Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs16 for openSUSE:Factory checked in at 2021-07-04 22:10:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs16 (Old) and /work/SRC/openSUSE:Factory/.nodejs16.new.2625 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs16" Sun Jul 4 22:10:11 2021 rev:5 rq:903753 version:16.4.1 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs16/nodejs16.changes 2021-06-25 15:01:21.036152503 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs16.new.2625/nodejs16.changes 2021-07-04 22:10:13.633468366 +0200 @@ -1,0 +2,13 @@ +Fri Jul 2 15:17:09 UTC 2021 - Adam Majer <adam.ma...@suse.de> + +- Update to 16.4.1: + deps: libuv upgrade - Out of bounds read (Medium) + (bsc#1187973, CVE-2021-22918) + +------------------------------------------------------------------- +Thu Jul 1 13:34:05 UTC 2021 - Adam Majer <adam.ma...@suse.de> + +- node-gyp_7.1.2.tar.xz: for SLE-12, use latest node-gyp that + is compatible with python 3.4 + +------------------------------------------------------------------- Old: ---- node-v16.4.0.tar.xz New: ---- node-gyp_7.1.2.tar.xz node-v16.4.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs16.spec ++++++ --- /var/tmp/diff_new_pack.5wQGGi/_old 2021-07-04 22:10:14.449462056 +0200 +++ /var/tmp/diff_new_pack.5wQGGi/_new 2021-07-04 22:10:14.453462025 +0200 @@ -32,7 +32,7 @@ %endif Name: nodejs16 -Version: 16.4.0 +Version: 16.4.1 Release: 0 # Double DWZ memory limits @@ -80,7 +80,7 @@ %define _libexecdir %{_exec_prefix}/lib %endif -%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 120500 +%if 0%{?suse_version} >= 1500 || 0%{?sle_version} >= 120400 %bcond_with intree_openssl %else %bcond_without intree_openssl @@ -110,39 +110,6 @@ %bcond_without gdb %endif -%if %node_version_number < 16 - -# No binutils_gold on SLE 12 GA (aarch64). -%ifarch aarch64 -%if 0%{?sle_version} >= 120100 || 0%{?is_opensuse} -%bcond_without binutils_gold -%else -%bcond_with binutils_gold -%endif -%endif - -# No binutils_gold on all versions of SLE 12 and Leap 42 (s390x). -%ifarch s390x -%if 0%{?suse_version} > 1320 -%bcond_without binutils_gold -%else -%bcond_with binutils_gold -%endif -%endif - -%ifarch s390 -%bcond_with binutils_gold -%endif - -%ifnarch aarch64 s390x s390 -%bcond_without binutils_gold -%endif - -%else -# don't use binutils_gold for nodejs >= 16 -%bcond_with binutils_gold -%endif - %define git_node 0 Summary: Evented I/O for V8 JavaScript @@ -153,6 +120,11 @@ Source1: https://nodejs.org/dist/v%{version}/SHASUMS256.txt Source2: https://nodejs.org/dist/v%{version}/SHASUMS256.txt.sig Source3: nodejs.keyring + +# Python 3.4 compatible node-gyp +### https://github.com/nodejs/node-gyp.git +### git archive v7.1.2 gyp/ | xz > node-gyp_7.1.2.tar.xz +Source5: node-gyp_7.1.2.tar.xz # Only required to run unit tests in NodeJS 10+ Source10: update_npm_tarball.sh Source11: node_modules.tar.xz @@ -183,10 +155,6 @@ # Use versioned binaries and paths Patch200: versioned.patch -%if 0%{with binutils_gold} -BuildRequires: binutils-gold -%endif - BuildRequires: pkg-config %if 0%{?suse_version} BuildRequires: config(netcfg) @@ -264,29 +232,21 @@ %if ! 