From 3a097226184e341639b59352c718e7990060d3e6 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 17 Aug 2022 07:29:22 +0200 Subject: [PATCH] package/nodejs: security bump to version 14.20.0 Fix CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32212, CVE-2022-32223 and CVE-2022-2097 https://nodejs.org/en/blog/vulnerability/july-2022-security-releases https://github.com/nodejs/node/blob/v14.x/doc/changelogs/CHANGELOG_V14.md#14.20.0 Update the LICENSE hash for the addition of corepack and ICU bump: https://github.com/nodejs/node/commit/737df75e1707b41c30b71d94c779abe665edef41 https://github.com/nodejs/node/commit/2755d391a5e68e08b699e9d7c20e05cfc28bcac3 Signed-off-by: Peter Korsgaard --- package/nodejs/nodejs.hash | 6 +++--- package/nodejs/nodejs.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/nodejs/nodejs.hash b/package/nodejs/nodejs.hash index 6365ef852b..ab79787e45 100644 --- a/package/nodejs/nodejs.hash +++ b/package/nodejs/nodejs.hash @@ -1,5 +1,5 @@ -# From https://nodejs.org/dist/v14.18.3/SHASUMS256.txt -sha256 783ac443cd343dd6c68d2abcf7e59e7b978a6a428f6a6025f9b84918b769d608 node-v14.18.3.tar.xz +# From https://nodejs.org/dist/v14.20.0/SHASUMS256.txt +sha256 2b5098498889d1e6a9709d63f3d6f94e696a5ad8221618c5d51159cee363996a node-v14.20.0.tar.xz # Hash for license file -sha256 b3a67885b5a6ac35e8bbe8190509e41b79b0d9a2e3fbd47186f2ac4727f63be5 LICENSE +sha256 d05c4319d4955d6b3c7beab2711ff61448b31889560d4b125bfbd35f16d3d3af LICENSE diff --git a/package/nodejs/nodejs.mk b/package/nodejs/nodejs.mk index 5d8eb4af63..262d60e86b 100644 --- a/package/nodejs/nodejs.mk +++ b/package/nodejs/nodejs.mk @@ -4,7 +4,7 @@ # ################################################################################ -NODEJS_VERSION = 14.18.3 +NODEJS_VERSION = 14.20.0 NODEJS_SOURCE = node-v$(NODEJS_VERSION).tar.xz NODEJS_SITE = http://nodejs.org/dist/v$(NODEJS_VERSION) NODEJS_DEPENDENCIES = \