From 781529b159313c04903791c6f9e437e697f0e3a9 Mon Sep 17 00:00:00 2001 From: "Yann E. MORIN" Date: Sun, 5 Jul 2015 19:43:23 +0200 Subject: [PATCH] package/nodejs: security bump Critical security flaw: https://medium.com/@iojs/important-security-upgrades-for-node-js-and-io-js-8ac14ece5852 Fixes #8201. Reported-by: Chris Becker Signed-off-by: "Yann E. MORIN" Cc: Thomas Petazzoni Signed-off-by: Thomas Petazzoni --- .../0001-Remove-dependency-on-Python-bz2-module.patch | 0 .../0002-gyp-force-link-command-to-use-CXX.patch | 0 ...3-Use-a-python-variable-instead-of-hardcoding-Python.patch | 0 .../0004-fix-build-error-without-OpenSSL-support.patch | 0 package/nodejs/Config.in | 4 ++-- package/nodejs/nodejs.hash | 4 ++-- 6 files changed, 4 insertions(+), 4 deletions(-) rename package/nodejs/{0.12.5 => 0.12.6}/0001-Remove-dependency-on-Python-bz2-module.patch (100%) rename package/nodejs/{0.12.5 => 0.12.6}/0002-gyp-force-link-command-to-use-CXX.patch (100%) rename package/nodejs/{0.12.5 => 0.12.6}/0003-Use-a-python-variable-instead-of-hardcoding-Python.patch (100%) rename package/nodejs/{0.12.5 => 0.12.6}/0004-fix-build-error-without-OpenSSL-support.patch (100%) diff --git a/package/nodejs/0.12.5/0001-Remove-dependency-on-Python-bz2-module.patch b/package/nodejs/0.12.6/0001-Remove-dependency-on-Python-bz2-module.patch similarity index 100% rename from package/nodejs/0.12.5/0001-Remove-dependency-on-Python-bz2-module.patch rename to package/nodejs/0.12.6/0001-Remove-dependency-on-Python-bz2-module.patch diff --git a/package/nodejs/0.12.5/0002-gyp-force-link-command-to-use-CXX.patch b/package/nodejs/0.12.6/0002-gyp-force-link-command-to-use-CXX.patch similarity index 100% rename from package/nodejs/0.12.5/0002-gyp-force-link-command-to-use-CXX.patch rename to package/nodejs/0.12.6/0002-gyp-force-link-command-to-use-CXX.patch diff --git a/package/nodejs/0.12.5/0003-Use-a-python-variable-instead-of-hardcoding-Python.patch b/package/nodejs/0.12.6/0003-Use-a-python-variable-instead-of-hardcoding-Python.patch similarity index 100% rename from package/nodejs/0.12.5/0003-Use-a-python-variable-instead-of-hardcoding-Python.patch rename to package/nodejs/0.12.6/0003-Use-a-python-variable-instead-of-hardcoding-Python.patch diff --git a/package/nodejs/0.12.5/0004-fix-build-error-without-OpenSSL-support.patch b/package/nodejs/0.12.6/0004-fix-build-error-without-OpenSSL-support.patch similarity index 100% rename from package/nodejs/0.12.5/0004-fix-build-error-without-OpenSSL-support.patch rename to package/nodejs/0.12.6/0004-fix-build-error-without-OpenSSL-support.patch diff --git a/package/nodejs/Config.in b/package/nodejs/Config.in index 5b871eaf34..ff7f56c49c 100644 --- a/package/nodejs/Config.in +++ b/package/nodejs/Config.in @@ -34,7 +34,7 @@ config BR2_BR2_PACKAGE_NODEJS_0_10_X # V8 included with v0.12.5 requires at least ARMv6 config BR2_BR2_PACKAGE_NODEJS_0_12_X - bool "v0.12.5" + bool "v0.12.6" depends on !BR2_ARM_CPU_ARMV5 endchoice @@ -42,7 +42,7 @@ endchoice config BR2_PACKAGE_NODEJS_VERSION_STRING string default "0.10.39" if BR2_BR2_PACKAGE_NODEJS_0_10_X - default "0.12.5" if BR2_BR2_PACKAGE_NODEJS_0_12_X + default "0.12.6" if BR2_BR2_PACKAGE_NODEJS_0_12_X menu "Module Selection" diff --git a/package/nodejs/nodejs.hash b/package/nodejs/nodejs.hash index 816d602f70..f3b28316a7 100644 --- a/package/nodejs/nodejs.hash +++ b/package/nodejs/nodejs.hash @@ -1,5 +1,5 @@ # From upstream URL: http://nodejs.org/dist/v0.10.39/SHASUMS256.txt sha256 68f8d8f9515c4e77e2a06034b742e19e9848c1fee5bcadedc1d68f3e4302df37 node-v0.10.39.tar.gz -# From upstream URL: http://nodejs.org/dist/v0.12.5/SHASUMS256.txt -sha256 4bc1e25f4c62ac65324d3cf4aa9de2d801cd708757c3567b6ad2ced7df30cdd2 node-v0.12.5.tar.gz +# From upstream URL: http://nodejs.org/dist/v0.12.6/SHASUMS256.txt +sha256 7a3b5ac351973a9dee8edbf0684bc8d0dea44b231e42274ffb008141ffa19ad2 node-v0.12.6.tar.gz