Commit Graph

6 Commits

Author SHA1 Message Date
Yann E. MORIN
781529b159 package/nodejs: security bump
Critical security flaw:
    https://medium.com/@iojs/important-security-upgrades-for-node-js-and-io-js-8ac14ece5852

Fixes #8201.

Reported-by: Chris Becker <goabonga@gmail.com>
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-06 11:50:00 +02:00
Martin Bark
73f3b45e18 package/nodejs: Add node.js v0.12.5 and set as the default version
The version of the V8 JavaScript engine used by node.js v0.12.5 requires
at least an ARMv6 architecture with VFPv2.  For this reason v0.10.39
remains the default for ARMv5 targets, all other targets now default to
v0.12.5.

Signed-off-by: Martin Bark <martin@barkynet.com>
Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-04 14:38:05 +02:00
Martin Bark
96b6427de5 package/nodejs: Bump version to 0.10.39
Signed-off-by: Martin Bark <martin@barkynet.com>
Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-28 14:06:35 +02:00
Jörg Krause
6202592588 package/nodejs: Security bump to version 0.10.38
Version 0.10.38 upgrades OpenSSL to version 1.0.1m, which includes fixes for
several CVEs:
  - CVE-2015-0204
  - CVE-2015-0286
  - CVE-2015-0287
  - CVE-2015-0289
  - CVE-2015-0292
  - CVE-2015-0293
  - CVE-2015-0209
  - CVE-2015-0288

Version 0.10.37 comes with a fix for CVE-2015-0278.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-30 17:58:26 +02:00
Jörg Krause
3bd712bb82 package/nodejs: bump to version 0.10.36
Bump to new version and update hash.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-31 13:26:33 +01:00
Jörg Krause
d434fcbeab package/nodejs: add hash file
Signed-off-by: Jörg Krause <jkrause@posteo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-01-06 21:52:42 +01:00