kumquat-buildroot/package/nodejs/nodejs.hash

# From https://nodejs.org/dist/v16.16.0/SHASUMS256.txt
sha256  145151eff3b2aa5ebe73384009c52271a83740ae687a93c98c628cd7d52736eb  node-v16.16.0.tar.xz

# Hash for license file
sha256  6211cc77f9ceaf365db12faf050775b3a1e6da7a1eff3577ba006c4918103c33  LICENSE
package/nodejs: security bump to version 16.16.0 Fix CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32212, CVE-2022-32223, CVE-2022-32222 and CVE-2022-2097 https://nodejs.org/en/blog/vulnerability/july-2022-security-releases https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V16.md#16.16.0 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-07-24 11:10:04 +02:00			`# From https://nodejs.org/dist/v16.16.0/SHASUMS256.txt`
			`sha256 145151eff3b2aa5ebe73384009c52271a83740ae687a93c98c628cd7d52736eb node-v16.16.0.tar.xz`
nodejs: security bump to version 8.11.1 Fixes the following security issues: - Fix for inspector DNS rebinding vulnerability (CVE-2018-7160): A malicious website could use a DNS rebinding attack to trick a web browser to bypass same-origin-policy checks and allow HTTP connections to localhost or to hosts on the local network, potentially to an open inspector port as a debugger, therefore gaining full code execution access. The inspector now only allows connections that have a browser Host value of localhost or localhost6. - Fix for 'path' module regular expression denial of service (CVE-2018-7158): A regular expression used for parsing POSIX paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions. - Reject spaces in HTTP Content-Length header values (CVE-2018-7159): The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values. While we are at it, also add a hash for the license file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-31 08:11:55 +02:00
			`# Hash for license file`
package/nodejs: fix legal info Commit 07408779cc068041a2da6838fe077d1a679f1736 forgot to update hash of LICENSE file (multiple components under MIT added: https://github.com/nodejs/node/commit/71659fd4baa90006937e78d789ec0aef95672eb1 https://github.com/nodejs/node/commit/f17ce913c94d26c87a471179d99d8bc4134f7bb5) ERROR: LICENSE has wrong sha256 hash: ERROR: expected: b3a67885b5a6ac35e8bbe8190509e41b79b0d9a2e3fbd47186f2ac4727f63be5 ERROR: got : 6211cc77f9ceaf365db12faf050775b3a1e6da7a1eff3577ba006c4918103c33 Fixes: - http://autobuild.buildroot.org/results/bd1e3238f294152d54ee8f5579431606309dbff3 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-05-14 18:04:26 +02:00			`sha256 6211cc77f9ceaf365db12faf050775b3a1e6da7a1eff3577ba006c4918103c33 LICENSE`