207832 – [PATCH] www/node: update to 5.8.0

Bug 207832 - [PATCH] www/node: update to 5.8.0

Summary: [PATCH] www/node: update to 5.8.0

Status:	Closed FIXED

Alias:	None

Product:	Ports & Packages
Classification:	Unclassified
Component:	Individual Port(s) (show other bugs)
Version:	Latest
Hardware:	Any Any

Importance:	--- Affects Many People
Assignee:	freebsd-ports-bugs (Nobody)

URL:
Keywords:	patch, patch-ready

Depends on:
Blocks:

Reported:	2016-03-09 08:29 UTC by Bradley T. Hughes
Modified:	2016-03-14 17:10 UTC (History)
CC List:	3 users (show)

See Also:

Flags:	rakuco: maintainer-feedback+

Attachments
patch to www/node from a git commit, apply with patch -p1 (1.01 KB, text/plain) 2016-03-09 08:29 UTC, Bradley T. Hughes	no flags	Details
poudriere testport log (281.43 KB, text/plain) 2016-03-09 08:37 UTC, Bradley T. Hughes	no flags	Details
portlint log (12 bytes, text/plain) 2016-03-09 08:37 UTC, Bradley T. Hughes	no flags	Details
patch to www/node from a git commit, apply with patch -p1 (922 bytes, patch) 2016-03-11 09:38 UTC, Bradley T. Hughes	rakuco: maintainer-approval+	Details \| Diff
portlint log from poudriere (12 bytes, text/plain) 2016-03-11 09:39 UTC, Bradley T. Hughes	no flags	Details
poudriere testport log (281.43 KB, text/plain) 2016-03-11 09:40 UTC, Bradley T. Hughes	no flags	Details
Show Obsolete (3) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Bradley T. Hughes freebsd_committer

2016-03-09 08:29:34 UTC

Created attachment 167906 [details]
patch to www/node from a git commit, apply with patch -p1

The latest upstream release contains security updates for recent OpenSSL CVEs and regression fixes.

Patch attached. See also https://github.com/bradleythughes/freebsd-ports/commit/615adec664dc9c9bb8b2b19455f50ae2671ea12b

Comment 1 Bradley T. Hughes freebsd_committer

2016-03-09 08:37:23 UTC

Created attachment 167907 [details]
poudriere testport log

Truncated poudriere testport log. I removed some of the make output from the log using:

$ grep -vE '^  (cc|c\+\+)' node-5.7.1.log > node-5.7.1-truncated.log

Comment 2 Bradley T. Hughes freebsd_committer

2016-03-09 08:37:51 UTC

Created attachment 167908 [details]
portlint log

portlint log from poudriere

Comment 3 Bradley T. Hughes freebsd_committer

2016-03-11 09:38:17 UTC

Created attachment 168001 [details]
patch to www/node from a git commit, apply with patch -p1

See also https://github.com/bradleythughes/freebsd-ports/commit/5326fdcc43dc1c9f7734022da97ef4e11a5957e9

Comment 4 Bradley T. Hughes freebsd_committer

2016-03-11 09:38:54 UTC

Upstream just released 5.8.0. I've updated my patch to 5.8.0.

Comment 5 Bradley T. Hughes freebsd_committer

2016-03-11 09:39:19 UTC

Created attachment 168002 [details]
portlint log from poudriere

Comment 6 Bradley T. Hughes freebsd_committer

2016-03-11 09:40:18 UTC

Created attachment 168003 [details]
poudriere testport log

Truncated poudriere testport log. I removed some of the make output from the log using:

$ grep -vE '^  (cc|c\+\+)' node-5.8.0.log > node-5.8.0-truncated.log

Comment 7 linpct 2016-03-11 11:06:13 UTC

Maintainer approved.

Comment 8 Raphael Kubo da Costa freebsd_committer

2016-03-13 22:27:11 UTC

To whoever ends up committing this patch to the tree: I suggest updating to 5.7.1 first, adding an entry to security/vuxml, MFH'ing that and then updating to 5.8.0 only in head.

Comment 9 commit-hook freebsd_committer

2016-03-14 16:47:06 UTC

A commit references this bug:

Author: feld
Date: Mon Mar 14 16:46:12 UTC 2016
New revision: 411103
URL: https://svnweb.freebsd.org/changeset/ports/411103

Log:
  Document node vulnerabilities

  PR:		207832
  Security:	CVE-2016-0702
  Security:	CVE-2016-0705
  Security:	CVE-2016-0797

Changes:
  head/security/vuxml/vuln.xml

Comment 10 commit-hook freebsd_committer

2016-03-14 16:48:08 UTC

A commit references this bug:

Author: feld
Date: Mon Mar 14 16:47:54 UTC 2016
New revision: 411104
URL: https://svnweb.freebsd.org/changeset/ports/411104

Log:
  www/node: Update to 5.7.1

  Changelog:	https://github.com/nodejs/node/commit/805f054cc7791c447dbb960fbf3b179ea05294ac

  PR:		207832
  Security:	CVE-2016-0702
  Security:	CVE-2016-0705
  Security:	CVE-2016-0797
  MFH:		2016Q1

Changes:
  head/www/node/Makefile
  head/www/node/distinfo

Comment 11 commit-hook freebsd_committer

2016-03-14 16:54:16 UTC

A commit references this bug:

Author: feld
Date: Mon Mar 14 16:53:30 UTC 2016
New revision: 411105
URL: https://svnweb.freebsd.org/changeset/ports/411105

Log:
  MFH: r406369 r407766 r408976 r409812 r410308 r411104

  - Update to 5.4.1

  Changes:	https://github.com/nodejs/node/blob/master/CHANGELOG.md
  PR:		206222
  Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)
  Sponsored by:	PortsCamp Taiwan

  - Update to 5.5.0

  Changes:	https://github.com/nodejs/node/blob/master/CHANGELOG.md
  PR:		206628
  Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)

  Update to 5.6.0.

  PR:		207203
  Submitted by:	maintainer

  Update to 5.7.0.

  PR:		207473
  Submitted by:	maintainer

  - Fix USES=python: it does not build with Python 3

  Approved by:	portmgr (blanket)
  With hat:	python

  www/node: Update to 5.7.1

  Changelog:	https://github.com/nodejs/node/commit/805f054cc7791c447dbb960fbf3b179ea05294ac

  PR:		207832
  Security:	CVE-2016-0702
  Security:	CVE-2016-0705
  Security:	CVE-2016-0797
  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2016Q1/
  branches/2016Q1/www/node/Makefile
  branches/2016Q1/www/node/distinfo
  branches/2016Q1/www/node/pkg-plist

Comment 12 commit-hook freebsd_committer

2016-03-14 17:03:18 UTC

A commit references this bug:

Author: feld
Date: Mon Mar 14 17:02:59 UTC 2016
New revision: 411106
URL: https://svnweb.freebsd.org/changeset/ports/411106

Log:
  www/node: Update to 5.8.0

  PR:		207832
  Approved by:	maintainer

Changes:
  head/www/node/Makefile
  head/www/node/distinfo

Comment 13 Raphael Kubo da Costa freebsd_committer

2016-03-14 17:10:50 UTC

Thanks, Mark and Brad :)