Bug 261789
| Summary: | www/node16: Update to 16.14.0 (LTS) | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Boris Korzun <drtr0jan> | ||||||||
| Component: | Individual Port(s) | Assignee: | Juraj Lutter <otis> | ||||||||
| Status: | Closed FIXED | ||||||||||
| Severity: | Affects Many People | CC: | bhughes, fred, freebsdbugs, otis, pi, ports-secteam, sean | ||||||||
| Priority: | Normal | Keywords: | needs-qa, security | ||||||||
| Version: | Latest | Flags: | bugzilla:
maintainer-feedback?
(bhughes) koobs: merge-quarterly? |
||||||||
| Hardware: | Any | ||||||||||
| OS: | Any | ||||||||||
| URL: | https://nodejs.org/en/blog/release/v16.13.2/ | ||||||||||
| See Also: | https://reviews.freebsd.org/D34413 | ||||||||||
| Bug Depends on: | |||||||||||
| Bug Blocks: | 261837, 263090 | ||||||||||
| Attachments: |
|
||||||||||
^Triage: 16.13.2 fixes multiple security vulnerabilities. Pending VuXML patch. @Reporter Can you create an issue (depending on this one) for updating textproc/kibana7 so we can track the dependency Created attachment 231762 [details] vuxml.diff (In reply to Kubilay Kocak from comment #1) A VuXML patch in the attachment. Ping ^Triage: Reset Assignee, maintainer timeout, security issue, open to take. We have an update and vuxml patches Ping Created attachment 232389 [details]
diff-to-16.14.0
Builds in poudriere for 13.0amd64.
There already is 16.14.2 and I'm testing it now. Update to version 16.14.2 is in review D34413 A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=482b3e711590e12d3f996bf9ab67b74516a439e9 commit 482b3e711590e12d3f996bf9ab67b74516a439e9 Author: Boris Korzun <drtr0jan@yandex.ru> AuthorDate: 2022-04-02 15:40:16 +0000 Commit: Juraj Lutter <otis@FreeBSD.org> CommitDate: 2022-04-02 15:40:16 +0000 security/vuxml: Document nodejs vulnerabilities PR: 261789 security/vuxml/vuln-2022.xml | 47 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=cd47c658d43fbd29cb569b2230a05a1682ad3360 commit cd47c658d43fbd29cb569b2230a05a1682ad3360 Author: Juraj Lutter <otis@FreeBSD.org> AuthorDate: 2022-03-20 17:55:42 +0000 Commit: Juraj Lutter <otis@FreeBSD.org> CommitDate: 2022-04-02 15:43:19 +0000 www/node16: Update to 16.14.2 - Update to 16.14.2 - Add COREPACK option Reported by: Boris Korzun <drtr0jan@yandex.ru>, pi PR: 261789 Differential Revision: https://reviews.freebsd.org/D34413 www/node16/Makefile | 9 ++++++--- www/node16/distinfo | 6 +++--- 2 files changed, 9 insertions(+), 6 deletions(-) Committed with some of your inputs incorporated. Thanks! @Juraj It doesn't look like this was merged to quarterly? I'll commit an update to 16.15.0 that went out 1 month ago. - Update to 16.15.1 has been committed. - vuxml entry has been commited earlier |
Created attachment 231632 [details] node16.diff Update to 16.13.2. It's needed for textproc/kibana7 7.17.0.