Page MenuHomeFreeBSD

www/node16: Update to 16.17.1
ClosedPublic

Authored by otis on Sep 25 2022, 5:57 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jan 9, 8:59 PM
Unknown Object (File)
Thu, Jan 9, 2:34 PM
Unknown Object (File)
Fri, Dec 27, 5:50 AM
Unknown Object (File)
Thu, Dec 26, 11:27 PM
Unknown Object (File)
Wed, Dec 25, 10:38 PM
Unknown Object (File)
Dec 19 2024, 7:57 AM
Unknown Object (File)
Dec 7 2024, 8:35 PM
Unknown Object (File)
Dec 1 2024, 3:58 AM

Details

Summary

Changelog: https://github.com/nodejs/node/releases/tag/v16.17.1

The following CVEs are fixed in this release:

CVE-2022-32212: DNS rebinding in --inspect on macOS
CVE-2022-32213: bypass via obs-fold mechanic
CVE-2022-35255: Weak randomness in WebCrypto keygen
CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

otis requested review of this revision.Sep 25 2022, 5:57 AM
otis added a subscriber: bhughes.

Adding relevant reviewers.

@bhughes is not responding in a timely manner and we need to do these updates sooner than after eventual maintainer timeout.

This revision was not accepted when it landed; it landed in state Needs Review.Oct 16 2022, 4:20 PM
This revision was automatically updated to reflect the committed changes.