kumquat-buildroot/package/nodejs/nodejs.hash

# From https://nodejs.org/dist/v14.18.2/SHASUMS256.txt
sha256  3e8a9ce10f8bcd3628eb6dd049f7f03c84ba9219be6f9743e2221154b9cc680b  node-v14.18.2.tar.xz

# Hash for license file
sha256  b3a67885b5a6ac35e8bbe8190509e41b79b0d9a2e3fbd47186f2ac4727f63be5  LICENSE
package/nodejs: bump to version 14.18.2 This bump will fix the following build failure raised since bump of python3 to version 3.10.1 in commit 25b1fc2898d68ddf2674b14c738045875fc5a2dc: Please use python3.9 or python3.8 or python3.7 or python3.6 or python3.5 or python2.7. /usr/bin/python3.7 ./configure /usr/bin/python3.5 ./configure /home/peko/autobuild/instance-1/output-1/host/bin/python2.7 ./configure Node.js configure: Found Python 3.10.1... https://github.com/nodejs/node/releases/tag/v14.18.2 Fixes: - http://autobuild.buildroot.org/results/9e2ebb9c3681ec0485eaa042fa838c8ee62f649b Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Tested-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-12-31 11:07:25 +01:00			`# From https://nodejs.org/dist/v14.18.2/SHASUMS256.txt`
			`sha256 3e8a9ce10f8bcd3628eb6dd049f7f03c84ba9219be6f9743e2221154b9cc680b node-v14.18.2.tar.xz`
nodejs: security bump to version 8.11.1 Fixes the following security issues: - Fix for inspector DNS rebinding vulnerability (CVE-2018-7160): A malicious website could use a DNS rebinding attack to trick a web browser to bypass same-origin-policy checks and allow HTTP connections to localhost or to hosts on the local network, potentially to an open inspector port as a debugger, therefore gaining full code execution access. The inspector now only allows connections that have a browser Host value of localhost or localhost6. - Fix for 'path' module regular expression denial of service (CVE-2018-7158): A regular expression used for parsing POSIX paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions. - Reject spaces in HTTP Content-Length header values (CVE-2018-7159): The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values. While we are at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-31 08:11:55 +02:00
			`# Hash for license file`
package/nodejs: bump to version 14.18.1 Update license hash due to updating Acorn to v8.4.1 Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2021-10-22 18:40:11 +02:00			`sha256 b3a67885b5a6ac35e8bbe8190509e41b79b0d9a2e3fbd47186f2ac4727f63be5 LICENSE`