Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs24 for openSUSE:Factory checked in at 2026-08-03 17:14:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs24 (Old) and /work/SRC/openSUSE:Factory/.nodejs24.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs24" Mon Aug 3 17:14:57 2026 rev:13 rq:1369028 version:24.18.1 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs24/nodejs24.changes 2026-07-02 22:19:03.284669871 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs24.new.16738/nodejs24.changes 2026-08-03 17:15:22.258704061 +0200 @@ -1,0 +2,16 @@ +Fri Jul 31 15:47:34 UTC 2026 - Adam Majer <[email protected]> + +- Update to 24.18.1: + - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941) + - CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free (bsc#1272942) + - CVE-2026-58043: Permission Model path matching can over-grant filesystem access (bsc#1272943) + - CVE-2026-56850: HTTPS Agent can reuse mTLS identities across PFX certificates (bsc#1272944) + - CVE-2026-58040: HTTPS Agent session reuse can skip hostname verification (bsc#1272945) + - CVE-2026-58041: node:sqlite SQLTagStore iterator replay can re-execute writes (bsc#1272946) + - CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947) + - CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948) + - CVE-2026-56847: Permission Model allows trace events to write outside the allowlist (bsc#1272949) + - CVE-2026-58039: Permission Model allows process reports to write outside the allowlist (bsc#1272950) + - CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951) + +------------------------------------------------------------------- Old: ---- node-v24.18.0.tar.xz New: ---- node-v24.18.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs24.spec ++++++ --- /var/tmp/diff_new_pack.s4HV3Z/_old 2026-08-03 17:15:23.466746087 +0200 +++ /var/tmp/diff_new_pack.s4HV3Z/_new 2026-08-03 17:15:23.470746226 +0200 @@ -25,7 +25,7 @@ %endif Name: nodejs24 -Version: 24.18.0 +Version: 24.18.1 Release: 0 # Double DWZ memory limits @@ -322,7 +322,7 @@ Provides: bundled(LIEF) = 0.17.0 Provides: bundled(ada) = 3.4.4 Provides: bundled(libuv) = 1.52.1 -Provides: bundled(llhttp) = 9.4.2 +Provides: bundled(llhttp) = 9.4.3 Provides: bundled(merve) = 1.2.2 Provides: bundled(ngtcp2) = 1.15.1 Provides: bundled(node-acorn) = 8.16.0 @@ -330,7 +330,7 @@ Provides: bundled(node-amaro) = 1.1.9 Provides: bundled(node-corepack) = 0.35.0 Provides: bundled(node-minimatch) = 10.2.5 -Provides: bundled(node-undici) = 7.28.0 +Provides: bundled(node-undici) = 7.29.0 Provides: bundled(simdjson) = 4.6.4 Provides: bundled(uvwasi) = 0.0.23 Provides: bundled(v8) = 13.6.233.17 ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.s4HV3Z/_old 2026-08-03 17:15:23.538748592 +0200 +++ /var/tmp/diff_new_pack.s4HV3Z/_new 2026-08-03 17:15:23.542748731 +0200 @@ -1,33 +1,33 @@ -6463a23739f6b2300ebec5ccd60275e138e3858fc1afc6e8f9bc4e4f6a4b76fa node-v24.18.0-aix-ppc64.tar.gz -f6e4a38e2d1f27d7e106b22c070ca5c2d653abfc38c6bea42d6c9358499391e2 node-v24.18.0-arm64.msi -e1a97e14c99c803e96c7339403282ea05a499c32f8d83defe9ef5ec66f979ed1 node-v24.18.0-darwin-arm64.tar.gz -4477b9f78efb77744cf5eb57a0e9594dba66466b38b4e93fa9f35cb907a095a6 node-v24.18.0-darwin-arm64.tar.xz -dfd0dbd3e721503434df7b7205e719f61b3a3a31b2bcf9729b8b91fea240f080 node-v24.18.0-darwin-x64.tar.gz -4a3b6bc81542154430825128d9a279e8b364e8d90581544e506ef7579fd1ab6f