head 1.27; access; symbols pkgsrc-2019Q3:1.26.0.10 pkgsrc-2019Q3-base:1.26 pkgsrc-2019Q2:1.26.0.8 pkgsrc-2019Q2-base:1.26 pkgsrc-2019Q1:1.26.0.6 pkgsrc-2019Q1-base:1.26 pkgsrc-2018Q4:1.26.0.4 pkgsrc-2018Q4-base:1.26 pkgsrc-2018Q3:1.26.0.2 pkgsrc-2018Q3-base:1.26 pkgsrc-2018Q2:1.25.0.2 pkgsrc-2018Q2-base:1.25 pkgsrc-2018Q1:1.21.0.2 pkgsrc-2018Q1-base:1.21 pkgsrc-2017Q4:1.19.0.2 pkgsrc-2017Q4-base:1.19 pkgsrc-2017Q3:1.14.0.4 pkgsrc-2017Q3-base:1.14 pkgsrc-2017Q2:1.11.0.2 pkgsrc-2017Q2-base:1.11 pkgsrc-2017Q1:1.7.0.2 pkgsrc-2017Q1-base:1.7 pkgsrc-2016Q4:1.2.0.2 pkgsrc-2016Q4-base:1.2; locks; strict; comment @# @; 1.27 date 2019.12.09.20.05.41; author adam; state dead; branches; next 1.26; commitid Ppzma7qzoJGDo4OB; 1.26 date 2018.08.16.13.40.26; author fhajny; state Exp; branches; next 1.25; commitid b6o9NQYeh2HsHlOA; 1.25 date 2018.06.14.10.52.32; author fhajny; state Exp; branches; next 1.24; commitid 3e8BDqxvQwJrNeGA; 1.24 date 2018.05.03.10.29.16; author fhajny; state Exp; branches; next 1.23; commitid RY8jaggp8lB01QAA; 1.23 date 2018.05.02.16.33.02; author fhajny; state Exp; branches; next 1.22; commitid 9A6JY7YRbxTs3KAA; 1.22 date 2018.04.04.10.35.55; author fhajny; state Exp; branches; next 1.21; commitid XvD7LNJLO036Z6xA; 1.21 date 2018.03.07.11.45.48; author fhajny; state Exp; branches; next 1.20; commitid 3aXzJYsfCisZgwtA; 1.20 date 2018.02.16.11.53.54; author fhajny; state Exp; branches; next 1.19; commitid j8T1B7fXXWJWU4rA; 1.19 date 2017.12.09.17.55.03; author fhajny; state Exp; branches; next 1.18; commitid 4vSk9XIvUo169fiA; 1.18 date 2017.12.07.22.09.46; author fhajny; state Exp; branches; next 1.17; commitid ikaXxndfhjPlC0iA; 1.17 date 2017.11.08.18.31.15; author fhajny; state Exp; branches; next 1.16; commitid z2ad51T01aa8lgeA; 1.16 date 2017.10.25.13.45.18; author fhajny; state Exp; branches; next 1.15; commitid S2MIVGUnu5fYcrcA; 1.15 date 2017.10.04.16.20.58; author fhajny; state Exp; branches; next 1.14; commitid NP6X5Z9BvAsfKK9A; 1.14 date 2017.09.06.11.59.37; author fhajny; state Exp; branches 1.14.4.1; next 1.13; commitid SiiziqHRkDjfc86A; 1.13 date 2017.08.02.16.05.20; author fhajny; state Exp; branches; next 1.12; commitid KLq9f1dgFjcsGE1A; 1.12 date 2017.07.11.19.10.32; author fhajny; state Exp; branches; next 1.11; commitid EuPT7joLyEQQpQYz; 1.11 date 2017.06.07.11.09.44; author fhajny; state Exp; branches; next 1.10; commitid gV2lN0pw1yiIQqUz; 1.10 date 2017.05.03.11.03.43; author fhajny; state Exp; branches; next 1.9; commitid b2NOcJvnUQLiWVPz; 1.9 date 2017.04.06.14.59.22; author fhajny; state Exp; branches; next 1.8; commitid 731l5IBrYWjL6uMz; 1.8 date 2017.03.30.16.20.25; author fhajny; state Exp; branches; next 1.7; commitid A2GVhtRq4ZRNMALz; 1.7 date 2017.03.20.16.51.42; author jperkin; state Exp; branches 1.7.2.1; next 1.6; commitid P1NCEVw9snyshjKz; 1.6 date 2017.02.22.11.34.41; author fhajny; state Exp; branches; next 1.5; commitid fIYawFPOuWYomWGz; 1.5 date 2017.02.13.14.05.50; author fhajny; state Exp; branches; next 1.4; commitid 66t9KcqN9SAhuNFz; 1.4 date 2017.01.06.10.00.14; author fhajny; state Exp; branches; next 1.3; commitid e3CzUCMErMPKlTAz; 1.3 date 2017.01.04.13.01.48; author fhajny; state Exp; branches; next 1.2; commitid mC8HsQzhi8PvpEAz; 1.2 date 2016.12.08.23.02.13; author fhajny; state Exp; branches; next 1.1; commitid otp55laLTvgNBexz; 1.1 date 2016.10.25.19.54.00; author fhajny; state Exp; branches; next ; commitid n3fZ3aKdd2qTYyrz; 1.14.4.1 date 2017.11.01.19.35.16; author spz; state Exp; branches; next ; commitid axnPh13zOUAeVmdA; 1.7.2.1 date 2017.04.16.14.09.39; author bsiegert; state Exp; branches; next ; commitid 7kZT1GpZFbB7wLNz; desc @@ 1.27 log @nodejs: added version 12.13.1, removed version 6.14.3 Moved nodejs to nodejs10 - version 10.17.0 Version 12.13.1 'Erbium' (LTS): Notable