Hello community, here is the log from the commit of package nodejs14 for openSUSE:Factory checked in at 2020-11-25 19:28:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs14 (Old) and /work/SRC/openSUSE:Factory/.nodejs14.new.5913 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs14" Wed Nov 25 19:28:15 2020 rev:14 rq:850272 version:14.15.1 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs14/nodejs14.changes 2020-11-12 22:37:45.786039786 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs14.new.5913/nodejs14.changes 2020-11-25 19:28:22.558416556 +0100 @@ -2 +2 @@ -Sat Oct 31 15:26:41 UTC 2020 - Adam Majer <[email protected]> +Mon Nov 23 16:06:15 UTC 2020 - Adam Majer <[email protected]> @@ -4 +4,12 @@ -- Use python3 in node-gyp shebang lines +- Update Requires: so -devel requires npm +- Rely on rpmbuild to define necessary python dependencies + +------------------------------------------------------------------- +Thu Nov 19 11:42:09 UTC 2020 - Adam Majer <[email protected]> + +- New upstream LTS version 14.15.1: + * deps: Denial of Service through DNS request (High). + A Node.js application that allows an attacker to trigger a DNS + request for a host of their choice could trigger a Denial of Service + by getting the application to resolve a DNS record with + a larger number of responses (bsc#1178882, CVE-2020-8277) Old: ---- node-v14.15.0.tar.xz New: ---- node-v14.15.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs14.spec ++++++ --- /var/tmp/diff_new_pack.kEXi0b/_old 2020-11-25 19:28:23.362417568 +0100 +++ /var/tmp/diff_new_pack.kEXi0b/_new 2020-11-25 19:28:23.366417574 +0100 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs14 -Version: 14.15.0 +Version: 14.15.1 Release: 0 %define node_version_number 14 @@ -210,7 +210,7 @@ BuildRequires: zlib-devel # Python dependencies -%if %node_version_number > 6 +%if %node_version_number >= 12 BuildRequires: netcfg BuildRequires: python3 %else @@ -318,20 +318,21 @@ provided by npm. %package devel -Summary: Files needed for development of NodeJS platforms +Summary: Development headers for NodeJS 14.x Group: Development/Languages/NodeJS Provides: nodejs-devel = %{version} Requires: %{name} = %{version} +Requires: npm14 = %{version} %description devel -This package provides development headers for Node.js. +This package provides development headers for Node.js needed for creation +of binary modules. %package -n npm14 Summary: Package manager for Node.js Group: Development/Languages/NodeJS -Requires: %{name} = %{version} Requires: nodejs-common -Recommends: %{name}-devel = %{version} +Requires: nodejs14 = %{version} Provides: nodejs-npm = %{version} Obsoletes: nodejs-npm < 4.0.0 Provides: npm = %{version} @@ -342,18 +343,6 @@ Requires: user(nobody) %endif %endif - -# Python dependencies -%if %node_version_number >= 8 -Recommends: python3 -%else -%if 0%{?suse_version} >= 1500 -Recommends: python2 -%else -Recommends: python -%endif -%endif - Provides: bundled(node-JSONStream) = 1.3.5 Provides: bundled(node-abbrev) = 1.1.1 Provides: bundled(node-agent-base) = 4.2.1 @@ -807,7 +796,12 @@ find \( -name \*.js.orig -or -name \*.md.orig \) -delete %build -find -name \*.py -perm -1 -type f -exec sed -i -e '1 s,^#!\s\?/usr/bin/env python\d*$,#!/usr/bin/python3,' -e '1 s,^#!\s\?/usr/bin/python$,#!/usr/bin/python3,' {} + +# normalize shebang +%if %{node_version_number} >= 12 +find -type f -exec sed -i -e '1 s,^#!\s\?/usr/bin/env python\d*$,#!/usr/bin/python3,' -e '1 s,^#!\s\?