kumquat-buildroot/package/nodejs
Martin Bark 476ccdb3e4 package/nodejs: security bump to version 8.1.4
Fixes CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which
is used for parsing NAPTR responses, could be triggered to read memory
outside of the given input buffer if the passed in DNS response packet was
crafted in a particular way.  This patch checks that there is enough data
for the required elements of an NAPTR record (2 int16, 3 bytes for string
lengths) before processing a record.

See https://nodejs.org/en/blog/release/v8.1.4/

[Peter: add CVE info]
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-07-13 22:54:53 +02:00
..
0001-check-if-uclibc-has-backtrace-support.patch
0002-add-missing-stdarg-includes.patch package/nodejs: bump version to 8.0.0 2017-06-05 10:14:44 +02:00
Config.in package/nodejs: remove support for coffeescript 2017-05-06 15:54:44 +02:00
nodejs.hash package/nodejs: security bump to version 8.1.4 2017-07-13 22:54:53 +02:00
nodejs.mk package/nodejs: security bump to version 8.1.4 2017-07-13 22:54:53 +02:00