node-v24.18.0-darwin-x64.tar.xz -6c7d41d83c3481d2301115b8ce4a44b7d4fbfa52859b1aac14f445d460137887 node-v24.18.0-headers.tar.gz -694c4868c187d4a435a86d617346e2c81676c30a9bbf6fc65cce8eb50038dcaf node-v24.18.0-headers.tar.xz -6b4484c2190274175df9aa8f28e2d758a819cb1c1fe6ab481e2f95b463ab8508 node-v24.18.0-linux-arm64.tar.gz -58c9520501f6ae2b52d5b210444e24b9d0c029a58c5011b797bc1fe7105886f6 node-v24.18.0-linux-arm64.tar.xz -fe1338972f79283c6bc21e61dbf4576bbe8c05aded2999d41c8643ad30265142 node-v24.18.0-linux-ppc64le.tar.gz -9717e491a75590c304d17fc191179c9613907b0fddfce22106995d612f23953f node-v24.18.0-linux-ppc64le.tar.xz -371ebc13945fc169493e752f2ddafafab6ecd8ccb451bcff46e09f69c5dd8c7a node-v24.18.0-linux-s390x.tar.gz -25600dc7faa8881460acf909f7c3644c554f65a6f4d8c88827b005861b682559 node-v24.18.0-linux-s390x.tar.xz -783130984963db7ba9cbd01089eaf2c2efb055c7c1693c943174b967b3050cb8 node-v24.18.0-linux-x64.tar.gz -55aa7153f9d88f28d765fcdad5ae6945b5c0f98a36881703817e4c450fa76742 node-v24.18.0-linux-x64.tar.xz -e5a6701100066156d69da48878e4b95986733b0688e0b83afbe1093778e3fffd node-v24.18.0.pkg -c8348067b41d8739ec69fd4da615cd8995ad6a76eb53e84a7fa7291c8a477eb7 node-v24.18.0.tar.gz -e94afde24db08e0c564ee7110a2d5aab51ee0059382c9fd8233c54eec47b28f9 node-v24.18.0.tar.xz -f9e1f5c62902ae2dab965f073d020bfa7275327d0f4192aeebbfd47986a0110a node-v24.18.0-win-arm64.7z -f274669adb93b1fd0fbf8f21fd078609e9dcc84333d4f2718d2dde3f9a161a01 node-v24.18.0-win-arm64.zip -279e945ae581b644def8b36f0df1ee67fe7ef146515be73d227e94d3b008592c node-v24.18.0-win-x64.7z -0ae68406b42d7725661da979b1403ec9926da205c6770827f33aac9d8f26e821 node-v24.18.0-win-x64.zip -e30cd4ca15529583afe0efc978f1ae3ab3a93c2400c222d0752d17900552ebb3 node-v24.18.0-x64.msi -c7225670c3f477778e18c43a55867f7a0d76468221245e5981ab80eb953c8102 win-arm64/node.exe +3c76240c07b9f03574a5cf8ed8ba19e8db89271943817b1a4b94de43c97a9e66 node-v24.18.1-aix-ppc64.tar.gz +c3897213475a089b526c8ffb5a84b0151d03eb2206d3e38aac44b2c053719b81 node-v24.18.1-arm64.msi +eb02f7fab96d3d67de40c5ec8566096fcb4c2026728787683ae5a97eb612b941 node-v24.18.1-darwin-arm64.tar.gz +1d60b703fe5d7e7072489be8187f430f1a095a658c31e5e1e281331a5873fac3 node-v24.18.1-darwin-arm64.tar.xz +6fb20fceacbb157c2f95825b80df4a454a0f6d81cdcd7bb81eeae9147e0e76ec node-v24.18.1-darwin-x64.tar.gz +f892c7895720f40d3750bde24f3554242d36f23602b5167b5b73ec4d13938aef node-v24.18.1-darwin-x64.tar.xz +bee7344a7fc6e3252c4822ca916a50cd6ddda9bb39374d6140a8046d9238fded node-v24.18.1-headers.tar.gz +38d44792ec2bee82aca52dbe166979a146f5e75e09ee35e0c0b017b8e2db7c48 node-v24.18.1-headers.tar.xz +df224555a083b918e46260cc969838501b9f9a87140c1195e5b9597b56d5dae2 node-v24.18.1-linux-arm64.tar.gz +7201e3a09dc825bac57867c81913e2b8f0ef87d04cb9082af4cda82f6ff3d88c node-v24.18.1-linux-arm64.tar.xz +4a8c6209ba3a5aea84c40201d896624ed706b9799a6dc54cbd965433a369a3d0 node-v24.18.1-linux-ppc64le.tar.gz +c47812c13862be7f6e71194c434c4d78a99096e72efb9c31a2627437e056d669 node-v24.18.1-linux-ppc64le.tar.xz +62ad850efefa9ab42a3e901d8e0de86d71bf9c8a0c389dabed248f1ec9590c5a node-v24.18.1-linux-s390x.tar.gz +acf57bd726f35afc2ba8475194e5a8bd532c00e1a3b2436295b2fbdde199d0e9 node-v24.18.1-linux-s390x.tar.xz +9f5eb6ac21845a66c493c91a253b1da32fd684e89e9b7202d4936982336be4ca node-v24.18.1-linux-x64.tar.gz +d6c664df3f3f61458e8c277585571328522d705166723a7c7823a9253a4d15a0 