Page MenuHomeFreeBSD

www/node16: Update to 16.17.1
ClosedPublic

Authored by otis on Sep 25 2022, 5:57 AM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Jun 24, 8:36 AM
Unknown Object (File)
Fri, Jun 19, 12:49 PM
Unknown Object (File)
Wed, Jun 17, 12:29 PM
Unknown Object (File)
Wed, Jun 17, 3:21 AM
Unknown Object (File)
Wed, Jun 17, 2:54 AM
Unknown Object (File)
Thu, Jun 4, 3:44 AM
Unknown Object (File)
May 20 2026, 2:47 PM
Unknown Object (File)
May 19 2026, 11:56 AM

Details

Summary

Changelog: https://github.com/nodejs/node/releases/tag/v16.17.1

The following CVEs are fixed in this release:

CVE-2022-32212: DNS rebinding in --inspect on macOS
CVE-2022-32213: bypass via obs-fold mechanic
CVE-2022-35255: Weak randomness in WebCrypto keygen
CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

otis requested review of this revision.Sep 25 2022, 5:57 AM
otis added a subscriber: bhughes.

Adding relevant reviewers.

@bhughes is not responding in a timely manner and we need to do these updates sooner than after eventual maintainer timeout.

This revision was not accepted when it landed; it landed in state Needs Review.Oct 16 2022, 4:20 PM
This revision was automatically updated to reflect the committed changes.