0%{with intree_openssl} -%if %node_version_number >= 8 BuildRequires: pkgconfig(openssl) >= %{openssl_req_ver} -%if 0%{?suse_version} > 1330 -BuildRequires: libopenssl1_1-hmac -%endif -%if 0%{?suse_version} >= 1330 +%if 0%{?suse_version} >= 1500 +BuildRequires: libopenssl1_1-hmac BuildRequires: openssl >= %{openssl_req_ver} %else BuildRequires: openssl-1_1 >= %{openssl_req_ver} %endif %else - -%if 0%{?suse_version} >= 1330 -BuildRequires: libopenssl-1_0_0-devel +%if %node_version_number <= 12 && 0%{?suse_version} == 1315 && 0%{?sle_version} < 120400 +Provides: bundled(openssl) = 1.1.1k %else -BuildRequires: openssl-devel >= %{openssl_req_ver} +BuildRequires: bundled_openssl_should_not_be_required %endif - -%endif -%else -Provides: bundled(openssl) = 1.1.1k %endif %if ! 0%{with intree_cares} @@ -347,8 +307,10 @@ Requires: openssl1 %endif -%if %node_version_number < 16 -ExclusiveArch: %{arm} %{ix86} x86_64 aarch64 ppc64 ppc64le s390x +%if %node_version_number >= 12 +%ifarch s390 +ExclusiveArch: not_buildable +%endif %endif Provides: bundled(brotli) = 1.0.9 @@ -681,19 +643,15 @@ %setup -q -n node-%{version} %endif -%if %{node_version_number} == 6 -# Update NPM -rm -r deps/npm -tar Jxf %{SOURCE10} -%endif - %if %{node_version_number} >= 10 tar Jxf %{SOURCE11} %endif -%patch3 -p1 -%if ! 0%{with intree_openssl} +%if %{node_version_number} >= 16 && 0%{?suse_version} > 0 && 0%{?suse_version} < 1500 +tar Jxf %{SOURCE5} --directory=tools/gyp --strip-components=1 %endif + +%patch3 -p1 %patch5 -p1 %patch7 -p1 %if 0%{with valgrind_tests} @@ -740,6 +698,10 @@ rm -rf deps/icu-small %endif +%if ! 0%{with intree_openssl} +rm -rf deps/openssl +%endif + %if ! 0%{with intree_cares} find deps/cares -name *.[ch] -delete %endif @@ -824,9 +786,7 @@ # npm/npx man page install -D -m 644 deps/npm/man/man1/npm.1 %{buildroot}%{_mandir}/man1/npm%{node_version_number}.1 -%if %{node_version_number} >= 8 install -D -m 644 deps/npm/man/man1/npx.1 %{buildroot}%{_mandir}/man1/npx%{node_version_number}.1 -%endif #node-gyp needs common.gypi too install -D -m 644 common.gypi \ @@ -878,13 +838,11 @@ ln -s %{_sysconfdir}/alternatives/node.1%{ext_man} %{buildroot}%{_mandir}/man1/node.1%{ext_man} ln -s %{_sysconfdir}/alternatives/npm-default %{buildroot}%{_bindir}/npm-default ln -s %{_sysconfdir}/alternatives/npm.1%{ext_man} %{buildroot}%{_mandir}/man1/npm.1%{ext_man} -%if %{node_version_number} >= 8 ln -s -f npx-default %{buildroot}%{_sysconfdir}/alternatives/npx-default ln -s -f