mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-06 00:41:46 -09:00
6f5d678c37
See the release notes:
- https://github.com/nodejs/node/releases/tag/v22.23.2
- https://github.com/nodejs/node/releases/tag/v22.23.1
- https://github.com/nodejs/node/releases/tag/v22.22.1
- https://github.com/nodejs/node/releases/tag/v22.22.2
- https://github.com/nodejs/node/releases/tag/v22.22.3
It fixes the following vulnerabilities:
- (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
- (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
- (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
- (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
- (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
- (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
- (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
- (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
- (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
- (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
The LICENSE was changed in 22.22.1, see [1].
[1] 9cafec084e
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
39 lines
1.3 KiB
Makefile
39 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# nodejs
|
|
#
|
|
################################################################################
|
|
|
|
# _VERSION, _SOURCE and _SITE must be kept empty to avoid downloading anything
|
|
NODEJS_COMMON_VERSION = 22.23.2
|
|
NODEJS_COMMON_SOURCE = node-v$(NODEJS_COMMON_VERSION).tar.xz
|
|
NODEJS_COMMON_SITE = https://nodejs.org/dist/v$(NODEJS_COMMON_VERSION)
|
|
|
|
NODEJS_LICENSE = MIT (core code); MIT, Apache and BSD family licenses (Bundled components)
|
|
NODEJS_LICENSE_FILES = LICENSE
|
|
NODEJS_CPE_ID_VENDOR = nodejs
|
|
NODEJS_CPE_ID_PRODUCT = node.js
|
|
|
|
NODEJS_BIN_ENV = $(TARGET_CONFIGURE_OPTS) \
|
|
LDFLAGS="$(NODEJS_LDFLAGS)" \
|
|
LD="$(TARGET_CXX)" \
|
|
npm_config_arch=$(NODEJS_CPU) \
|
|
npm_config_target_arch=$(NODEJS_CPU) \
|
|
npm_config_build_from_source=true \
|
|
npm_config_nodedir=$(STAGING_DIR)/usr \
|
|
npm_config_prefix=$(TARGET_DIR)/usr \
|
|
npm_config_cache=$(BUILD_DIR)/.npm-cache
|
|
|
|
# Define various packaging tools for other packages to use
|
|
NPM = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/npm
|
|
ifeq ($(BR2_PACKAGE_HOST_NODEJS_COREPACK),y)
|
|
COREPACK = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/corepack
|
|
PNPM = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/pnpm
|
|
YARN = $(NODEJS_BIN_ENV) $(HOST_DIR)/bin/yarn
|
|
endif
|
|
|
|
$(eval $(virtual-package))
|
|
$(eval $(host-virtual-package))
|
|
|
|
include $(sort $(wildcard package/nodejs/*/*.mk))
|