On Tue, Jan 21, 2025 at 07:37:18PM +0100, Volker Schlecht wrote:
> https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
>
> Fixes
> CVE-2025-23083 (High)
> CVE-2025-23085 (Medium)
> CVE-2025-22150 (Medium)
>
> The diff to v22.13.0 is limited to only those fixes:
> https://github.com/nodejs/node/compare/v22.13.0...v22.13.1.diff
ok tb
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/lang/node/Makefile,v
> diff -u -p -r1.146 Makefile
> --- Makefile 13 Jan 2025 15:58:55 -0000 1.146
> +++ Makefile 21 Jan 2025 18:30:46 -0000
> @@ -5,7 +5,7 @@ USE_WXNEEDED = Yes
>
> COMMENT = JavaScript runtime built on Chrome's V8 JavaScript engine
>
> -NODE_VERSION = v22.13.0
> +NODE_VERSION = v22.13.1
> PLEDGE_VER = 1.1.3
> DISTFILES = ${DISTNAME}-headers.tar.gz \
> ${DISTNAME}.tar.xz
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/lang/node/distinfo,v
> diff -u -p -r1.84 distinfo
> --- distinfo 13 Jan 2025 15:58:55 -0000 1.84
> +++ distinfo 21 Jan 2025 18:30:46 -0000
> @@ -1,6 +1,6 @@
> SHA256 (node-pledge-1.1.3.tar.gz) =
> fEaXvLg6hYEJ69K+mgQFizf8DiJY2/DtyFJB/pEanVU=
> -SHA256 (node-v22.13.0-headers.tar.gz) =
> 5KC6RsGU65OQwvIXf0pqtPQ/TEAp9rCyOb9c23AcMH0=
> -SHA256 (node-v22.13.0.tar.xz) = 5Q22cwcWuirpU8+Z0QyAKVvTO7ctPIKdnpn2r1bWJsc=
> +SHA256 (node-v22.13.1-headers.tar.gz) =
> +c3prOWFw5efG07iR5FPNfrm57fqvGpAlh+JrTnniWQ=
> +SHA256 (node-v22.13.1.tar.xz) = z84oIRk5D34MIiBBCSRCjpDa3LLfF0TAxKDnuq44fMI=
> SIZE (node-pledge-1.1.3.tar.gz) = 3167
> -SIZE (node-v22.13.0-headers.tar.gz) = 8779821
> -SIZE (node-v22.13.0.tar.xz) = 47681488
> +SIZE (node-v22.13.1-headers.tar.gz) = 8792566
> +SIZE (node-v22.13.1.tar.xz) = 48041964
