Skip to contentSkip to conversation

package/nodejs: Security bump to version 0.10.38

PATCH New Jörg Krause 2 participants 2 messages Mar 30, 2015

lore
Share & tools
lore

Jörg Krause

author
#0 lore raw

PATCH 1/1 package/nodejs: Security bump to version 0.10.38

Version 0.10.38 upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs:
- CVE-2015-0204
- CVE-2015-0286
- CVE-2015-0287
- CVE-2015-0289
- CVE-2015-0292
- CVE-2015-0293
- CVE-2015-0209
- CVE-2015-0288

Version 0.10.37 comes with a fix for CVE-2015-0278.

Signed-off-by J?rg Krause <[email protected]>
---
 package/nodejs/nodejs.hash | 4 ++--
 package/nodejs/nodejs.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/nodejs/nodejs.hash +2 -2
index 5b868e9..792ebc1 100644
@@ -1,2 +1,2 @@
-# From upstream URL: http://nodejs.org/dist/v0.10.36/SHASUMS256.txt
-sha256	b9d7d1d0294bce46686b13a05da6fc5b1e7743b597544aa888e8e64a9f178c81  node-v0.10.36.tar.gz
+# From upstream URL: http://nodejs.org/dist/v0.10.38/SHASUMS256.txt
+sha256	513da8ed5e48abefdfab664f1cabc160238d314a0481148804aff8fc6552b78b  node-v0.10.38.tar.gz
package/nodejs/nodejs.mk +1 -1
index 89faa6c..e8a2c27 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-NODEJS_VERSION = 0.10.36
+NODEJS_VERSION = 0.10.38
 NODEJS_SOURCE = node-v$(NODEJS_VERSION).tar.gz
 NODEJS_SITE = http://nodejs.org/dist/v$(NODEJS_VERSION)
 NODEJS_DEPENDENCIES = host-python host-nodejs zlib \
Signature · 1 line
2.3.4
Applied
#1 lore raw

PATCH 1/1 package/nodejs: Security bump to version 0.10.38

Dear J?rg Krause,

Quoted 11 lines · J?rg Krause

Version 0.10.38 upgrades OpenSSL to version 1.0.1m, which includes fixes for several CVEs:
- CVE-2015-0204
- CVE-2015-0286
- CVE-2015-0287
- CVE-2015-0289
- CVE-2015-0292
- CVE-2015-0293
- CVE-2015-0209
- CVE-2015-0288

Quoted 3 lines

Version 0.10.37 comes with a fix for CVE-2015-0278.

Signed-off-by J?rg Krause <[email protected]>

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com