Peter Korsgaard b6d64d7fa4 package/nodejs: security bump to version 12.18.4 ... Fixes the following security issues: - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing. This can lead to HTTP Request Smuggling as it is a non-standard interpretation of the header. Impacts: All versions of the 14.x and 12.x releases line - CVE-2020-8252: fs.realpath.native may cause buffer overflow libuv's realpath implementation incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes. Impacts: All versions of the 10.x release line All versions of the 12.x release line For more details, see the advisory: https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ Adjust license hash for the addition of the BSD-3c licensed highlight.js: 6f8b7a85d2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>		2020-10-01 21:22:35 +02:00
..
0001-check-if-uclibc-has-backtrace-support.patch
Config.in
nodejs.hash	package/nodejs: security bump to version 12.18.4	2020-10-01 21:22:35 +02:00
nodejs.mk	package/nodejs: security bump to version 12.18.4	2020-10-01 21:22:35 +02:00