Files
buildroot/package/nodejs/nodejs.hash
Bernd Kuhls 224abedb06 package/nodejs: security bump version to 22.22.0
https://github.com/nodejs/node/blob/v22.22.0/doc/changelogs/CHANGELOG_V22.md

List of security fixes:

22.22.0:
(CVE-2025-59465) add TLSSocket default error handler
(CVE-2025-55132) disable futimes when permission model is enabled lib,
permission:
(CVE-2025-55130) require full read and write to symlink APIs src:
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks src,
lib:
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill
toggle tls:
(CVE-2026-21637) route callback exceptions through error handlers

22.17.1:
(CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path
Traversal Protection in path.normalize()

Version 22.18.0 includes
a2d2d36bb1
which fixes build errors with python 3.14
"ImportError: cannot import name 'FancyURLopener' from 'urllib.request'"
introduced by buildroot commit a0a6abc8b1.

Updated license hash due to upstream commits:
ec60473ab1
0b5613f9fe
0edf17198f

Switched _SITE to https.

Fixes:
https://autobuild.buildroot.net/results/da8/da82dc03cf0d42463fff1b5d9bf7a3c18cbf44dd/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-01 21:36:10 +01:00

9 lines
686 B
Plaintext

# From https://nodejs.org/dist/v22.22.0/SHASUMS256.txt.asc
sha256 1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f node-v22.22.0-linux-arm64.tar.xz
sha256 a8b4f15f6e1f371422f1f7abcca4c46bd7abc1c732c274bc5cb108b841c1f0ff node-v22.22.0-linux-armv7l.tar.xz
sha256 d83b9957431cc18e1fc143a4b99f89cde7b8a18f53ef392231b4336afd058865 node-v22.22.0-linux-ppc64le.tar.xz
sha256 9aa8e9d2298ab68c600bd6fb86a6c13bce11a4eca1ba9b39d79fa021755d7c37 node-v22.22.0-linux-x64.tar.xz
sha256 4c138012bb5352f49822a8f3e6d1db71e00639d0c36d5b6756f91e4c6f30b683 node-v22.22.0.tar.xz
# Locally calculated
sha256 e991d81497a85bb24fc6bffae0a3637a6accd6c6bc5ce1f2c5698bd555cf9d49 LICENSE