npx.1%{ext_man} %{buildroot}%{_sysconfdir}/alternatives/npx.1%{ext_man} ln -s %{_sysconfdir}/alternatives/npx-default %{buildroot}%{_bindir}/npx-default ln -s %{_sysconfdir}/alternatives/npx.1%{ext_man} %{buildroot}%{_mandir}/man1/npx.1%{ext_man} %endif -%endif # libalternatives - can always ship mkdir -p %{buildroot}%{_datadir}/libalternatives/{node,npm,npx}; @@ -979,7 +937,6 @@ %ghost %{_sysconfdir}/alternatives/npm.1%{ext_man} %endif -%if %{node_version_number} >= 8 %{_bindir}/npx%{node_version_number} %{_mandir}/man1/npx%{node_version_number}.1%{ext_man} %if ! %{with libalternatives} @@ -988,7 +945,6 @@ %ghost %{_sysconfdir}/alternatives/npx-default %ghost %{_sysconfdir}/alternatives/npx.1%{ext_man} %endif -%endif %files devel %defattr(-, root, root) @@ -1037,21 +993,18 @@ update-alternatives \ --install %{_bindir}/npm-default npm-default %{_bindir}/npm%{node_version_number} %{node_version_number} \ --slave %{_mandir}/man1/npm.1%{ext_man} npm.1%{ext_man} %{_mandir}/man1/npm%{node_version_number}.1%{ext_man} -%if %{node_version_number} >= 8 update-alternatives \ --install %{_bindir}/npx-default npx-default %{_bindir}/npx%{node_version_number} %{node_version_number} \ --slave %{_mandir}/man1/npx.1%{ext_man} npx.1%{ext_man} %{_mandir}/man1/npx%{node_version_number}.1%{ext_man} -%endif %postun -n npm%{node_version_number} if [ ! -f %{_bindir}/npm%{node_version_number} ] ; then update-alternatives --remove npm-default %{_bindir}/npm%{node_version_number} fi -%if %{node_version_number} >= 8 if [ ! -f %{_bindir}/npx%{node_version_number} ] ; then update-alternatives --remove npx-default %{_bindir}/npx%{node_version_number} fi -%endif + %endif %changelog ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.5wQGGi/_old 2021-07-04 22:10:14.493461715 +0200 +++ /var/tmp/diff_new_pack.5wQGGi/_new 2021-07-04 22:10:14.493461715 +0200 @@ -1,34 +1,34 @@ -7695554a71873ea2393248438508c5d73a4fc195f760a9317e33670826ab691f node-v16.4.0-aix-ppc64.tar.gz -771469be99d6af048d9b192cd7b338c68a4604e0fcc7f8804278c91b5ad3f74f node-v16.4.0-darwin-arm64.tar.gz -69847f02e277a5455e8ae06ccaeb6bb51672ff36aeda64c7f8a9c3dba87774e8 node-v16.4.0-darwin-arm64.tar.xz -95c81b54ea3069fcf230664d5d80b10e46f8fff5163644b7076fe48df13fc2fb node-v16.4.0-darwin-x64.tar.gz -2fe18b643d3846c22921b88041fcac6f6f532b7c1a60fc25e984de98c2466575 node-v16.4.0-darwin-x64.tar.xz -5085d9669b5df764faf234ad6d7ed1ce6c468d9f3c7f680c7b008d5be12dc4b2 node-v16.4.0-headers.tar.gz -92d8d154af3fdc31695e29d19a1541d55205c4e4dcfafdb2e826e79a39be29b3 node-v16.4.0-headers.tar.xz -8500c9b61717eeeb6f62ed88723dc4896b1bd0a38d8a0f8f8bfcd99e4879e921 node-v16.4.0-linux-arm64.tar.gz -dd8895d727f38f5d3bcfc9e6cfeeb5e61a55ef788ca23a789f87c4e36f8a599e node-v16.4.0-linux-arm64.tar.xz -0a40f6d679f8eccab2b9c43a385172fa0b0584246eef2c41c986fdf572206fa8 