changes Experimental support for building Node.js with Python 3 is improved. ICU time zone data is updated to version 2019c. This fixes the date offset in Brazil. @ text @$NetBSD: distinfo,v 1.26 2018/08/16 13:40:26 fhajny Exp $ SHA1 (node-v6.14.4.tar.gz) = bb30f20532d6e8b8899fff6717900abac7e1c20c RMD160 (node-v6.14.4.tar.gz) = 95cd5ae06991b64ee702ec4c2c82eb195e581f53 SHA512 (node-v6.14.4.tar.gz) = 1fc0f9cee3adc0958752bae292d991198c109fb96af076931fc04575a45421d8e9aeb86b9240a208db26dd96a9536ade92ca1617fb4fc6dc3c1ce9deae54b71d Size (node-v6.14.4.tar.gz) = 27219503 bytes SHA1 (patch-common.gypi) = 5b3a50617358637a6f910de28bb5a14f037317a6 SHA1 (patch-deps_cares_cares.gyp) = bae68a88473f9b7e0af1fbf65da033bc8f917225 SHA1 (patch-deps_uv_common.gypi) = ba9caa1f6d9d6df1913d0d72a8d18ea6db0a32ff SHA1 (patch-deps_uv_src_unix_netbsd.c) = 9801ef0c1bdd9c8ea7448052a219d80c6624dd20 SHA1 (patch-deps_uv_uv.gyp) = d5f434389e093a944aa34834e5b4dfcf403098bf SHA1 (patch-deps_v8__inspector_third__party_v8__inspector_platform_v8__inspector_PlatformSTL.h) = bd06047c14bde2984c80fcdade7067c4eac3cbc3 SHA1 (patch-deps_v8_src_arm_cpu-arm.cc) = d0d11ac474ab109a6f40b26fa457b12d742eb48d SHA1 (patch-deps_v8_src_base_atomicops.h) = 65b6508f5260ae672b9efc5672ba2c93223355ff SHA1 (patch-deps_v8_src_base_atomicops__internals__arm__gcc.h) = 1352769e157d5b49d019bdcd394db276421cdbad SHA1 (patch-deps_v8_src_base_platform_platform-freebsd.cc) = 686c2054838a25cfeed7fb9870a959e48dc4de35 SHA1 (patch-deps_v8_src_base_platform_platform-openbsd.cc) = 0abf6a541f24da87dbbd22f57abcd5534999b3df SHA1 (patch-deps_v8_src_base_platform_platform-posix.cc) = eff609b75125dab536934bd8afa640955dcee674 SHA1 (patch-deps_v8_src_base_platform_semaphore.cc) = dd8cafadd2668f069dab8625f57fbd71a304db3e SHA1 (patch-deps_v8_src_log-utils.h) = 32bbf2de2af7a8ab6900a4d5e968dcc1357f6de2 SHA1 (patch-deps_v8_src_types.h) = 250ab540fa28caeea034ed02b84182bc770cdf35 SHA1 (patch-deps_v8_tools_run-llprof.sh) = 39aa3faf77492ef8dd35b411b7b0e4605b469af3 SHA1 (patch-src_cares__wrap.cc) = d9510afd0cd4b0156a604d9197d9f97d6e3b291f SHA1 (patch-src_node.cc) = 7004baf140e252861494b4fb003beeaa8581be78 SHA1 (patch-tools_gyp_pylib_gyp_common.py) = 132008f362ea696e43a4d19bf9d8a0ac754ef55c SHA1 (patch-tools_gyp_pylib_gyp_generator_make.py) = be3cc1aaa85c3d59b6f2758df813cb5ad8d8f74e SHA1 (patch-tools_install.py) = 4a22a41305fb06ec8067506a7193428c758ebb53 @ 1.26 log @lang/nodejs6: Update to 6.14.4. - buffer: Fix out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (CVE-2018-12115) @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.25 2018/06/14 10:52:32 fhajny Exp $ @ 1.25 log @lang/nodejs6: Update to 6.14.3. - buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.24 2018/05/03 10:29:16 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.14.3.tar.gz) = e7cae446f77fb41ba57090a4cc867623d975000a RMD160 (node-v6.14.3.tar.gz) = bf59c629364236f9db83d377d88372619bba8928 SHA512 (node-v6.14.3.tar.gz) = 15a880d98130db0a4d9f2981ced02943c15db4eece57377396d794d56e9f6deeeda330469b3c54686578d60336a4ac14b62c0bbb441c1e83bdc35918a333bef5 Size (node-v6.14.3.tar.gz) = 27208964 bytes @ 1.24 log @lang/nodejs6: Update to 6.14.2. - n-api has been backported to v6.x. It is being landed as an experimental interface, and as such is landing in a Semver-Patch release. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.23 2018/05/02 16:33:02 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.14.2.tar.gz) = 12f7a8370784b534a9e04b4426d7a6aa96664543 RMD160 (node-v6.14.2.tar.gz) = 9140a541209e34f775ce6d1bb533825f97c698a8 SHA512 (node-v6.14.2.tar.gz) = 049dbcd095198bfea67d9a7c4e1ea6ee071a8994b647530f463c919f4d6603f262e15c8f51dc330adbca3de01310ba622988c032eb2ff50335b142edc574f84f Size (node-v6.14.2.tar.gz) = 27209807 bytes @ 1.23 log @lang/nodejs*: Remove the npm package manager from nodejs packages. Introduce nodeversion.mk framework to pick and depend on one of the supported nodejs version packages. Bump respective PKGREVISIONs. