Page MenuHomeFreeBSD

www/node16: Update to 16.17.1
ClosedPublic

Authored by otis on Sep 25 2022, 5:57 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jun 4, 3:44 AM
Unknown Object (File)
Wed, May 20, 2:47 PM
Unknown Object (File)
Tue, May 19, 11:56 AM
Unknown Object (File)
Sat, May 16, 11:04 PM
Unknown Object (File)
Sat, May 16, 10:27 PM
Unknown Object (File)
Apr 28 2026, 11:29 PM
Unknown Object (File)
Apr 28 2026, 11:25 PM
Unknown Object (File)
Apr 28 2026, 3:12 AM

Details

Summary

Changelog: https://github.com/nodejs/node/releases/tag/v16.17.1

The following CVEs are fixed in this release:

CVE-2022-32212: DNS rebinding in --inspect on macOS
CVE-2022-32213: bypass via obs-fold mechanic
CVE-2022-35255: Weak randomness in WebCrypto keygen
CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

otis requested review of this revision.Sep 25 2022, 5:57 AM
otis added a subscriber: bhughes.

Adding relevant reviewers.

@bhughes is not responding in a timely manner and we need to do these updates sooner than after eventual maintainer timeout.

This revision was not accepted when it landed; it landed in state Needs Review.Oct 16 2022, 4:20 PM
This revision was automatically updated to reflect the committed changes.