mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 16:24:17 -09:00
a00374d53c
See the release notes: - https://github.com/nodejs/node/releases/tag/v22.23.2 - https://github.com/nodejs/node/releases/tag/v22.23.1 - https://github.com/nodejs/node/releases/tag/v22.22.1 - https://github.com/nodejs/node/releases/tag/v22.22.2 - https://github.com/nodejs/node/releases/tag/v22.22.3 It fixes the following vulnerabilities: - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low - (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low The LICENSE was changed in 22.22.1, see [1]. [1]9cafec084eSigned-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr> (cherry picked from commit6f5d678c37) Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
39 lines
1.3 KiB
Makefile
39 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# nodejs
|
|
#
|
|
################################################################################
|
|
|
|
# _VERSION, _SOURCE and _SITE must be kept empty to avoid downloading anything
|
|
NODEJS_COMMON_VERSION = 22.23.2
|
|
NODEJS_COMMON_SOURCE = node-v$(NODEJS_COMMON_VERSION).tar.xz
|
|
NODEJS_COMMON_SITE = https://nodejs.org/dist/v$(NODEJS_COMMON_VERSION)
|
|
|
|
NODEJS_LICENSE = MIT (core code); MIT, Apache and BSD family licenses (Bundled components)
|
|
NODEJS_LICENSE_FILES = LICENSE
|
|
NODEJS_CPE_ID_VENDOR = nodejs
|
|
NODEJS_CPE_ID_PRODUCT = node.js
|
|
|
|
NODEJS_BIN_ENV = $(TARGET_CONFIGURE_OPTS) \
|
|
LDFLAGS="$(NODEJS_LDFLAGS)" \
|
|
LD="$(TARGET_CXX)" \
|
|
npm_config_arch=$(NODEJS_CPU) \
|
|
npm_config_target_arch=$(NODEJS_CPU) \
|
|
npm_config_build_from_source=true \
|
|
npm_config_nodedir=$(STAGING_DIR)/usr \
|
|
npm_config_prefix=$(TARGET_DIR)/usr \
|
|
npm_config_cache=$(BUILD_DIR)/.npm-cache
|
|
|
|
# Define various packaging tools for other packages to use
|
|
NPM = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/npm
|
|
ifeq ($(BR2_PACKAGE_HOST_NODEJS_COREPACK),y)
|
|
COREPACK = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/corepack
|
|
PNPM = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/pnpm
|
|
YARN = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/yarn
|
|
endif
|
|
|
|
$(eval $(virtual-package))
|
|
$(eval $(host-virtual-package))
|
|
|
|
include $(sort $(wildcard package/nodejs/*/*.mk))
|