Bug 229038

Summary: www/node8: Update to 8.11.3
Product: Ports & Packages Reporter: Pascal Christen <pascal.christen>
Component: Individual Port(s)Assignee: Bradley T. Hughes <bhughes>
Status: Closed FIXED    
Severity: Affects Many People CC: pascal.christen
Priority: --- Flags: bugzilla: maintainer-feedback? (bhughes)
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
Patch for Update none

Description Pascal Christen 2018-06-15 07:53:47 UTC 
Created attachment 194268 [details]
Patch for Update

Update node8 to 8.11.3 due to voulnerabilities marked as HIGH

https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/
Comment 1 Bradley T. Hughes freebsd_committer freebsd_triage 2018-06-15 07:57:08 UTC 
Hi Pascal,

Thanks for the patch, I have builds running for Node.js 6.14.3, 8.11.3, and 10.4.1 to address the vulneratilities in the June security release announcement. I have already added vuxml entries for them, I will commit the changes once the builds are done. :)
Comment 2 Pascal Christen 2018-06-15 08:03:25 UTC 
Hi Bradley,

Ok so I won't add patches for the other node ports. My node 8.11.3 built successfully. Thank you!
Comment 3 commit-hook freebsd_committer freebsd_triage 2018-06-15 14:12:05 UTC 
A commit references this bug:

Author: bhughes
Date: Fri Jun 15 14:11:08 UTC 2018
New revision: 472452
URL: https://svnweb.freebsd.org/changeset/ports/472452

Log:
  www/node8: Update 8.11.2 -> 8.11.3

  Update to the latest security release, fixing CVE-2018-7161,
  CVE-2018-7167, and CVE-2018-1000168.

  https://nodejs.org/en/blog/release/v8.11.3/
  https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/

  PR:		229038
  Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>
  MFH:		2018Q2
  Security:	45b8e2eb-7056-11e8-8fab-63ca6e0e13a2
  Sponsored by:	Miles AS

Changes:
  head/www/node8/Makefile
  head/www/node8/distinfo
Comment 4 commit-hook freebsd_committer freebsd_triage 2018-06-15 21:09:36 UTC 
A commit references this bug:

Author: bhughes
Date: Fri Jun 15 21:08:55 UTC 2018
New revision: 472490
URL: https://svnweb.freebsd.org/changeset/ports/472490

Log:
  MFH: r470576 r472452

  www/node8: Update 8.11.1_1 -> 8.11.2

  https://nodejs.org/en/blog/release/v8.11.2/

  www/node8: Update 8.11.2 -> 8.11.3

  Update to the latest security release, fixing CVE-2018-7161,
  CVE-2018-7167, and CVE-2018-1000168.

  https://nodejs.org/en/blog/release/v8.11.3/
  https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/

  PR:		229038
  Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>
  Security:	45b8e2eb-7056-11e8-8fab-63ca6e0e13a2
  Sponsored by:	Miles AS

  Approved by:	ports-secteam (miwi)

Changes:
_U  branches/2018Q2/
  branches/2018Q2/www/node8/Makefile
  branches/2018Q2/www/node8/distinfo