Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master 2025-03-18T18:30:45+00:00 2025-03-18T18:30:45+00:00 Jason Schonberg schonm@gmail.com 2025-03-18T17:53:42+00:00 urn:sha1:3989427ca7e348627f9a66e45d3652596b66fe94 License-Update: Change the location of the inspector_protocol https://github.com/nodejs/node/commit/a48430d4d34eb9f598522410dd7723f069c574d0 Changelog: https://github.com/nodejs/node/releases/tag/v22.14.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-01-25T02:20:07+00:00 Jason Schonberg schonm@gmail.com 2025-01-23T00:28:18+00:00 urn:sha1:1216d76bec441d2c87bef5f9a3985c44266d93a9 Changelog for 22.13.0 : https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V22.md#22.13.0 Changelog for 22.13.1 : https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V22.md#22.13.1 The 22.13.1 release is a security fix addressing four CVEs. CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High) CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium) CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium) CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium) I introduce a new patch with this recipe 0001-Do-not-use-glob-in-deps.patch to revert https://github.com/nodejs/node/commit/77e2869ca6 I restored 0001-deps-disable-io_uring-support-in-libuv.patch as suggested here : https://lore.kernel.org/all/20241207140642.181134-1-martin.jansa@gmail.com/ Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>