From: Hirokazu MORIKAWA <morikw2@gmail.com>
Date: Fri, 16 Aug 2019 02:23:47 +0000 (+0900)
Subject: node: fix http/2 DoS
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=81bccf9068edc734ea904ecd63166630fcc69826;p=feed%2Fpackages.git

node: fix http/2 DoS

This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
---

diff --git a/lang/node/Makefile b/lang/node/Makefile
index 3ddd9b79d2..e10913fe49 100644
--- a/lang/node/Makefile
+++ b/lang/node/Makefile
@@ -8,11 +8,11 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=node
-PKG_VERSION:=v8.16.0
-PKG_RELEASE:=3
+PKG_VERSION:=v8.16.1
+PKG_RELEASE:=1
 PKG_SOURCE:=node-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=https://nodejs.org/dist/${PKG_VERSION}
-PKG_HASH:=3515e8e01568a5dc4dff3d91a76ebc6724f5fa2fbb58b4b0c5da7b178a2f7340
+PKG_HASH:=d8c190acdf2d967faf49c22df883d31a8d4e249d67852dae3c2d8a0f756b0512
 
 HOST_BUILD_DEPENDS:=python/host
 PKG_BUILD_DEPENDS:=python/host