~alpine/aports

main/nodejs: security upgrade to 12.22.3 v1 PROPOSED

Markus Kolb <alpinelinux@tower-net.de>
4 years ago 
Markus Kolb: 1
 main/nodejs: security upgrade to 12.22.3

 1 files changed, 7 insertions(+), 2 deletions(-)
Export patchset (mbox)
How do I use this?

Copy & paste the following snippet into your terminal to import this patchset into git: 

curl -s https://lists.alpinelinux.org/~alpine/aports/patches/3549/mbox | git am -3
Learn more about email & git
Reply to thread View this thread in the archives

[PATCH] main/nodejs: security upgrade to 12.22.3 Export this patch

Markus Kolb <alpinelinux@tower-net.de>
4 years ago 
From: arlecchino <2911-arlecchino@users.gitlab.alpinelinux.org>

---
 main/nodejs/APKBUILD | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/main/nodejs/APKBUILD b/main/nodejs/APKBUILD
index 864074be..985edf93 100644
--- a/main/nodejs/APKBUILD
+++ b/main/nodejs/APKBUILD
@@ -6,6 +6,11 @@
# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
#
# secfixes:
#   12.22.3-r0:
#     - CVE-2021-22918
#     - CVE-2021-22921
#     - CVE-2021-27290
#     - CVE-2021-23362
#   12.22.1-r0:
#     - CVE-2020-7774
#   12.21.0-r0:
@@ -64,7 +69,7 @@
pkgname=nodejs
# Note: Update only to even-numbered versions (e.g. 6.y.z, 8.y.z)!
# Odd-numbered versions are supported only for 9 months by upstream.
pkgver=12.22.1
pkgver=12.22.3
pkgrel=0
pkgdesc="JavaScript runtime built on V8 engine - LTS version"
url="https://nodejs.org/"
@@ -165,6 +170,6 @@ npm() {
	mv "$pkgdir"/usr/lib/node_modules/npm "$subpkgdir"/usr/lib/node_modules/
}

sha512sums="75a0fe700ae48bbc012cbe579a7e1bef8296a83e936121f87b54a265f9729f1478fa8035807f2599e34c46c104095dcb4613da8b334d191b3aa6535287005360  node-v12.22.1.tar.gz
sha512sums="ab4ac507ab722d190baa54925cc9ef0d8f5a83aa10cfd21fe2d826dc9472f2ff7d751253d9453b0f29fe84339163b93146b03cb6d5a9ced95f893b9e1ec62b8b  node-v12.22.3.tar.gz
fc5848ced3e591e732b6a9af27679ca82f7605a4b2cd2f7eb6a411664b7c065892fb67a1db5aec7a26207582eecd8377476ed550c1dfb6c7917ba7babfa66a2d  dont-run-gyp-files-for-bundled-deps.patch
a63b42c08b55139c1c363f6ba8aba9d85a0621b383ed514f7562cfa02f0cc290785d7cfe09892ac39962980d1b318957511f57b3f9b9d1fbc8704c0603597c9a  link-with-libatomic-on-mips32.patch"
-- 
2.26.3