node-v16.4.0-linux-armv7l.tar.gz -f455f936e3ba97fc5150cb0e161a90cc1eeaa4d6c6b39b5c679cee792d21a5e5 node-v16.4.0-linux-armv7l.tar.xz -8b68bb6bb00af0db969e4c3c0f47bba408c71dfb3a33dd9a95336bd1f03769e8 node-v16.4.0-linux-ppc64le.tar.gz -a309bb0da47872988dfe4cab3e170856844ef1f61f62cd3c5202a096a5c5a1f5 node-v16.4.0-linux-ppc64le.tar.xz -9008300e37e088bf8abc8848208ac3fec23b4c26165c3b396c6a533e8c6b08da node-v16.4.0-linux-s390x.tar.gz -8dd5ae54694aaea813b7d3c499b57412f625dbaebdca389a1ed7377125726324 node-v16.4.0-linux-s390x.tar.xz -6fb7bc9aece48f2d94941c586ed5d541ac29c8981bc09585fcabe9e4b87d57fa node-v16.4.0-linux-x64.tar.gz -cb2076ea116f0132c2233ac00da306b3061cda2eacbd0fab5b1263e0c9ff0686 node-v16.4.0-linux-x64.tar.xz -14741dd37ce35dee9675ea0ed7134884db65e218e4841534229a53698c6a6484 node-v16.4.0.pkg -37e526b494a0ae53d2205421b93cc3d6fa2d9f4d8349891814a23e69d59a6d8d node-v16.4.0.tar.gz -f91e212e0b64d5fa745b15da4b8ac504acf72fb9216bfa77d3f66ca0e178c81d node-v16.4.0.tar.xz -19da293c890b41793516a97775e1bcfb94c62dfc0c38df3fdf830bde22c7d63c node-v16.4.0-win-x64.7z -2232f638c4913059e3de358d54629288092cd068553deaa60b9b46d6d760abcb node-v16.4.0-win-x64.zip -48e0a70a87c604371e67757d68008b4d5bb32c01862da9a3b3c9bdcb2a850639 node-v16.4.0-win-x86.7z -24fc12e114165d1671dc6cc8ee4e078b0795a49dc6895204510366db2f1252b0 node-v16.4.0-win-x86.zip -286223b111698ab68ea1c2bf7379e542ec47187baa00e905bdb55898eed3599a node-v16.4.0-x64.msi -56193c89e4091c9485a1e90a39b37b17dc64ffc6983cce978265471c289f5718 node-v16.4.0-x86.msi -afede6dc68ac545d90ee46247438b63661965c7d91aee04dd4efa2cbec7970c0 win-x64/node.exe -fe0a67955d3d9078a1495d936b59c9161ca8f8dbe29e95bfbf90a04b8bf6de23 win-x64/node.lib -7f2c849dfc3c3d0e915ee7ccbccdfd7711ef20288834d26807f743758512bec3 win-x64/node_pdb.7z -9297615005e2177a4576894f9e67902604fad1153d548a7c65e3670633bf18bd win-x64/node_pdb.zip -0b0d8a752c579838961b6ef8e4d2e7b7a9b839e7b73add30b8aa2889d3f92444 win-x86/node.exe -3a4e948add4fcb30eca711e7a76a3c16fe1f61ae7ab4eec85b80992ca96496fa win-x86/node.lib -8e41e601620d9d3ad0a68fc29071c7edbfd84b3f13e74e070ea2f791fb9a0a8f win-x86/node_pdb.7z -b1c72aa329f308c3a0aa5411ab18083aa384c84c33d133712fcb80d6f6b2d5d4 win-x86/node_pdb.zip +d0f079c4bc78ee9e1eb646434bc52730c59e433f75febee70ee5506a5526eead node-v16.4.1-aix-ppc64.tar.gz +c6e2a79873c4afbd9fcd7e9d2889e2a7b84860bea472a07ccbe33387397990f5 node-v16.4.1-darwin-arm64.tar.gz +e8d2c3e90e93f3456e8f33e900c4eb404f8456b584e78550a12218aa89689fff node-v16.4.1-darwin-arm64.tar.xz +c78fecdfb062c51ba0432d1c6bb8f30eb14daf47001a5f68d17b3ae6d4d9eb31 node-v16.4.1-darwin-x64.tar.gz +3840f63f73513bfe60aac2a7180501f2b7e8b04806ed0ff0c100042f01bf5612 node-v16.4.1-darwin-x64.tar.xz +85b46ae7c3f2f6482a9a009cffe36ae4ead98f936d05a4e602eb32de148c4345 node-v16.4.1-headers.tar.gz +95d1cc071266739cbb2421a8419bae13652007701165549f0ae584863d11dd8e