CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/06/30 12:46:28
Modified files:
lang/node : Makefile distinfo
lang/node/patches: patch-common_gypi patch-configure_py
patch-include_node_common_gypi
patch-lib_internal_modules_cjs_loader_js
patch-lib_net_js
lang/node/pkg : PLIST
Log message:
lang/node: Update to 24.18.0
Fixes (by way of 24.17.0):
CVE-2026-48618 tls: normalize hostname for server identity checks
CVE-2026-48933 crypto: guard WebCrypto cipher output length
CVE-2026-48615 lib,test: redact proxy credentials in tunnel errors
CVE-2026-48619 http2: cap originSet size to prevent unbounded memory growth
CVE-2026-48928 tls: fix case-sensitive SNI context matching
CVE-2026-48930 dns,net: reject hostnames with embedded NUL bytes
CVE-2026-48934 tls: bind reusable sessions to authenticated host
CVE-2026-48937 deps: fix integration issues with the latest nghttp2
CVE-2026-48617 permission: handle process.chdir on writereport
CVE-2026-48931 http: fix response queue poisoning in http.Agent
CVE-2026-48935 permission: disable FileHandle utimes with permission model