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.22 2018/04/04 10:35:55 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.14.1.tar.gz) = 800d4876242ba4c730fdb52708112ad6189a097a RMD160 (node-v6.14.1.tar.gz) = ee584aca256aa6784f6cb4f48826d88c02a894c6 SHA512 (node-v6.14.1.tar.gz) = 271cb1e9ff362dfa7dbdc8d31a72353646689c8b42df86bfe1060f1f82f7ca1a039c2d6380dc8afcd5dbc98c0d2e362dfc6e91e8ab4719324df41b4b3ef243e2 Size (node-v6.14.1.tar.gz) = 27449739 bytes @ 1.22 log @lang/nodejs6: Update to 6.14.1. Fixes for the following CVEs are included in this release: - CVE-2018-7158 - CVE-2018-7159 - CVE-2018-7160 Notable Changes - Fix for inspector DNS rebinding vulnerability (CVE-2018-7160): A malicious website could use a DNS rebinding attack to trick a web browser to bypass same-origin-policy checks and allow HTTP connections to localhost or to hosts on the local network, potentially to an open inspector port as a debugger, therefore gaining full code execution access. The inspector now only allows connections that have a browser Host value of localhost or localhost6. - Fix for 'path' module regular expression denial of service (CVE-2018-7158): A regular expression used for parsing POSIX paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions. - Reject spaces in HTTP Content-Length header values (CVE-2018-7159): The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values. - Update root certificates: 5 additional root certificates have been added to the Node.js binary and 30 have been removed. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.21 2018/03/07 11:45:48 fhajny Exp $ a8 1 SHA1 (patch-deps_npm_node__modules_node-gyp_gyp_pylib_gyp_generator_make.py) = 78d6ddd37ae30e869e0da666a78baad86a638c50 @ 1.21 log @lang/nodejs6: Update to 6.13.1. http, tls: - better support for IPv6 addresses @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.20 2018/02/16 11:53:54 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.13.1.tar.gz) = ccaf59ae19003c5a445ceb05ac16c6df725a309d RMD160 (node-v6.13.1.tar.gz) = ede4d17269bf0264c87215e9d80aaf85d6d96773 SHA512 (node-v6.13.1.tar.gz) = 74129c3600b8873c6fd2ad6252ea9ccc73a2a3f961b3c8ed7e45b44e329aa3ea89e639c1881f57e9b498f7659166386729be8a24331348cdb15395658cb7c203 Size (node-v6.13.1.tar.gz) = 27560377 bytes @ 1.20 log @lang/nodejs6: Update to 6.13.0. - console: - added console.count() and console.clear() - crypto: - expose ECDH class - added cypto.randomFill() and crypto.randomFillSync() - warn on invalid authentication tag length - deps: - upgrade libuv to 1.16.1 - dgram: - added socket.setMulticastInterface() - http: - add agent.keepSocketAlive and agent.reuseSocket as to allow overridable keep-alive behavior of `Agent` - lib: - return this from net.Socket.end() - module: - add builtinModules api that provides list of all builtin modules in Node - net: - return this from getConnections() - promises: - more robust stringification for unhandled rejections - repl: - improve require() autocompletion - src: - add openssl-system-ca-path configure option - add --use-bundled-ca --use-openssl-ca check - add process.ppid - tls: - accept `lookup` option for `tls.connect()` - tools, build: - a new macOS installer! - url: - WHATWG URL api support - util: - add %i and %f formatting specifiers @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.19 2017/12/09 17:55:03 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.13.0.tar.gz) = 55d0353934bdcebdda479465ab5de278221f933e RMD160 (node-v6.13.0.tar.gz) = 76e4dae683eb35b39504afa63187c6c0536a52f7 SHA512 (node-v6.13.0.tar.gz) = 