node-v16.4.1-headers.tar.xz +5d50cb3ce5b5ecccead1d0cf4e18e038c580e10733ff510f73d04a711092569c node-v16.4.1-linux-arm64.tar.gz +7519f43bc704bbb86af6162bad967eb0a277466b6b8c3e0b17dd367d86a97b27 node-v16.4.1-linux-arm64.tar.xz +b8df70739ffb058d4771722384e818fc5f9f0a5e096a45f1bfe7919b3173d32e node-v16.4.1-linux-armv7l.tar.gz +ab8a575ffd154b1faab4c94be5bcb961f6ed1dcc79afa18489dcdb1eea7e660b node-v16.4.1-linux-armv7l.tar.xz +49a3f2958e1e822d4053adf7c006ccf230ca7dc4f830bea789163fd093184160 node-v16.4.1-linux-ppc64le.tar.gz +72607271437948a6470063bc8bbb622ae1da60899217526b60ab2594fdff6b10 node-v16.4.1-linux-ppc64le.tar.xz +c3162a66943a0871423f94c8697c0bbfa2dc8a8474e63fa67a0cdd7f3618aca7 node-v16.4.1-linux-s390x.tar.gz +d472d95911c46bcae6e83ce2ea4312d544ee5ead6d8a6639ba40e51ad5678269 node-v16.4.1-linux-s390x.tar.xz +21181395c11ee1d13c05c4e07b1f4e36ba501d92030ac60a901291c50915b320 node-v16.4.1-linux-x64.tar.gz +3c73b58051a4435d605f9842e582a252e100d5ff62e0a30e3961cab71e8477b1 node-v16.4.1-linux-x64.tar.xz +d4eec360becc29d06b4ee7ee41ab3bf07bd8f4d979d911e18b5ed4ba9841a17f node-v16.4.1.pkg +562df905fdc9c8b3854fea1c755cc969b3c1437774d28b513457cc4034136458 node-v16.4.1.tar.gz +769014432ed8e16267c70b834999e76c48193cd8523ca4f3ee4eadaae7f32aa8 node-v16.4.1.tar.xz +0bec96b5b22ca6d4eead44003011fcdb44af0d331bb1fc8af0647f95cd9feb65 node-v16.4.1-win-x64.7z +f2f0dfc9ee54aff908575734713c482d76bfbed14dcfaea4931fff7450753f25 node-v16.4.1-win-x64.zip +2eec50ab1e34eb99af2819dd92a272e44944dc5b3fbf74c3ab25355feccc97c4 node-v16.4.1-win-x86.7z +a505508994890e418757ea88a55a9685914f57643ec5fb5737c28c5c8b6a1abe node-v16.4.1-win-x86.zip +a6c50420ab8e65df482e841a41a309582445480f2682e58ba3af30edf558b43b node-v16.4.1-x64.msi +f05522114177fd5acf49b2c81aca438f3c88284c5d69196efc2df8bb43cb8090 node-v16.4.1-x86.msi +3b69159360b235d20cd8a35a63562ffd8e96f1032dbd3c0980a6ff794968cc07 win-x64/node.exe +4b5caea50ee2170fd752225477d77a8818965e3e8cbb9871ecbddf32bd6ed94d win-x64/node.lib +ba7c1a22e2a59a73aaeab4c8d56826b705c2da00a57c94d3a3d6b1b460cb8cff win-x64/node_pdb.7z +36b27e73b3132bc6fae11d75f648fe4c35efef2002dfed03a9784f145445f17e win-x64/node_pdb.zip +8fd7ef41cf3a394ace65922babe7db8108374cf0c4cfba5613be61fb147cf141 win-x86/node.exe +e899517caf4e57f674ff37ca8c9db892d676d86960698b2663bbe16e82fa2542 win-x86/node.lib +aafaf686584d890a7b580cb16a9f898a299f3a1c91ae720224a858a9bc5c2f89 win-x86/node_pdb.7z +359ef4b5be217ed189910ae806a57fa555874a5ae2b2e1200b2754ff90942a1c win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.5wQGGi/_old and /var/tmp/diff_new_pack.5wQGGi/_new differ ++++++ node-v16.4.0.tar.xz -> node-v16.4.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs16/node-v16.4.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs16.new.2625/node-v16.4.1.tar.xz differ: char 25, line 1