Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package nodejs-electron for openSUSE:Factory
checked in at 2023-04-16 16:07:04
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/nodejs-electron (Old)
and /work/SRC/openSUSE:Factory/.nodejs-electron.new.19717 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs-electron"
Sun Apr 16 16:07:04 2023 rev:63 rq:1079611 version:22.3.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/nodejs-electron/nodejs-electron.changes
2023-04-04 21:27:25.867580880 +0200
+++
/work/SRC/openSUSE:Factory/.nodejs-electron.new.19717/nodejs-electron.changes
2023-04-16 16:07:23.512926461 +0200
@@ -1,0 +2,11 @@
+Sat Apr 15 11:33:42 UTC 2023 - Bruno Pitrus <[email protected]>
+- New upstream release 22.3.6
+ * Fixed an issue with Content-Security-Policy not being correctly enforced
when sandbox: false and contextIsolation: false. (CVE-2023-23623)
+ * Fixed a memory leak in v8.serialize() when running Node.js within
Electron.
+ * Viz: Add CHECKs in HostFrameSinkManager (CVE-2023-1810)
+ * Blink: Move the edit commands to an on stack variable (CVE-2023-1811)
+- Fix download tarball script wrongly setting GPU_LISTS_VERSION to zero
+- Change 647d3d2.patch to fix FTBFS on aarch64 Fedora
+- Fix unresolvable build on Fedora 37
+
+-------------------------------------------------------------------
Old:
----
electron-22.3.5.tar.zst
New:
----
electron-22.3.6.tar.zst
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ nodejs-electron.spec ++++++
--- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.144964689 +0200
+++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.148964712 +0200
@@ -208,7 +208,7 @@
Name: nodejs-electron
-Version: 22.3.5
+Version: 22.3.6
Release: 0
Summary: Build cross platform desktop apps with JavaScript, HTML, and
CSS
License: AFL-2.0 AND Apache-2.0 AND blessing AND BSD-2-Clause AND
BSD-3-Clause AND BSD-Protection AND BSD-Source-Code AND bzip2-1.0.6 AND IJG AND
ISC AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND MIT AND MIT-CMU AND
MIT-open-group AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND
MPL-2.0 AND OpenSSL AND SGI-B-2.0 AND SUSE-Public-Domain AND X11
@@ -457,11 +457,9 @@
%else
BuildRequires: ninja-build >= 1.7.2
%endif
-%if 0%{?sle_version} == 150300
-BuildRequires: nodejs16
-BuildRequires: npm16
+%if 0%{?fedora} >= 37
+BuildRequires: nodejs-npm
%else
-BuildRequires: nodejs >= 16
BuildRequires: npm
%endif
BuildRequires: pkgconfig
++++++ 647d3d2.patch ++++++
--- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.216965104 +0200
+++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.220965127 +0200
@@ -20,12 +20,15 @@
index d3dbdb9..fad747a 100644
--- src/third_party/swiftshader/src/Reactor/LLVMJIT.cpp
+++ src/third_party/swiftshader/src/Reactor/LLVMJIT.cpp
-@@ -922,7 +922,7 @@
+@@ -922,7 +922,11 @@
if(optimizationLevel > 0)
{
-- fpm.addPass(llvm::SROAPass());
++#if LLVM_VERSION_MAJOR >= 16
+ fpm.addPass(llvm::SROAPass(llvm::SROAOptions::PreserveCFG));
++#else
+ fpm.addPass(llvm::SROAPass());
++#endif
fpm.addPass(llvm::InstCombinePass());
}
++++++ create_tarball.sh ++++++
--- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.316965680 +0200
+++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.320965704 +0200
@@ -83,6 +83,8 @@
echo ">>>>>> Generate GPU_LISTS_VERSION"
+# Make git all commits in chromium history visible to the script
+git fetch --filter=tree:0 --unshallow origin $(git rev-parse HEAD)
python3 build/util/lastchange.py -m GPU_LISTS_VERSION \
--revision-id-only --header gpu/config/gpu_lists_version.h
if [ $? -ne 0 ]; then
