ports/183092: [security fix required] Port www/node version up required from v0.10.19 to 0.10.21

Kenji Rikitake kenji.rikitake at acm.org
Sat Oct 19 00:50:00 UTC 2013


>Number:         183092
>Category:       ports
>Synopsis:       [security fix required] Port www/node version up required from v0.10.19 to 0.10.21
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Oct 19 00:50:00 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator:     Kenji Rikitake
>Release:        9.2-STABLE
>Organization:
>Environment:
FreeBSD minimax.priv.k2r.org 9.2-STABLE FreeBSD 9.2-STABLE #13 r255959: Tue Oct  1 13:18:35 JST 2013     root at minimax.priv.k2r.org:/usr/obj/usr/src/sys/K2RKERNEL  amd64
>Description:
nodejs dev team has announced v0.10.21 for "an undisclosed HTTP vulnerability fix."
This is a very crude kludge to put v0.10.21, instead of v0.10.20 as of 0000UTC 19-OCT-2013.
See
https://groups.google.com/forum/#!msg/nodejs/NEbweYB0ei0/gWvyzCunYjsJ
for the details of the severity.
>How-To-Repeat:
/usr/local/bin/node --version
>Fix:
Patch given. Apply this at /usr/local/www/node and rebuild the Port.

Patch attached with submission follows:

A kludge to upgrade from FreeBSD Port node 0.10.19 to 0.10.21.
Apply this patch at /usr/ports/www/node and rebuild/reinstall the port.

diff --unified /usr/ports/www/node/Makefile ./Makefile
--- /usr/ports/www/node/Makefile	2013-09-30 07:51:06.000000000 +0900
+++ ./Makefile	2013-10-19 09:17:36.000000000 +0900
@@ -2,7 +2,7 @@
 # $FreeBSD: www/node/Makefile 328753 2013-09-29 22:51:06Z swills $
 
 PORTNAME=	node
-PORTVERSION=	0.10.19
+PORTVERSION=	0.10.21
 CATEGORIES=	www
 MASTER_SITES=	http://nodejs.org/dist/v${PORTVERSION}/
 DISTNAME=	${PORTNAME}-v${PORTVERSION}
diff --unified /usr/ports/www/node/distinfo ./distinfo
--- /usr/ports/www/node/distinfo	2013-09-30 07:51:06.000000000 +0900
+++ ./distinfo	2013-10-19 09:18:38.000000000 +0900
@@ -1,2 +1,2 @@
-SHA256 (node-v0.10.19.tar.gz) = e50787672cdf6afa6caeef9345ca40c4a69f96a31829a0884ea6ed63dfdde21e
-SIZE (node-v0.10.19.tar.gz) = 13627909
+SHA256 (node-v0.10.21.tar.gz) = 7c125bf22c1756064f2a68310d4822f77c8134ce178b2faa6155671a8124140d
+SIZE (node-v0.10.21.tar.gz) = 13647047


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-ports-bugs mailing list