me
/
guix
Archived
1
0
Fork 0
Code

gnu: node-lts: Update to 14.18.1 [security fixes]. 

* gnu/packages/node.scm (node-lts): Update to 14.18.1.
[native-inputs]: Replace c-ares with c-ares-for-node.
[inputs]: Replace c-ares with c-ares-for-node.

Includes fixes for CVE-2021-22918, CVE-2021-22930, CVE-2021-22931,
CVE-2021-22939, and CVE-2021-22940.
master
Jelle Licht 2021-10-28 14:11:45 +02:00
parent cae7c3f389
commit f3cd70ff8c
No known key found for this signature in database
GPG Key ID: DA4597F947B41025
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
gnu/packages/node.scm
View File

@ -647,14 +647,14 @@ source files.")
(define-public node-lts (define-public node-lts
(package (package
(inherit node) (inherit node)
(version "14.16.0") (version "14.18.1")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (string-append "https://nodejs.org/dist/v" version (uri (string-append "https://nodejs.org/dist/v" version
"/node-v" version ".tar.xz")) "/node-v" version ".tar.xz"))
(sha256 (sha256
(base32 (base32
"19nz2mhmn6ikahxqyna1dn25pb5v3z9vsz9zb2flb6zp2yk4hxjf")) "1vc9rypkgr5i5y946jnyr9jjpydxvm74p1s17rg2zayzvlddg89z"))
(modules '((guix build utils))) (modules '((guix build utils)))
(snippet (snippet
`(begin `(begin
@ -783,6 +783,9 @@ source files.")
'("test/parallel/test-dns.js" '("test/parallel/test-dns.js"
"test/parallel/test-dns-lookupService-promises.js")) "test/parallel/test-dns-lookupService-promises.js"))
;; These tests require networking.
(delete-file "test/parallel/test-https-agent-unref-socket.js")
;; FIXME: This test fails randomly: ;; FIXME: This test fails randomly:
;; https://github.com/nodejs/node/issues/31213 ;; https://github.com/nodejs/node/issues/31213
(delete-file "test/parallel/test-net-listen-after-destroying-stdin.js") (delete-file "test/parallel/test-net-listen-after-destroying-stdin.js")
@ -821,7 +824,7 @@ source files.")
"deps/llhttp/include/llhttp.h")))))))) "deps/llhttp/include/llhttp.h"))))))))
(native-inputs (native-inputs
`(;; Runtime dependencies for binaries used as a bootstrap. `(;; Runtime dependencies for binaries used as a bootstrap.
("c-ares" ,c-ares) ("c-ares" ,c-ares-for-node)
("brotli" ,brotli) ("brotli" ,brotli)
("icu4c" ,icu4c-67) ("icu4c" ,icu4c-67)
("libuv" ,libuv-for-node) ("libuv" ,libuv-for-node)
@ -837,7 +840,7 @@ source files.")
(inputs (inputs
`(("bash" ,bash) `(("bash" ,bash)
("coreutils" ,coreutils) ("coreutils" ,coreutils)
("c-ares" ,c-ares) ("c-ares" ,c-ares-for-node)
("icu4c" ,icu4c-67) ("icu4c" ,icu4c-67)
("libuv" ,libuv-for-node) ("libuv" ,libuv-for-node)
("llhttp" ,llhttp-bootstrap) ("llhttp" ,llhttp-bootstrap)