-
nodejs (0.10.25~dfsg2-2ubuntu1.2) trusty-security; urgency=medium
* SECURITY UPDATE: CRLF injection vulnerability
- debian/patches/CVE-2016-5325.patch: Previously, the reason argument
passed to ServerResponse#writeHead was not being properly validated. One
could pass CRLFs which could lead to http response splitting. This
commit changes the behavior to throw an error in the event any invalid
characters are included in the reason.
lib/http.js
- CVE-2016-5325
-- Mike Salvatore <email address hidden> Tue, 07 Aug 2018 10:42:55 -0400
-
nodejs (0.10.25~dfsg2-2ubuntu1) trusty; urgency=medium
* 2014_powerpc_support.patch: Pull in powerpc support from alow.
* 2015_ppc64el_configure.patch: Make configure understand ppc64.
-- Adam Conrad <email address hidden> Wed, 26 Mar 2014 23:59:23 -0600
-
nodejs (0.10.25~dfsg2-2) unstable; urgency=medium
* Update 2005 patch, allow test-abort-fatal-error to time out.
-- Jérémy Lal <email address hidden> Mon, 27 Jan 2014 14:35:21 +0100
-
nodejs (0.10.25~dfsg2-1) unstable; urgency=medium
* Exclude doc/sh_javascript.min.js, closes: #736779.
* Add 1005 patch to include a non-minified version of
doc/sh_javascript.min.js, and update path in debian/copyright.
* Update 2005 patch, allow test-abort-fatal-error to fail,
closes: #736576.
-- Jérémy Lal <email address hidden> Mon, 27 Jan 2014 09:58:56 +0100
-
nodejs (0.10.25~dfsg1-1) unstable; urgency=medium
* Upstream update
-- Jérémy Lal <email address hidden> Fri, 24 Jan 2014 15:45:29 +0100
-
nodejs (0.10.24~dfsg1-1) unstable; urgency=medium
* Upstream update
-- Jérémy Lal <email address hidden> Mon, 23 Dec 2013 00:45:40 +0100
-
nodejs (0.10.23~dfsg1-3) unstable; urgency=medium
* Update 2005 patch, allow test-http-client-timeout-event to fail.
-- Jérémy Lal <email address hidden> Sat, 14 Dec 2013 10:00:16 +0100
-
nodejs (0.10.23~dfsg1-2) unstable; urgency=medium
* Add 2013 patch, remove --no-parallel option incompatible with
gyp < r1773. Was breaking kfreebsd builds as side-effect.
* Empty DEB_CONFIGURE_NORMAL_ARGS without quotes because
configure assumes it is a path argument.
-- Jérémy Lal <email address hidden> Sat, 14 Dec 2013 01:52:05 +0100
-
nodejs (0.10.23~dfsg1-1) unstable; urgency=medium
* Upstream update.
* Refresh patches, remove 1005 patch, applied upstream.
-- Jérémy Lal <email address hidden> Thu, 12 Dec 2013 23:04:07 +0100
-
nodejs (0.10.22~dfsg1-2) unstable; urgency=low
* Update 2005 patch, allow test-cluster-dgram-2 to time out.
* Apply 1005 patch, upstream fix for BSD builds.
-- Jérémy Lal <email address hidden> Sat, 30 Nov 2013 23:54:20 +0100
-
nodejs (0.10.22~dfsg1-1) unstable; urgency=low
* Upstream update.
* Refresh patches.
-- Jérémy Lal <email address hidden> Wed, 13 Nov 2013 23:17:51 +0100
-
nodejs (0.10.21~dfsg1-1) unstable; urgency=low
* Upstream update.
* Update 2005 patch, allow test-http-pipeline-flood to fail.
-- Jérémy Lal <email address hidden> Sat, 19 Oct 2013 01:26:18 +0200
-
nodejs (0.10.15~dfsg1-4) unstable; urgency=low
* Update 2005 patch, adding a handful of tests that can fail on
slow platforms.
* Add 1004 patch to fix test failures when writing NaN to buffer
on mipsel.
-- Jérémy Lal <email address hidden> Wed, 14 Aug 2013 00:16:46 +0200
