Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 19 Oct 2013 02:48:02 +0000 (UTC)
From:      Steve Wills <swills@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r330834 - in head: security/vuxml www/node
Message-ID:  <201310190248.r9J2m2E4003108@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: swills
Date: Sat Oct 19 02:48:02 2013
New Revision: 330834
URL: http://svnweb.freebsd.org/changeset/ports/330834

Log:
  - Update to 0.10.21 to address a security issue
  
  PR:		ports/183092
  Submitted by:	Kenji Rikitake <kenji.rikitake@acm.org>
  Security:	206f9826-a06d-4927-9a85-771c37010b32

Modified:
  head/security/vuxml/vuln.xml
  head/www/node/Makefile
  head/www/node/distinfo

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Sat Oct 19 02:40:28 2013	(r330833)
+++ head/security/vuxml/vuln.xml	Sat Oct 19 02:48:02 2013	(r330834)
@@ -51,6 +51,31 @@ Note:  Please add new entries to the beg
 
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">;
+  <vuln vid="206f9826-a06d-4927-9a85-771c37010b32">
+    <topic>node.js -- DoS Vulnerability</topic>
+    <affects>
+      <package>
+	<name>node</name>
+	<range><lt>0.10.21</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">;
+	<p>node.js developers report</p>
+	<blockquote cite="http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/">;
+	  <p>This release contains a security fix for the http server implementation, please upgrade as soon as possible.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/</url>;
+    </references>
+    <dates>
+      <discovery>2013-10-19</discovery>
+      <entry>2013-10-19</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="e135f0c9-375f-11e3-80b7-20cf30e32f6d">
     <topic>bugzilla -- multiple vulnerabilities</topic>
     <affects>

Modified: head/www/node/Makefile
==============================================================================
--- head/www/node/Makefile	Sat Oct 19 02:40:28 2013	(r330833)
+++ head/www/node/Makefile	Sat Oct 19 02:48:02 2013	(r330834)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	node
-PORTVERSION=	0.10.19
+PORTVERSION=	0.10.21
 CATEGORIES=	www
 MASTER_SITES=	http://nodejs.org/dist/v${PORTVERSION}/
 DISTNAME=	${PORTNAME}-v${PORTVERSION}

Modified: head/www/node/distinfo
==============================================================================
--- head/www/node/distinfo	Sat Oct 19 02:40:28 2013	(r330833)
+++ head/www/node/distinfo	Sat Oct 19 02:48:02 2013	(r330834)
@@ -1,2 +1,2 @@
-SHA256 (node-v0.10.19.tar.gz) = e50787672cdf6afa6caeef9345ca40c4a69f96a31829a0884ea6ed63dfdde21e
-SIZE (node-v0.10.19.tar.gz) = 13627909
+SHA256 (node-v0.10.21.tar.gz) = 7c125bf22c1756064f2a68310d4822f77c8134ce178b2faa6155671a8124140d
+SIZE (node-v0.10.21.tar.gz) = 13647047



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201310190248.r9J2m2E4003108>