74a89d6f294911a1f1c75d3bcb84b6841d6d292ef8dc74d9aeb770ad1942e868872f19f26abbf2bc878b1aa1553ca32f426bf3779b3d46fdb5cf22a797d51586 Size (node-v6.13.0.tar.gz) = 27558585 bytes @ 1.19 log @Update lang/nodejs6 to 6.12.2. - deps: openssl updated to 1.0.2n @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.18 2017/12/07 22:09:46 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.12.2.tar.gz) = 8fdc517e07529dd71335c1e82d96e45bec3cf560 RMD160 (node-v6.12.2.tar.gz) = 9a97fa52bf186030d227bc93f0d15d640475b7c6 SHA512 (node-v6.12.2.tar.gz) = ee00f209d6ce7e4ca0a4e4d016278decf8cea1e468b1f6f4c4ccfca7c1b004a1927823de3f2044a6fe04832d4fec58098646e71be888ce1f79dab20a4207ea94 Size (node-v6.12.2.tar.gz) = 27400818 bytes @ 1.18 log @Update lang/nodejs6 to 6.12.1. - build: fix npm install with --shared - build: building with python 3 is now supported - src: v8 options can be specified with either '_' or '-' in NODE_OPTIONS @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.17 2017/11/08 18:31:15 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.12.1.tar.gz) = 63038d536b5aac92d274fbcb2c01fc7fca253af5 RMD160 (node-v6.12.1.tar.gz) = b8657fbde71d799b572094864296555e5dcf35e6 SHA512 (node-v6.12.1.tar.gz) = ddaf13913585e38e65a7df2efb8e564863e2cec31d637eb088cad14e8ce51c2986a77f1f610b18e13a0fb28e8af74b22e1bb41f10a7e932ddea96ce8748600a1 Size (node-v6.12.1.tar.gz) = 27397318 bytes @ 1.17 log @Update lang/nodejs6 to 6.12.0. assert: - assert.fail() can now take one or two arguments crypto: - add sign/verify support for RSASSA-PSS deps: - upgrade openssl sources to 1.0.2m - upgrade libuv to 1.15.0 fs: - Add support for fs.write/fs.writeSync(fd, buffer, cb) and fs.write/fs.writeSync(fd, buffer, offset, cb) as documented inspector: - enable --inspect-brk process: - add --redirect-warnings command line argument src: - allow CLI args in env with NODE_OPTIONS - --abort-on-uncaught-exception in NODE_OPTIONS - allow --tls-cipher-list in NODE_OPTIONS - use SafeGetenv() for NODE_REDIRECT_WARNINGS test: - remove common.fail() @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.16 2017/10/25 13:45:18 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.12.0.tar.gz) = 3d689a4ee9526a3bd2033802abca9cf19ac03ec9 RMD160 (node-v6.12.0.tar.gz) = 3c31d09a33a26fc7cd9f1996eb1ac1173f0c0d18 SHA512 (node-v6.12.0.tar.gz) = 3d285a2011a77e2bc4f9b1500a1bb45b04baf0780f1824761a1f73c56ea90d8517bd9c12e618d66d6640f45bfa42c33c73fe65979ce98252e8fd804616fee339 Size (node-v6.12.0.tar.gz) = 27378146 bytes @ 1.16 log @Update lang/nodejs6 to 6.11.5. zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.15 2017/10/04 16:20:58 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.5.tar.gz) = 138923809d039c011ec2ae3f48afd5f76a907c4d RMD160 (node-v6.11.5.tar.gz) = d7c7a92a49a024d59137dc0185baa00f71ee8c7c SHA512 (node-v6.11.5.tar.gz) = 63b80b68cda08121993db7c35bb4db4823c4c9c0fc596a20713bea55290bb434b940c42b0f3c7da64283842625870449c602bdafd7ad230de1b54b0280183f37 Size (node-v6.11.5.tar.gz) = 26915846 bytes d11 2 a12 2 SHA1 (patch-deps_uv_src_unix_netbsd.c) = 0915dcd6ff65ec9bc098c05c32e3fedee9c8168b SHA1 (patch-deps_uv_uv.gyp) = cce97c295e2c4e33bc40a950e137ed7c0482b62b @ 1.15 log @Update lang/nodejs6 to 6.11.4. - net: support passing undefined to listen() to match behavior in v4.x and v8.x @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.14 2017/09/06 11:59:37 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.4.tar.gz) = 75b22881b4581bc7b09d0f829c06ad1c1f1fd92e RMD160 (node-v6.11.4.tar.gz) = be9312b1d8556a0d081beba126f6274a82698d92 SHA512 (node-v6.11.4.tar.gz) = ab71d06b460dca4b1153796fa1824d87a49ea47f907e3934ab160c5276dc8f61f110839065e2e89daa1454a8abd586488d9e3d162009b76436b8630c720da25c Size (node-v6.11.4.tar.gz) = 26916322 bytes d8 1 a8 1 SHA1 (patch-deps_cares_cares.gyp) = 981c468cfb9071b1acb338ea65638d2c6d9b97cc d12 1 