node-v24.18.1-linux-x64.tar.xz +c2e424f198dab39b5c68e8b06e0cdba9761dca9b5b432941fce6399d6460dabb node-v24.18.1.pkg +b62cd76de0a0a28dd9ff88580c92344bdeb008f21c1d7479c5d8659cd96ef4e2 node-v24.18.1.tar.gz +86d40d594bbdfcf69009a62fdf43cb19ae72b6cb5822d2bdd8349c5a1b2fa628 node-v24.18.1.tar.xz +8aed98bca9260716236be292807dcb2638827750ba2fbcfc684601a9a6b8ab48 node-v24.18.1-win-arm64.7z +ffbc7d3e1baf6804f7431ff94f19b9a885a650568c93ea4ccb1bb0038f6af825 node-v24.18.1-win-arm64.zip +365ecf84eeefb87a5a4c94f1e54919696cf5581285db4e589e84d46c0e167406 node-v24.18.1-win-x64.7z +ec56b84a7551893ab2324ebdfdc4ab974a63b4781162600b68a1293cc3e53765 node-v24.18.1-win-x64.zip +af4a0651a26f04ac240f00fec872f305547ca2aa56301c41dfd63a29eb2ab836 node-v24.18.1-x64.msi +845fc4ce00780241667f92e8f7a3a679321a655dddb3b610f2d85693b17ddf28 win-arm64/node.exe 7da03c5111815b69bbe63ffd2e51b28cd69eec9f545b7ccb8756efffdbb88dc2 win-arm64/node.lib -17a0831870967a909184d2039a3810d3ab947aca0868f566ad997014688d6246 win-arm64/node_pdb.7z -4e1972cf6769b49bb719179c6b976d33c828bf54c6d8f743801c1172d3f3ed0e win-arm64/node_pdb.zip -9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de win-x64/node.exe +86a5fa89be9c19be42864edfbc2721931fa3c5b318c0f5cd7c1b5c0f49c1f259 win-arm64/node_pdb.7z +0e085f6058961484fb7e93a35ccd0b1ff02efed7bfe1387203097614dc9864a2 win-arm64/node_pdb.zip +ac51903c4c111815d52280b1fdcc8da067cbb37e2fe1a765097b85c3292c8582 win-x64/node.exe 589684168a73547ca47cd22d76a4e465ef561abe89fb1b2b23fe35bbe857d505 win-x64/node.lib -bf706cc837fe75d3a7c857ea45b8e11bf080c076d321e448edf466ac35eb4308 win-x64/node_pdb.7z -fe2510a54825d0a60c468fdd6bbff096cb3a5d0bca1c75188ca5d90c064fd68b win-x64/node_pdb.zip +50155c3c9afe1c3ce9a57a8763ed421acc72845c2d30f79d93afe73cb65473ef win-x64/node_pdb.7z +a9970c87747af4ef15524240dc28ebcf64080c7a68e39d2a406b743e438b6a20 win-x64/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.s4HV3Z/_old and /var/tmp/diff_new_pack.s4HV3Z/_new differ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.s4HV3Z/_old 2026-08-03 17:15:23.602750818 +0200 +++ /var/tmp/diff_new_pack.s4HV3Z/_new 2026-08-03 17:15:23.610751097 +0200 @@ -1,6 +1,6 @@ -mtime: 1782829724 -commit: 70f3f6e5cfa3aca310f3d3b27c0d02f9d937149abada3d9a1029c7a784b55416 +mtime: 1785512891 +commit: 13cc50d4f1d4748452df7efe3582b90d05292968f5395b25cbbd47c94a879d74 url: https://src.opensuse.org/nodejs/nodejs24 -revision: 70f3f6e5cfa3aca310f3d3b27c0d02f9d937149abada3d9a1029c7a784b55416 +revision: 13cc50d4f1d4748452df7efe3582b90d05292968f5395b25cbbd47c94a879d74 projectscmsync: https://src.opensuse.org/nodejs/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-31 17:48:11.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/update_npm_tarball.sh new/update_npm_tarball.sh --- old/update_npm_tarball.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/update_npm_tarball.sh 2026-07-31 17:48:11.000000000 +0200 @@ -0,0 +1,13 @@ +#!/bin/bash + +# +# Fetch npm module tarball that is required to run unit tests +# which are not provided by upstream tarball +# +set -e + +tar Jxf node-v*.tar.xz +cd node-v*/tools/doc +npm ci +cd ../.. +exec tar Jcf ../node_modules.tar.xz tools/doc/node_modules ++++++ node-v24.18.0.tar.xz -> node-v24.18.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs24/node-v24.18.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs24.new.16738/node-v24.18.1.tar.xz differ: char 26, line 1
