1
0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-05-28 03:51:53 +02:00

gnu: node-lts: Update to 14.18.1 [security fixes].

* gnu/packages/node.scm (node-lts): Update to 14.18.1.
[native-inputs]: Replace c-ares with c-ares-for-node.
[inputs]: Replace c-ares with c-ares-for-node.

Includes fixes for CVE-2021-22918, CVE-2021-22930, CVE-2021-22931,
CVE-2021-22939, and CVE-2021-22940.
This commit is contained in:
Jelle Licht
2021-10-28 14:11:45 +02:00
parent cae7c3f389
commit f3cd70ff8c
+7 -4
View File
@@ -647,14 +647,14 @@ source files.")
(define-public node-lts (define-public node-lts
(package (package
(inherit node) (inherit node)
(version "14.16.0") (version "14.18.1")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (string-append "https://nodejs.org/dist/v" version (uri (string-append "https://nodejs.org/dist/v" version
"/node-v" version ".tar.xz")) "/node-v" version ".tar.xz"))
(sha256 (sha256
(base32 (base32
"19nz2mhmn6ikahxqyna1dn25pb5v3z9vsz9zb2flb6zp2yk4hxjf")) "1vc9rypkgr5i5y946jnyr9jjpydxvm74p1s17rg2zayzvlddg89z"))
(modules '((guix build utils))) (modules '((guix build utils)))
(snippet (snippet
`(begin `(begin
@@ -783,6 +783,9 @@ source files.")
'("test/parallel/test-dns.js" '("test/parallel/test-dns.js"
"test/parallel/test-dns-lookupService-promises.js")) "test/parallel/test-dns-lookupService-promises.js"))
;; These tests require networking.
(delete-file "test/parallel/test-https-agent-unref-socket.js")
;; FIXME: This test fails randomly: ;; FIXME: This test fails randomly:
;; https://github.com/nodejs/node/issues/31213 ;; https://github.com/nodejs/node/issues/31213
(delete-file "test/parallel/test-net-listen-after-destroying-stdin.js") (delete-file "test/parallel/test-net-listen-after-destroying-stdin.js")
@@ -821,7 +824,7 @@ source files.")
"deps/llhttp/include/llhttp.h")))))))) "deps/llhttp/include/llhttp.h"))))))))
(native-inputs (native-inputs
`(;; Runtime dependencies for binaries used as a bootstrap. `(;; Runtime dependencies for binaries used as a bootstrap.
("c-ares" ,c-ares) ("c-ares" ,c-ares-for-node)
("brotli" ,brotli) ("brotli" ,brotli)
("icu4c" ,icu4c-67) ("icu4c" ,icu4c-67)
("libuv" ,libuv-for-node) ("libuv" ,libuv-for-node)
@@ -837,7 +840,7 @@ source files.")
(inputs (inputs
`(("bash" ,bash) `(("bash" ,bash)
("coreutils" ,coreutils) ("coreutils" ,coreutils)
("c-ares" ,c-ares) ("c-ares" ,c-ares-for-node)
("icu4c" ,icu4c-67) ("icu4c" ,icu4c-67)
("libuv" ,libuv-for-node) ("libuv" ,libuv-for-node)
("llhttp" ,llhttp-bootstrap) ("llhttp" ,llhttp-bootstrap)