a12 1 SHA1 (patch-deps_uv_uv.gyp) = 3774bc0d8fc4dec0018a6ab5cd95a7b613dd285b @ 1.14 log @Update lang/nodejs6 to 6.11.3 - build: Codesigning is fixed on macOS - deps: Snapshots are turned back on!!! - path: win32 volume-relative paths are working again! - tools: v6.x can now build with ICU 59 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.13 2017/08/02 16:05:20 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.3.tar.gz) = 65a50f76e76428aec63aa57707c5de70665694ff RMD160 (node-v6.11.3.tar.gz) = a7bed7b841d64ad2f9abaf15e3cd0f66c7768311 SHA512 (node-v6.11.3.tar.gz) = 7937d3d72c27b130159c356303db89be288b265f9d8cc640db82fd835adf8aa24fe499367b9f5651c0a3fa7918c0815d952fd57820da22cd9ffbfaae3f798dd9 Size (node-v6.11.3.tar.gz) = 26875258 bytes d8 1 a8 1 SHA1 (patch-deps_cares_cares.gyp) = 2235eb44bc984fa2e745fdf1786f1ae6de6ef80f d12 1 @ 1.14.4.1 log @Pullup ticket #5590 - requested by sevan lang/nodejs6: security update Revisions pulled up: - lang/nodejs6/Makefile 1.16-1.17 - lang/nodejs6/distinfo 1.15-1.16 - lang/nodejs6/patches/patch-deps_cares_cares.gyp 1.2-1.3 - lang/nodejs6/patches/patch-deps_uv_uv.gyp 1.1-1.2 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: fhajny Date: Wed Oct 4 16:20:58 UTC 2017 Modified Files: pkgsrc/lang/nodejs6: Makefile distinfo pkgsrc/lang/nodejs6/patches: patch-deps_cares_cares.gyp Added Files: pkgsrc/lang/nodejs6/patches: patch-deps_uv_uv.gyp Log Message: Update lang/nodejs6 to 6.11.4. - net: support passing undefined to listen() to match behavior in v4.x and v8.x To generate a diff of this commit: cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/nodejs6/Makefile cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/nodejs6/distinfo cvs rdiff -u -r1.1 -r1.2 \ pkgsrc/lang/nodejs6/patches/patch-deps_cares_cares.gyp cvs rdiff -u -r0 -r1.1 pkgsrc/lang/nodejs6/patches/patch-deps_uv_uv.gyp ------------------------------------------------------------------- Module Name: pkgsrc Committed By: fhajny Date: Wed Oct 25 13:45:18 UTC 2017 Modified Files: pkgsrc/lang/nodejs6: Makefile distinfo pkgsrc/lang/nodejs6/patches: patch-deps_cares_cares.gyp patch-deps_uv_uv.gyp Log Message: Update lang/nodejs6 to 6.11.5. zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. To generate a diff of this commit: cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/nodejs6/Makefile cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/nodejs6/distinfo cvs rdiff -u -r1.2 -r1.3 \ pkgsrc/lang/nodejs6/patches/patch-deps_cares_cares.gyp cvs rdiff -u -r1.1 -r1.2 pkgsrc/lang/nodejs6/patches/patch-deps_uv_uv.gyp @ text @d1 1 a1 1 $NetBSD$ d3 4 a6 4 SHA1 (node-v6.11.5.tar.gz) = 138923809d039c011ec2ae3f48afd5f76a907c4d RMD160 (node-v6.11.5.tar.gz) = d7c7a92a49a024d59137dc0185baa00f71ee8c7c SHA512 (node-v6.11.5.tar.gz) = 63b80b68cda08121993db7c35bb4db4823c4c9c0fc596a20713bea55290bb434b940c42b0f3c7da64283842625870449c602bdafd7ad230de1b54b0280183f37 Size (node-v6.11.5.tar.gz) = 26915846 bytes d8 1 a8 1 SHA1 (patch-deps_cares_cares.gyp) = bae68a88473f9b7e0af1fbf65da033bc8f917225 a11 1 SHA1 (patch-deps_uv_uv.gyp) = cce97c295e2c4e33bc40a950e137ed7c0482b62b @ 1.13 log @Update lang/nodejs6 to 6.11.2. ### Notable Changes - configure: - add mips64el to valid_arch - crypto: - Updated root certificates based on NSS 3.30 - deps: - upgrade OpenSSL to version 1.0.2.l - http: - parse errors are now reported when NODE_DEBUG=http - Agent construction can now be envoked without `new` - zlib: - node will now throw an Error when zlib rejects the value of windowBits, instead of crashing @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12 2017/07/11 19:10:32 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.2.tar.gz) = 65ebb10b9c6897eeb61335a3f2681aaa889f1663 RMD160 (node-v6.11.2.tar.gz) = a56f714a4631d575d76bd598829faa6766827216 SHA512 (node-v6.11.2.tar.gz) = 1e0a8f3562b54e5e14dda66eaabaabc7c191ec6f5985124e6d8f6607968a0c0913f661d463b48447296477c6b6de0d1295645dbc4f29a075cc02b96e345d3d92 Size (node-v6.11.2.tar.gz) = 26844771 bytes @ 1.12 log @Update lang/nodejs6 to 6.11.1. - Disable V8 snapshots - The hashseed embedded in the snapshot is currently the same for all runs of the binary. This opens node up to collision attacks which could result in a Denial of Service. We have temporarily disabled snapshots until a more robust solution is found - CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. This patch checks that there is enough data for the required elements of an NAPTR record (2 int16, 3 bytes for string lengths) before processing a record. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.11 2017/06/07 11:09:44 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.1.tar.gz) = 6292aa058ec003e7633e56e714755f2a0e48eb9c RMD160 (node-v6.11.1.tar.gz) = de2731488a712e8caae1e39a809cee8f2544455a SHA512 (node-v6.11.1.tar.gz) = 72a622ed5b884ddfc467ca665c5ba0ed03093dff221664359fe5587f24c2c9a95775002089528fad56bdfafce2489c912638e68a7e10c74a730b07cbde28fab6 Size (node-v6.11.1.tar.gz) = 26799657 bytes @ 1.11 log @Update lang/nodejs6 to 6.11.0 Notable Changes build: - support for building mips64el cluster: - disconnect() now returns a reference to the disconnected worker. crypto: - ability to select cert store at runtime - Use system CAs instead of using bundled ones - The Decipher methods setAuthTag() and setAAD now return this. - adding support for OPENSSL_CONF again - make LazyTransform compabile with Streams1 deps: - upgrade libuv to 1.11.0 dns: - Implemented {ttl: true} for resolve4() and resolve6(). process: - add NODE_NO_WARNINGS environment variable readline: - add option to stop duplicates in history src: - support "--" after "-e" as end-of-options tls: - new tls.TLSSocket() supports sec ctx options - Allow obvious key/passphrase combinations. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.10 2017/05/03 11:03:43 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.11.0.tar.gz) = df31d0e4e2104b3a62342533af5fb879f321416b RMD160 (node-v6.11.0.tar.gz) = efc2d60ac3ce98897f3376707b972bf727bbe10c SHA512 (node-v6.11.0.tar.gz) = a298232f6393735f2d459eb23f78089dd7eb1bae4907dfe61b286ceb8f93d3131c2dd45f09643089d00e2a4bef0f35739c9c8984f88b34c0ab515793f38eda46 Size (node-v6.11.0.tar.gz) = 26797030 bytes @ 1.10 log @Update lang/nodejs6 to 6.10.3 - module: The module loading global fallback to the Node executable's directory now works correctly on Windows. - src: fix base64 decoding in rare edgecase - tls: fix rare segmentation faults when using TLS @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.9 2017/04/06 14:59:22 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.10.3.tar.gz) = bf8f6f3f657e868cd593cba4b0c596b71405ded0 RMD160 (node-v6.10.3.tar.gz) = 2e42dfa2c88d1cd639a2098849d3da0cbd2f9cac SHA512 (node-v6.10.3.tar.gz) = 1aa4b2984893375c9fad675f629a1a1131e1e06778abe92a99ebd472f681e372432c7ff08dfe282848bf2b324cb5cc757dde42523016a16a527360083499c718 Size (node-v6.10.3.tar.gz) = 26762674 bytes @ 1.9 log @Update lang/nodejs6 to 6.10.2. - crypto: fix memory leak if certificate is revoked - upgrade zlib to 1.2.11 - backport V8 fixes for spread syntax regression causing segfaults - repl: Revert commit that broke REPL display on Windows @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.8 2017/03/30 16:20:25 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.10.2.tar.gz) = efc2f16c3a36ead724e2a070479a90a930e21048 RMD160 (node-v6.10.2.tar.gz) = ec42af4c860410eb88f44e40a7fd2edac572e59e SHA512 (node-v6.10.2.tar.gz) = 77f87787e2b99d66527925183a1409d8bea4f73cad27e473880d2b14bdf7306fd29f60ce9198f9f56c2d09b031d6d0c45e9a9455ab4685960200da2d2508891e Size (node-v6.10.2.tar.gz) = 26742545 bytes d27 1 a27 1 SHA1 (patch-tools_install.py) = 5755e67dce5261b84e43acee281c7e8810708bb4 @ 1.8 log @Update lang/nodejs6 to 6.10.1 - performance: The performance of several APIs has been improved. - Buffer.compare() is up to 35% faster on average. - buffer.toJSON() is up to 2859% faster on average. - fs.