs-fold mechanic CVE-2022-35255: Weak randomness in WebCrypto keygen CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields PR: 266595 Approved by: (maintainer timeout) MFH: 2022Q4 Differential Revision: https://reviews.freebsd.org/D36692 --- www/node16/Makefile | 4 ++-- www/node16/distinfo | 6 +++--- www/node16/pkg-plist | 5 ++--- 3 files changed, 7 insertions(+), 8 deletions(-) diff --git a/www/node16/Makefile b/www/node16/Makefile index d3c0b08e2ae4..6a79e5853c1f 100644 --- a/www/node16/Makefile +++ b/www/node16/Makefile @@ -1,11 +1,11 @@ PORTNAME= node DISTVERSIONPREFIX= v -DISTVERSION= 16.16.0 +DISTVERSION= 16.17.1 CATEGORIES= www MASTER_SITES= https://nodejs.org/dist/v${DISTVERSION}/ PKGNAMESUFFIX= 16 -MAINTAINER= bhughes@FreeBSD.org +MAINTAINER= otis@FreeBSD.org COMMENT= V8 JavaScript for client and server WWW= https://nodejs.org/ diff --git a/www/node16/distinfo b/www/node16/distinfo index 84f1648a66e9..28b0ccfda259 100644 --- a/www/node16/distinfo +++ b/www/node16/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1657304207 -SHA256 (node-v16.16.0.tar.gz) = e07c30b0498f143c08793e34bda1adeaad32f485a4f79f4d67a82879f4c0bbe3 -SIZE (node-v16.16.0.tar.gz) = 66189510 +TIMESTAMP = 1664054003 +SHA256 (node-v16.17.1.tar.gz) = e423985f6019b2026f9a191adb56a96ae83ecd56cdf839cf94aa980168b7a90f +SIZE (node-v16.17.1.tar.gz) = 67255715 diff --git a/www/node16/pkg-plist b/www/node16/pkg-plist index 641946bc14cb..5cc5b68637a4 100644 --- a/www/node16/pkg-plist +++ b/www/node16/pkg-plist @@ -514,6 +514,7 @@ include/node/v8-version.h include/node/v8.h include/node/v8config.h %%DTRACE%%lib/dtrace/node.d +%%COREPACK%%lib/node_modules/corepack/CHANGELOG.md %%COREPACK%%lib/node_modules/corepack/LICENSE.md %%COREPACK%%lib/node_modules/corepack/README.md %%COREPACK%%lib/node_modules/corepack/dist/corepack.js @@ -522,6 +523,7 @@ include/node/v8config.h %%COREPACK%%lib/node_modules/corepack/dist/pnpm.js %%COREPACK%%lib/node_modules/corepack/dist/pnpx.js %%COREPACK%%lib/node_modules/corepack/dist/vcc.js +%%COREPACK%%lib/node_modules/corepack/dist/vendors-_yarn_berry_cache_proxy-agent-npm-5_0_0-41772f4b01-9_zip_node_modules_proxy-agent_index_js.js %%COREPACK%%lib/node_modules/corepack/dist/yarn.js %%COREPACK%%lib/node_modules/corepack/dist/yarnpkg.js %%COREPACK%%lib/node_modules/corepack/package.json @@ -543,9 +545,6 @@ include/node/v8config.h %%COREPACK%%lib/node_modules/corepack/shims/nodewin/pnpx %%COREPACK%%lib/node_modules/corepack/shims/nodewin/pnpx.cmd %%COREPACK%%lib/node_modules/corepack/shims/nodewin/pnpx.ps1 -%%COREPACK%%lib/node_modules/corepack/shims/nodewin/vcc -%%COREPACK%%lib/node_modules/corepack/shims/nodewin/vcc.cmd -%%COREPACK%%lib/node_modules/corepack/shims/nodewin/vcc.ps1 %%COREPACK%%lib/node_modules/corepack/shims/nodewin/yarn %%COREPACK%%lib/node_modules/corepack/shims/nodewin/yarn.cmd %%COREPACK%%lib/node_modules/corepack/shims/nodewin/yarn.ps1