Here's a simple update for lang/node for a change:
v18.18.1
* Changed bundled versions of libuv, which doesn't affect our build since
we're building against libuv in ports
v18.18.2
* Changed bundled version of nghttp2, which doesn't affect us since we're
building against nghttp2 in ports
* Changed bundled version of undici, changes are Javascript-only
* fixes CVE-2023-45143
https://github.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp
* Also contains fixes for (according to the commits):
CVE-2023-39331 (Path traversal)
CVE-2023-39332 (Path traversal)
CVE-2023-39333 (Code injection)
CVE-2023-38552 (Integrity check circumvention)
No changes to v8 or the build system, only the fix for CVE-2023-38552 touches
non-Javascrtipt code.
Built and tested on amd64 with IBT enabled.
ok?
Index: Makefile
===================================================================
RCS file: /cvs/ports/lang/node/Makefile,v
retrieving revision 1.129
diff -u -p -r1.129 Makefile
--- Makefile 26 Sep 2023 12:02:03 -0000 1.129
+++ Makefile 16 Oct 2023 11:16:54 -0000
@@ -5,7 +5,7 @@ USE_WXNEEDED = Yes
COMMENT = JavaScript runtime built on Chrome's V8 JavaScript engine
-NODE_VERSION = v18.18.0
+NODE_VERSION = v18.18.2
PLEDGE_VER = 1.1.3
DISTFILES = ${DISTNAME}-headers.tar.gz \
${DISTNAME}.tar.xz
Index: distinfo
===================================================================
RCS file: /cvs/ports/lang/node/distinfo,v
retrieving revision 1.72
diff -u -p -r1.72 distinfo
--- distinfo 26 Sep 2023 10:44:17 -0000 1.72
+++ distinfo 16 Oct 2023 11:16:54 -0000
@@ -1,6 +1,6 @@
SHA256 (node-pledge-1.1.3.tar.gz) = fEaXvLg6hYEJ69K+mgQFizf8DiJY2/DtyFJB/pEanVU=
-SHA256 (node-v18.18.0-headers.tar.gz) = 3NwDNUJuPiT44f9p1t3SFyw+Q5bobb9LeiyXPXLeR4U=
-SHA256 (node-v18.18.0.tar.xz) = 5NTbrDY02Z+JLwDbR9p4+YSTwzlYLoqV+y3Vn1z+D5A=
+SHA256 (node-v18.18.2-headers.tar.gz) = cMkWTBlSp3zga9gONQehESTPYLbIJAniw60abVvFqRA=
+SHA256 (node-v18.18.2.tar.xz) = ckni8K+UPsOFmVBPSyor0x+5OHhykbbMymyLrfAeO1Y=
SIZE (node-pledge-1.1.3.tar.gz) = 3167
-SIZE (node-v18.18.0-headers.tar.gz) = 8712286
-SIZE (node-v18.18.0.tar.xz) = 40813264
+SIZE (node-v18.18.2-headers.tar.gz) = 8713368
+SIZE (node-v18.18.2.tar.xz) = 40834428