*statSync() functions are now up to 9.3% faster on average. - os.loadavg is up to 151% faster. - process.memoryUsage() is up to 34% faster. - querystring.unescape() for Buffers is 15% faster on average. - querystring.stringify() is up to 7.8% faster on average. - querystring.parse() is up to 21% faster on average. - IPC: Batched writes have been enabled for process IPC on platforms that support Unix Domain Sockets. - Performance gains may be up to 40% for some workloads. - child_process: spawnSync now returns a null status when child is terminated by a signal. - This fixes the behavior to act like spawn() does. - http: - Control characters are now always rejected when using http.request(). - Debug messages have been added for cases when headers contain invalid values. - node: Heap statistics now support values larger than 4GB. - timers: Timer callbacks now always maintain order when interacting with domain error handling. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2017/03/20 16:51:42 jperkin Exp $ d3 4 a6 4 SHA1 (node-v6.10.1.tar.gz) = 1304ea502e055b138379246bfa4cb86026dc8005 RMD160 (node-v6.10.1.tar.gz) = 3a0e221fa41e2444326be79061161fc9e2fc8896 SHA512 (node-v6.10.1.tar.gz) = 1bf5b64445b9e4f2d26ca1081f42e554dc10b540332bc45fb5ceeed4b3df0ec3ff4127a3685ca3ae89eadc17561d0f6f0f8024498d13a4461836620802eb647f Size (node-v6.10.1.tar.gz) = 26721650 bytes @ 1.7 log @Fix build on Darwin with GCC 4.8 or newer. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2017/02/22 11:34:41 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.10.0.tar.gz) = 3bb2629ed623f38b8c3011cf422333862d3653a3 RMD160 (node-v6.10.0.tar.gz) = 9b07145953765e2c7a51a81709b139a758d55c67 SHA512 (node-v6.10.0.tar.gz) = 79d3d0854dea1a733175eaa9c5ba0d697d0c57cbcaf2920457eca2d77cc5edadcff8b9eef047156183d05b933582af1b7ef0e64071a9be1c79903af3e7437a92 Size (node-v6.10.0.tar.gz) = 26706815 bytes @ 1.7.2.1 log @Pullup ticket #5248 - requested by sevan lang/nodejs6: bugfix Revisions pulled up: - lang/nodejs6/Makefile 1.9 - lang/nodejs6/distinfo 1.9 --- Module Name: pkgsrc Committed By: fhajny Date: Thu Apr 6 14:59:22 UTC 2017 Modified Files: pkgsrc/lang/nodejs6: Makefile distinfo Log Message: Update lang/nodejs6 to 6.10.2. - crypto: fix memory leak if certificate is revoked - upgrade zlib to 1.2.11 - backport V8 fixes for spread syntax regression causing segfaults - repl: Revert commit that broke REPL display on Windows @ text @d1 1 a1 1 $NetBSD$ d3 4 a6 4 SHA1 (node-v6.10.2.tar.gz) = efc2f16c3a36ead724e2a070479a90a930e21048 RMD160 (node-v6.10.2.tar.gz) = ec42af4c860410eb88f44e40a7fd2edac572e59e SHA512 (node-v6.10.2.tar.gz) = 77f87787e2b99d66527925183a1409d8bea4f73cad27e473880d2b14bdf7306fd29f60ce9198f9f56c2d09b031d6d0c45e9a9455ab4685960200da2d2508891e Size (node-v6.10.2.tar.gz) = 26742545 bytes @ 1.6 log @Update lang/nodejs6 to 6.10.0. Notable Changes - crypto: allow adding extra certs to well-known CAs - deps: Upgrade INTL ICU to version 58 - process: add process.memoryUsage.external - src: add wrapper for process.emitWarning() - fs: cache non-symlinks in realpathSync. - repl: allow autocompletion for scoped packages @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2017/02/13 14:05:50 fhajny Exp $ d12 1 @ 1.5 log @Update lang/nodejs6 to 6.9.5. Notable Changes - deps: upgrade openssl sources to 1.0.2k @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2017/01/06 10:00:14 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.9.5.tar.gz) = 