diff options
| author | Martin Bark <martin@barkynet.com> | 2018-06-16 23:44:08 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@bootlin.com> | 2018-06-17 14:04:29 +0200 |
| commit | 64baf3def763fe962f19d7ca083cf019a73f6281 (patch) | |
| tree | ca369f47b7b4b0cf1191b6d2ba5b3f3cda59091b /package/nodejs | |
| parent | 88813806cb45b5bf50b99f90b9718ccafdfdb63f (diff) | |
| download | buildroot-64baf3def763fe962f19d7ca083cf019a73f6281.tar.gz buildroot-64baf3def763fe962f19d7ca083cf019a73f6281.zip | |
package/nodejs: security bump to version 8.11.3
Fixes the following security issues:
- (CVE-2018-7167): Fixes Denial of Service vulnerability where calling
Buffer.fill() could hang
- (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the
http2 implementation to not crash under certain circumstances during
cleanup
- (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading
nghttp2 to 1.32.0
See https://nodejs.org/en/blog/release/v8.11.3/ for more details
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Diffstat (limited to 'package/nodejs')
| -rw-r--r-- | package/nodejs/nodejs.hash | 4 | ||||
| -rw-r--r-- | package/nodejs/nodejs.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/package/nodejs/nodejs.hash b/package/nodejs/nodejs.hash index 25b035d694..be4c3de4f7 100644 --- a/package/nodejs/nodejs.hash +++ b/package/nodejs/nodejs.hash @@ -1,5 +1,5 @@ -# From http://nodejs.org/dist/v8.11.2/SHASUMS256.txt -sha256 539946c0381809576bed07424a35fc1740d52f4bd56305d6278d9e76c88f4979 node-v8.11.2.tar.xz +# From http://nodejs.org/dist/v8.11.3/SHASUMS256.txt +sha256 577c751fdca91c46c60ffd8352e5b465881373bfdde212c17c3a3c1bd2616ee0 node-v8.11.3.tar.xz # Hash for license file sha256 b87be6c1479ed977481115869c2dd8b6d59e5ea55aa09939d6c898242121b2f5 LICENSE diff --git a/package/nodejs/nodejs.mk b/package/nodejs/nodejs.mk index 0c7db83012..61cd03bb8f 100644 --- a/package/nodejs/nodejs.mk +++ b/package/nodejs/nodejs.mk @@ -4,7 +4,7 @@ # ################################################################################ -NODEJS_VERSION = 8.11.2 +NODEJS_VERSION = 8.11.3 NODEJS_SOURCE = node-v$(NODEJS_VERSION).tar.xz NODEJS_SITE = http://nodejs.org/dist/v$(NODEJS_VERSION) NODEJS_DEPENDENCIES = host-python host-nodejs c-ares \ |
