Peter Korsgaard 58ba17c784 package/nodejs: security bump to version 16.18.1 ...

Fixes the following security issue:

DNS rebinding in --inspect via invalid octal IP address (Medium) (CVE-2022-43548)

The Node.js rebinding protector for --inspect still allows invalid IP
address, specifically, the octal format.  An example of an octal IP address
is 1.09.0.0, the 09 octet is invalid because 9 is not a number in the base 8
number system.  Browsers such as Firefox (tested on latest version m105)
will still attempt to resolve this invalid octal address via DNS.  When
combined with an active --inspect session, such as when using VSCode, an
attacker can perform DNS rebinding and execute arbitrary code

Update license hash for an update of base64 (MIT license) and a change in
copyright year:

8ea9a71b15
9f14dc1a8f

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>

2022-11-20 10:01:14 +01:00

..

0001-add-qemu-wrapper-support.patch

…

0002-check-if-uclibc-has-backtrace-support.patch

…

0003-include-obj-name-in-shared-intermediate.patch

…

Config.in

…

Config.in.host

…

nodejs.hash

…

nodejs.mk

…

v8-qemu-wrapper.in

…