9ff1d8093408a26c6a2e6e84c527476093b9fb7c RMD160 (node-v6.9.5.tar.gz) = fca28cebf2a1b03921dc8ec2920da21030d850df SHA512 (node-v6.9.5.tar.gz) = 59e544909742d2b3e88b11bbdad6bf713b55e82f32f993b17b7eff83cd1cbac3c10fb2445304245d44ce1c2c219f439acd51f872ecb285535d8ae471bf4c8410 Size (node-v6.9.5.tar.gz) = 26381690 bytes @ 1.4 log @Update lang/nodejs6 to 6.9.4. This is a special release that contains 0 commits. While promoting additional platforms for v6.9.3 after the release, the tarballs on the release server were overwritten and now have different shasums. In order to remove any ambiguity around the release we have opted to do a semver patch release with no changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2017/01/04 13:01:48 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.9.4.tar.gz) = b40cc5f244a1ec8f8306241b267e3b4de8c15a9e RMD160 (node-v6.9.4.tar.gz) = 538d4813c76d27d55732dad0d381822bc10e577d SHA512 (node-v6.9.4.tar.gz) = 436570a0a03b2b3325bed39ede8d34f3bc8fc4ef38a9a85bc7611126568a49811a496cf2d2a3cfe3f5faf1c777580463bb13cfb8c976891242ce65512f842d2b Size (node-v6.9.4.tar.gz) = 26379683 bytes @ 1.3 log @Update lang/nodejs6 to 6.9.3. Notable Changes - build: shared library support is now working for AIX builds - deps: - npm: upgrade npm to 3.10.10 - V8: Destructuring of arrow function arguments via computed property no longer throws - inspector: /json/version returns object, not an object wrapped in an array - module: using --debug-brk and --eval together now works as expected - process: improve performance of nextTick up to 20% - repl: - the division operator will no longer be accidentally parsed as regex - improved support for generator functions - timers: Re canceling a cancelled timers will no longer throw @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2016/12/08 23:02:13 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.9.3.tar.gz) = 88381c6bb86f0ad1621deec2498c23d254f469cb RMD160 (node-v6.9.3.tar.gz) = bb3aac09303cb1496d6ed2c9bc6fc0b0d00826b4 SHA512 (node-v6.9.3.tar.gz) = 13b05cda78047ded95c2e9e8757b0ee098d8a7c7e0aeae195ae1761377153859c9cedf34389c24b5af326823b9a78070c54f87f760f2bb37bad90b2c8bfd6560 Size (node-v6.9.3.tar.gz) = 26382367 bytes @ 1.2 log @Update lang/nodejs6 to 6.9.2 - buffer: coerce slice parameters consistently - deps: - npm: upgrade npm to 3.10.9 - V8: Various fixes to destructuring edge cases - cherry-pick 3c39bac from V8 upstream - cherry pick 7166503 from upstream v8 - gtest: the test reporter now outputs tap comments as yamlish - inspector: inspector now prompts user to use 127.0.0.1 rather than localhost - tls: fix memory leak when writing data to TLSWrap instance during handshake @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2016/10/25 19:54:00 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.9.2.tar.gz) = 6b33b9fac28785b8317dfa5f2402aff2df3e2d5a RMD160 (node-v6.9.2.tar.gz) = 0e63f9c0607cf354387c87a40b1709d244a1c6eb SHA512 (node-v6.9.2.tar.gz) = 236f5e45745e0f4088c24f8a3fb67a2312def143d3b6f0e812a274f179e2ee977e15cc1485aa953592786105d2a319064bc19dd14e3867683d1549e8d39f6cd8 Size (node-v6.9.2.tar.gz) = 26522709 bytes @ 1.1 log @Import nodejs 6.9.1 (LTS) as lang/nodejs6. Node.js is an evented I/O framework for the V8 JavaScript engine. It is intended for writing scalable network programs such as web servers. This package holds the 6.x LTS release. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.76 2016/10/13 14:09:11 fhajny Exp $ d3 4 a6 4 SHA1 (node-v6.9.1.tar.gz) = 0698f4eed3a3149f6a92a9f83cfc7c43ca7cf343 RMD160 (node-v6.9.1.tar.gz) = e722d24bb066d198d1905ecfd49e9ea8e48cacaa SHA512 (node-v6.9.1.tar.gz) = 71a6e081006c8b77f34b5cc26b76c56944b4de77d7ed5e6068c72dbaf49fc18ed2894231f6a5cd0308c40e95c2e1eb5ee2abd1470fd646bb8db3b230913c5014 Size (node-v6.9.1.tar.gz) = 26504341 bytes @