diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2018-12-09 23:18:30 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@bootlin.com> | 2018-12-10 11:47:50 +0100 |
| commit | 0de2c9c76cd0a522fc1eb4b8d63bb5070efaecd3 (patch) | |
| tree | aa8ee2c8fb719ef11caa7f46584fe70f0d872bc4 /package/nodejs/nodejs.hash | |
| parent | e273c36ad086189c081a41f2de7966348e085e37 (diff) | |
| download | buildroot-0de2c9c76cd0a522fc1eb4b8d63bb5070efaecd3.tar.gz buildroot-0de2c9c76cd0a522fc1eb4b8d63bb5070efaecd3.zip | |
package/nodejs: security bump to version 8.14.0
Fixes the following security vulnerabilities:
- Node.js: Denial of Service with large HTTP headers (CVE-2018-12121)
- Node.js: Slowloris HTTP Denial of Service (CVE-2018-12122 / Node.js)
- Node.js: Hostname spoofing in URL parser for javascript protocol
(CVE-2018-12123)
- Node.js: HTTP request splitting (CVE-2018-12116)
- OpenSSL: Timing vulnerability in DSA signature generation (CVE-2018-0734)
- OpenSSL: Microarchitecture timing vulnerability in ECC scalar
multiplication (CVE-2018-5407)
For more details, see the announcement:
https://nodejs.org/en/blog/release/v8.14.0/
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Diffstat (limited to 'package/nodejs/nodejs.hash')
| -rw-r--r-- | package/nodejs/nodejs.hash | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/nodejs/nodejs.hash b/package/nodejs/nodejs.hash index 70d67730b1..13a5c2daa5 100644 --- a/package/nodejs/nodejs.hash +++ b/package/nodejs/nodejs.hash @@ -1,5 +1,5 @@ -# From https://nodejs.org/dist/v8.12.0/SHASUMS256.txt -sha256 5a9dff58016c18fb4bf902d963b124ff058a550ebcd9840c677757387bce419a node-v8.12.0.tar.xz +# From https://nodejs.org/dist/v8.14.0/SHASUMS256.txt +sha256 8ce252913c9f6aaa9871f2d9661b6e54858dae2f0064bd3c624676edb09083c4 node-v8.14.0.tar.xz # Hash for license file sha256 b87be6c1479ed977481115869c2dd8b6d59e5ea55aa09939d6c898242121b2f5 LICENSE |