/usr/bin/python$,#!/usr/bin/python3,' {} + +%else +find -type f -exec sed -i '1 s,^#!\s\?/usr/bin/env python$,#!/usr/bin/python,' {} + +%endif find deps/npm -type f -exec sed -i '1 s,^#!\s\?/usr/bin/env node$,#!/usr/bin/node%{node_version_number},' {} + find deps/npm -type f -exec sed -i '1 s,^#!\s\?/usr/bin/env \(bash\|sh\)\?$,#!/bin/bash,' {} + ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.kEXi0b/_old 2020-11-25 19:28:23.418417639 +0100 +++ /var/tmp/diff_new_pack.kEXi0b/_new 2020-11-25 19:28:23.418417639 +0100 @@ -1,32 +1,32 @@ -7e82b8faf651c80204cd7272e7cd627b6094de04624a6967d555b02150b6bb26 node-v14.15.0-aix-ppc64.tar.gz -1389f50d2f9f4993736d0408300513434d7630c2853634fb13f2b69cc9e69cb9 node-v14.15.0-darwin-x64.tar.gz -cc99d86ae1861d51e8bb4dc0b0895a1e11d3ea48a89426be1f630dccbb3607ce node-v14.15.0-darwin-x64.tar.xz -fec3d9d9c0d3094ec2737707b21315d5d3dbeea0d4bb79e6cb7f8d06f796f09b node-v14.15.0-headers.tar.gz -2133f3404c794fa62a15fbb7123bed5320dbf94e9a197c8bb11bdd04974088e5 node-v14.15.0-headers.tar.xz -bfb59eb99ab60a673f389e8b172ab288e12c8540e0c76a0ae40d189ba5a36cec node-v14.15.0-linux-arm64.tar.gz -18594c582ccc8c1a1a787d9b21ecb6f315ef879e82be254c598243f58ea7ccb4 node-v14.15.0-linux-arm64.tar.xz -00b97b3f97d74bdbcbc77f68d692dbbb4fe30a5b16c5a197417aa73df6b5092e node-v14.15.0-linux-armv7l.tar.gz -9be4afaa963b5742d111245f7cefff72d3dea4226041efbe4fca16bf729f1215 node-v14.15.0-linux-armv7l.tar.xz -3f02f4939d15ccddf179ddbfc93dd043fa1c749227803eb079e4322f26a9a685 node-v14.15.0-linux-ppc64le.tar.gz -523f269f1d9f6286bddc37426c2ce5eea86c1fc36957c05676e26a4bf283f69b node-v14.15.0-linux-ppc64le.tar.xz -d0ee8c3f4aecf2fe147aa395a90cfecbbcd86d26aef50794a6a501d0956f3e5c node-v14.15.0-linux-s390x.tar.gz -5d3a4cc9c2c32b59e1e1cccc9ad1baa971eae5367ca35cf41d02f2498a2c570b node-v14.15.0-linux-s390x.tar.xz -085c3b3c262fa58cbaad4f2f62eb6cea943fbbf3492ba457b5efa8f27969e04a node-v14.15.0-linux-x64.tar.gz -93e5b94cfaa3edec80832725f8c09cde2cd0c327da89ad9ad811cf9a1b5d0f1b node-v14.15.0-linux-x64.tar.xz -e2eb6497d090926a6c4cce972aefe9a91beb53c495d6e38d91de850ae0c22b61 node-v14.15.0.pkg -5f9529e0a42985d5a81620635ab2541e3553daede42903d1b3176f808d46411c node-v14.15.0.tar.gz -3736d8622e7b16913fa20ca3d696e3caa7fdaec30ccc1054d080d98c5c01fb3b node-v14.15.0.tar.xz -b4f913737be05f9d74618dc5b2293501a4c882d5f148f497e229d5e7d6a828f6 node-v14.15.0-win-x64.7z -08bbcc453bda374f71a9068ebd76902cfbf3a2b78705f3f6552cbefcc8d76682 node-v14.15.0-win-x64.zip -3e1811f4f021ffc21fceb48f67bbaad21205e4ed6d1adfc48fe91c9152a988be node-v14.15.0-win-x86.7z -1b394e6b7a07e14612fe439f3ce4a75ead547f5f8050e05a842a474f92c1d91a node-v14.15.0-win-x86.zip -cafbd7ed129fb4a56a1751b674ba083d7681b72ae044c4976b3009cb796557af node-v14.15.0-x64.msi -6c423722aac73f865821e0fd2812326a93ac55ffc219ac429e1076ecb11d1236 node-v14.15.0-x86.msi -0924ebb1a652516bd632bcdcd40bd73d880bf9bf2b540a12bad5b5387d66b92d win-x64/node.exe -f8ae0e928d2ca7d6e9ee882dcedb01883f0b2785c751d5805cfa913fb54d1e48 win-x64/node.lib -d47026cf0beb25c7d95b1a8c83f1d1b8cc42ecd42f384ceeb97a5a567de220f9 win-x64/node_pdb.7z -a88d109e947021b4147ff0add02ca9ef8c5a37b46db24aada909df351c60fba2 win-x64/node_pdb.zip -1a66466a2109f9c1d8ccb0bae5c81bee98909e94623a5b014b4090f616e64233 win-x86/node.exe -5b884e43fb414769be925f71d73829ab8ebe60df200dd16b62195ab6c0225851 win-x86/node.lib -8106fa9054db1f83ba961126c0caa3215ea282f8ba93b4c8cadd785b7f45c4ee win-x86/node_pdb.7z -3988a84485d88531a8ec00caeed6148761c3c3672dc628328ff0065fbae6eaef win-x86/node_pdb.zip +696acf72b098d65f191db70f6a24ded7b914c4fe340a0a542b14dc57e69fd65b node-v14.15.1-aix-ppc64.tar.gz +9154d9c3f598d3efe6d163d160a7872ddefffc439be521094ccd528b63480611 node-v14.15.1-darwin-x64.tar.gz +3dcbe9fdb571a59e385cc8ac24aaff8e291c2ad1573693384814e3cefbebd51a node-v14.15.1-darwin-x64.tar.xz +d09b4e244e3cfb8868db82b736b735fb2db2dac89904a0b376a4a786fa18b489 node-v14.15.1-headers.tar.gz +17e68bf249ebba6368e7089b834ac5f353af79dc1d6f45146924b6199ee80c15 node-v14.15.1-headers.tar.xz +5ac1aafdb1e6a3c9ae5045b5fb33ae100688cb0dd3259de5b7db25bd7d7edc55 node-v14.15.1-linux-arm64.tar.gz +32fa27df17194397c2ee931992e8a2fe41806fe790bd4083dece2b92679e4946 node-v14.15.1-linux-arm64.tar.xz +707deb606b0eeb4f5b96a9d6c23b80303186afbd7eaf2aacb79e8b06c7fa77cf node-v14.15.1-linux-armv7l.tar.gz +887588884bfa386b38aeba0c00ec6292df8b1457328ea9969dd8e794fa13adff node-v14.15.1-linux-armv7l.tar.xz +232f8ac768eea95791145f9f0bb924d2468a2b06cc6e529ac65eac87ab4bc712 node-v14.15.1-linux-ppc64le.tar.gz +deb9293263786e773a150e3b60f764850a33cc18d59f35441efbdbec74edde5e node-v14.15.1-linux-ppc64le.tar.xz +b2d5116bbe083b3d0b3bcbcdeb6b73b2adb770de2124d34153b80bdb3da71db2 node-v14.15.1-linux-s390x.tar.gz +e081fceffb5af867d4de6b0f033d02cb1519c513503147be507d0ad1e9c8eca1 node-v14.15.1-linux-s390x.tar.xz +fb23a14c54d7d9ba2ce233262c740f2c04b08e451d1e770ae98b17d01de82b0b node-v14.15.1-linux-x64.tar.gz +608732c7b8c2ac0683fee459847ad3993a428f0398c73555b9270345f4a64752 node-v14.15.1-linux-x64.tar.xz +a877c8135ac5b7b73e1d18a8f093ac68e8fd86523d62c8fb53eca73f60836bf3 node-v14.15.1.pkg +a1120472bf55aea745287693a6651e16973e1008c9d6107df350126adf9716fe node-v14.15.1.tar.gz +0161436846f7578938ad87af197e0cf112452232723227f88d5a0efc34dec1bc node-v14.15.1.tar.xz +7025776c82bb5a39b6823f6201a34ca5951f8d5baa16ff7850c4c0daff319f32 node-v14.15.1-win-x64.7z +cb1ec98baf6f19e432250573c9aba9faa6b4104517b6a49b05aa5f507f6763fd node-v14.15.1-win-x64.zip +e86d3e6665bd82296e0c9b951ebd3e8397f185788b5df85bc25861629ca3877d node-v14.15.1-win-x86.7z +5712d42b3d47afedb8f87f535c10c1e7e8a7954e99f28878b6a7e8abef01595e node-v14.15.1-win-x86.zip +ce9c87aab446b461027fb4b0f132f17f275e85be975b4030179523601fa39433 node-v14.15.1-x64.msi +cedd78bf688a1722b4cc73e7dbe8fbb373cdedb5cf0056bb85e70a398b226dc4 node-v14.15.1-x86.msi +d692d677da3b47013060a17ec8de4b3b5d695d0517b449d516775b5a9c22c1ed win-x64/node.exe +9123893374281d68d51e5c1fc61f01711e4655f1c7f4da68e571933cac9fbdf8 win-x64/node.lib +e4b544fbcb651132fb90f6ab7037fa6cae6480793cba79cf91cbbe85cf0948ba win-x64/node_pdb.7z +7a548c043afd47b3c867b6773c51a5d793fb76b9128b25aedd30c365ed1d5178 win-x64/node_pdb.zip +307a70361b8076eb427e19e1cfee62884c23c4b4850d96c1fc020f89a57a0df9 win-x86/node.exe +4943e3aa428626e5a6539b22c9839b98dd0c93048e630313d4fdca18bfee9312 win-x86/node.lib +7d3497c030199a76ac5a33cc80325b5824465aa0b79ef03903d38d3b576a3c6a win-x86/node_pdb.7z +80f025a99704519b6e98d03e64b186e25a6fed4a00e27a06890f72b4f3ac2702 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.kEXi0b/_old and /var/tmp/diff_new_pack.kEXi0b/_new differ ++++++ node-v14.15.0.tar.xz -> node-v14.15.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs14/node-v14.15.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs14.new.5913/node-v14.15.1.tar.xz differ: char 27, line 1 _______________________________________________ openSUSE Commits mailing list -- [email protected] To unsubscribe, email [email protected] List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/[email protected]
