linux/meta-openembedded.git/meta-oe/recipes-devtools/nodejs, branch kirkstone-next

meta-oe: Remove True option to getVar calls

2025-01-23T00:12:54+00:00

getVar() now defaults to expanding by default, thus remove the True option from getVar() calls with a regex search and replace. Signed-off-by: Akash Hadke Signed-off-by: Armin Kuster

nodejs: fix CVE-2023-46809

2024-06-02T19:10:59+00:00

Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: fix CVE-2024-22025

2024-06-02T19:09:02+00:00

Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: fix CVE-2024-22019

2024-06-02T19:08:41+00:00

Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: Set CVE_PRODUCT to "node.js"

2024-02-28T13:18:18+00:00

Set CVE_PRODUCT to 'node.js' for nodjs recipe Signed-off-by: virendra thakur Signed-off-by: Armin Kuster

nodejs: fix CVE-2022-25883

2023-09-04T15:59:59+00:00

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range. References: https://nvd.nist.gov/vuln/detail/CVE-2022-25883 Upstream patches: https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: upgrade 16.20.1 -> 16.20.2

2023-08-11T14:32:04+00:00

This release contains bug fixes only. The following CVEs have been addressed: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 $ git log --oneline v16.20.1..v16.20.2 dadbde963f (tag: v16.20.2) 2023-08-09, Version 16.20.2 'Gallium' (LTS) d8ccfe9ad4 policy: handle Module.constructor and main.extensions bypass 242aaa0caa policy: disable process.binding() when enabled 40c3958a5a deps: update archs files for OpenSSL-1.1.1v a9ac9da89a deps: fix openssl crypto clean 362d4c7494 deps: upgrade openssl sources to OpenSSL_1_1_1v 7447de2794 Working on v16.20.2 https://github.com/nodejs/node/releases/tag/v16.20.2 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: upgrade 16.19.1 -> 16.20.1

2023-07-16T19:30:53+00:00

Drop the gcc13.patch as it has been merged in 16.20.1 56cbc7fdda deps: V8: cherry-pick c2792e58035f The list of the CVEs are fixed in this relase: CVE-2023-30581 CVE-2023-30585 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 https://nodejs.org/en/blog/release/v16.20.0 https://nodejs.org/en/blog/release/v16.20.1 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

nodejs: Fix build with gcc13

2023-05-19T13:46:38+00:00

Signed-off-by: Khem Raj Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

nodejs: Upgrade 16.19.0 -> 16.19.1

2023-03-13T12:58:37+00:00

The following CVEs fixed in this version: CVE-2023-23918 CVE-2023-23919 CVE-2023-23920 CVE-2023-23936 CVE-2023-24807 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster