From 05a22892921bd4618efe6135ce0d6fe2be545607 Mon Sep 17 00:00:00 2001 From: Anthony Fok Date: Fri, 18 Sep 2020 12:11:52 -0600 Subject: [PATCH] snap: Bump bundled Node.js from v12.18.3 to v12.18.4 due to CVE-2020-8201, CVE-2020-8251 and CVE-2020-8252, see https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ --- snap/plugins/x_nodejs.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/snap/plugins/x_nodejs.py b/snap/plugins/x_nodejs.py index 72d9db9e1..d6e29f750 100644 --- a/snap/plugins/x_nodejs.py +++ b/snap/plugins/x_nodejs.py @@ -63,7 +63,7 @@ from snapcraft.internal import errors logger = logging.getLogger(__name__) _NODEJS_BASE = "node-v{version}-linux-{arch}" -_NODEJS_VERSION = "12.18.3" +_NODEJS_VERSION = "12.18.4" _NODEJS_TMPL = "https://nodejs.org/dist/v{version}/{base}.tar.gz" _NODEJS_ARCHES = {"i386": "x86", "amd64": "x64", "armhf": "armv7l", "arm64": "arm64", "ppc64el": "ppc64le", "s390x": "s390x"} _YARN_URL = "https://yarnpkg.com/latest.tar.gz"