Re: Node.js security advisory

On 1/22/25 7:51 PM, "Zeckma" ([email protected] via blfs-dev Mailing 
List) wrote:
> On 1/22/25 15:55, Joe Locash ([email protected] via blfs-dev Mailing
> List) wrote:
>> The advisory says to update to Node.js-22.13.1 but that fails to
>> build on my 12.2 system:
>>
>> ../src/tcp_wrap.cc: In static member function ‘static void
>> node::TCPWrap::Initialize(v8::Local<v8::Object>,
>> v8::Local<v8::Value>, v8::Local<v8::Context>, void*)’:
>> ../src/tcp_wrap.cc:126:35: error: ‘UV_TCP_REUSEPORT’ was not
>> declared in this scope
>>     126 |   NODE_DEFINE_CONSTANT(constants, UV_TCP_REUSEPORT);
>>         |                                   ^~~~~~~~~~~~~~~~
>> ../src/node.h:1033:54: note: in definition of macro
>> ‘NODE_DEFINE_CONSTANT’ 1033 |         v8::Number::New(isolate,
>> static_cast<double>(constant));               \
>>         | ^~~~~~~~
>> make[1]: *** [libnode.target.mk:411:
>> /tmp/build/node-v22.13.1/out/Release/obj.target/libnode/src/tcp_wrap.o]
>> Error 1
>>
>>
>> node-20.18.2 builds fine on 12.2 and is a LTS release so I think it
>> warrants a mention in the advisory.
> Hmm, I think it might be an issue with system libuv being outdated and
> must be updated. Going to do further testing. Current version is
> 1.50.0, and I tested the build using 1.49.2. Going to check if 1.50.0
> works, and if so, will edit the SA to account for that.
>
> And for the record, what version of libuv do you have on your system?

1.48.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-dev
Unsubscribe: See the above information page