Bug 210519 - www/node5: Update to 5.12.0
Summary: www/node5: Update to 5.12.0
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Kurt Jaeger
URL:
Keywords: patch, patch-ready
Depends on:
Blocks:
 
Reported: 2016-06-24 10:28 UTC by Bradley T. Hughes
Modified: 2016-06-30 05:41 UTC (History)
2 users (show)

See Also:
bhughes: maintainer-feedback+

Attachments
patch from a git commit, apply with patch -p1 (1.54 KB, text/plain)
2016-06-24 10:28 UTC, Bradley T. Hughes 		bhughes: maintainer-approval+
Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Bradley T. Hughes freebsd_committer freebsd_triage 2016-06-24 10:28:29 UTC 
Created attachment 171742 [details]
patch from a git commit, apply with patch -p1

Notable changes

This is a security release. All Node.js users should consult the
security release summary at
https://nodejs.org/en/blog/vulnerability/june-2016-security-releases for
details on patched vulnerabilities.

- buffer
  - backport allocUnsafeSlow
  - ignore negative allocation lengths
- deps: backport 3a9bfec from v8 upstream
  - Fixes a Buffer overflow vulnerability discovered in v8. More details
    can be found in the CVE (CVE-2016-1699).

See the full release announcement here:
https://nodejs.org/en/blog/release/v5.12.0/
Comment 1 Bradley T. Hughes freebsd_committer freebsd_triage 2016-06-24 10:28:51 UTC 
poudriere testport passes on 10.3-RELEASE amd64 jail.
Comment 2 Kurt Jaeger freebsd_committer freebsd_triage 2016-06-30 05:41:00 UTC 
Committed, thanks. No MFH, as quarterly will be started soon.
Comment 3 commit-hook freebsd_committer freebsd_triage 2016-06-30 05:41:08 UTC 
A commit references this bug:

Author: pi
Date: Thu Jun 30 05:40:36 UTC 2016
New revision: 417806
URL: https://svnweb.freebsd.org/changeset/ports/417806

Log:
  www/node5: 5.11.1 -> 5.12.0

  This is a security release, see
  https://nodejs.org/en/blog/vulnerability/june-2016-security-releases
  for details on patched vulnerabilities.

  - buffer
    o backport allocUnsafeSlow
    o ignore negative allocation lengths
  - deps: backport 3a9bfec from v8 upstream
    o Fixes a Buffer overflow vulnerability discovered in v8. More details
      can be found in the CVE (CVE-2016-1699).

  PR:		210519
  Changes:	https://nodejs.org/en/blog/release/v5.12.0/
  Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)

Changes:
  head/www/node5/Makefile
  head/www/node5/distinfo