Re: Node.js security advisory

On 1/22/25 15:55, Joe Locash ([email protected] via blfs-dev Mailing
List) wrote:
> The advisory says to update to Node.js-22.13.1 but that fails to
> build on my 12.2 system:
>
> ../src/tcp_wrap.cc: In static member function ‘static void
> node::TCPWrap::Initialize(v8::Local<v8::Object>,
> v8::Local<v8::Value>, v8::Local<v8::Context>, void*)’:
> ../src/tcp_wrap.cc:126:35: error: ‘UV_TCP_REUSEPORT’ was not
> declared in this scope
>    126 |   NODE_DEFINE_CONSTANT(constants, UV_TCP_REUSEPORT);
>        |                                   ^~~~~~~~~~~~~~~~
> ../src/node.h:1033:54: note: in definition of macro
> ‘NODE_DEFINE_CONSTANT’ 1033 |         v8::Number::New(isolate,
> static_cast<double>(constant));               \
>        | ^~~~~~~~
> make[1]: *** [libnode.target.mk:411:
> /tmp/build/node-v22.13.1/out/Release/obj.target/libnode/src/tcp_wrap.o]
> Error 1
>
>
> node-20.18.2 builds fine on 12.2 and is a LTS release so I think it
> warrants a mention in the advisory.

Hmm, I think it might be an issue with system libuv being outdated and
must be updated. Going to do further testing. Current version is
1.50.0, and I tested the build using 1.49.2. Going to check if 1.50.0
works, and if so, will edit the SA to account for that.

And for the record, what version of libuv do you have on your system?

- Zeckma

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-dev
Unsubscribe: See the above information page