Files
buildroot/package
Peter Korsgaard 3b6397c10f package/nodejs: security bump to version 12.20.1
Fixes the following security issues:

- CVE-2020-8265: use-after-free in TLSWrap (High) Affected Node.js versions
  are vulnerable to a use-after-free bug in its TLS implementation.  When
  writing to a TLS enabled socket, node::StreamBase::Write calls
  node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first
  argument.  If the DoWrite method does not return an error, this object is
  passed back to the caller as part of a StreamWriteResult structure.  This
  may be exploited to corrupt memory leading to a Denial of Service or
  potentially other exploits

- CVE-2020-8287: HTTP Request Smuggling in nodejs Affected versions of
  Node.js allow two copies of a header field in a http request.  For
  example, two Transfer-Encoding header fields.  In this case Node.js
  identifies the first header field and ignores the second.  This can lead
  to HTTP Request Smuggling

- CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)
  This is a vulnerability in OpenSSL which may be exploited through Node.js.
  You can read more about it in
  https://www.openssl.org/news/secadv/20201208.txt

Update the license hash for the addition of the (MIT licensed)
cjs-module-lexer module:
9eb1fa1924

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit ecc8f0fe84)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-12 11:33:04 +01:00
..
2020-07-22 13:37:14 +02:00
2020-10-03 07:56:57 +02:00
2020-04-25 09:06:09 +02:00
2020-10-10 22:24:08 +02:00
2020-12-11 22:26:01 +01:00
2020-12-06 23:18:19 +01:00
2020-02-29 23:17:29 +01:00
2020-08-28 18:01:24 +02:00
2020-11-09 11:01:05 +01:00
2020-06-02 08:41:08 +02:00
2020-07-20 21:56:41 +02:00
2020-09-29 16:18:08 +02:00
2020-05-08 11:39:03 +02:00
2020-07-22 13:47:00 +02:00
2020-11-14 14:12:20 +01:00
2020-11-13 22:11:03 +01:00
2020-10-02 22:33:00 +02:00
2020-05-08 12:08:05 +02:00
2020-04-07 21:04:41 +02:00
2020-04-07 20:28:05 +02:00
2020-07-13 08:37:19 +02:00
2020-07-22 13:44:19 +02:00
2020-12-12 09:22:26 +01:00
2020-11-13 23:42:41 +01:00
2020-11-03 11:04:18 +01:00
2020-05-31 23:21:38 +02:00
2020-07-22 09:00:59 +02:00
2020-11-09 10:51:08 +01:00
2020-04-08 16:30:36 +02:00
2020-05-08 09:13:34 +02:00
2020-12-07 21:38:14 +01:00
2020-08-28 18:43:57 +02:00
2020-04-30 14:42:03 +02:00
2020-04-29 23:49:57 +02:00
2020-03-08 09:41:44 +01:00
2021-01-12 11:32:10 +01:00
2020-12-08 10:59:50 +01:00
2020-04-07 20:24:58 +02:00
2020-07-22 13:44:19 +02:00
2020-03-02 23:33:57 +01:00
2020-03-07 22:52:02 +01:00
2020-08-28 18:43:57 +02:00
2020-04-07 21:02:37 +02:00
2020-12-12 12:02:51 +01:00
2020-11-16 22:24:05 +01:00
2020-09-29 17:20:56 +02:00
2020-05-09 09:20:45 +02:00