Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs14 for openSUSE:Factory checked in at 2021-08-03 22:48:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs14 (Old) and /work/SRC/openSUSE:Factory/.nodejs14.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs14" Tue Aug 3 22:48:38 2021 rev:5 rq:909826 version:14.17.4 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs14/nodejs14.changes 2021-07-14 23:59:09.297440210 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs14.new.1899/nodejs14.changes 2021-08-03 22:48:49.608490648 +0200 @@ -1,0 +2,12 @@ +Mon Aug 2 12:15:43 UTC 2021 - Adam Majer <adam.ma...@suse.de> + +- update to 14.17.4: + http2: fixes use after free on close http2 on stream canceling + (bsc#1188917, CVE-2021-22930) + +- old_icu.patch: merged, removed +- versioned.patch: updated +- node_modules.tar.xz: refreshed +- PR39011.patch: use localhost instead of remote for unit test + +------------------------------------------------------------------- Old: ---- node-v14.17.2.tar.xz old_icu.patch New: ---- PR39011.patch node-v14.17.4.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs14.spec ++++++ --- /var/tmp/diff_new_pack.PvKyvs/_old 2021-08-03 22:48:51.628488211 +0200 +++ /var/tmp/diff_new_pack.PvKyvs/_new 2021-08-03 22:48:51.628488211 +0200 @@ -32,7 +32,7 @@ %endif Name: nodejs14 -Version: 14.17.2 +Version: 14.17.4 Release: 0 # Double DWZ memory limits @@ -127,6 +127,7 @@ ## Patches not distribution specific Patch3: fix_ci_tests.patch +Patch4: PR39011.patch Patch5: sle12_python3_compat.patch Patch7: manual_configure.patch Patch13: openssl_binary_detection.patch @@ -144,7 +145,6 @@ # instead of /usr Patch104: npm_search_paths.patch Patch106: skip_no_console.patch -Patch107: old_icu.patch Patch120: flaky_test_rerun.patch @@ -323,7 +323,6 @@ Provides: bundled(node-acorn-static-class-features) = 0.2.0 Provides: bundled(node-acorn-walk) = 8.0.0 Provides: bundled(node-cjs-module-lexer) = 1.2.1 -Provides: bundled(node-node-inspect) = 2.0.0 %description Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js @@ -353,7 +352,7 @@ Provides: nodejs-npm = %{version} Obsoletes: nodejs-npm < 4.0.0 Provides: npm = %{version} -Provides: npm(npm) = 6.14.13 +Provides: npm(npm) = 6.14.14 %if 0%{?suse_version} >= 1500 %if %{node_version_number} >= 10 Requires: group(nobody) @@ -591,7 +590,6 @@ Provides: bundled(node-npm-audit-report) = 1.3.3 Provides: bundled(node-npm-bundled) = 1.1.1 Provides: bundled(node-npm-cache-filename) = 1.0.2 -Provides: bundled(node-npm-init) = 0.0.0 Provides: bundled(node-npm-install-checks) = 3.0.2 Provides: bundled(node-npm-lifecycle) = 3.1.5 Provides: bundled(node-npm-logical-tree) = 1.2.1 @@ -710,7 +708,7 @@ Provides: bundled(node-strip-eof) = 1.0.0 Provides: bundled(node-strip-json-comments) = 2.0.1 Provides: bundled(node-supports-color) = 5.4.0 -Provides: bundled(node-tar) = 4.4.13 +Provides: bundled(node-tar) = 4.4.15 Provides: bundled(node-term-size) = 1.2.0 Provides: bundled(node-text-table) = 0.2.0 Provides: bundled(node-through) = 2.3.8 @@ -793,6 +791,7 @@ %endif %patch3 -p1 +%patch4 -p1 %patch5 -p1 %patch7 -p1 %if 0%{with valgrind_tests} @@ -806,7 +805,6 @@ %endif %patch104 -p1 %patch106 -p1 -%patch107 -p1 %if 0%{?suse_version} >= 1550 %endif %patch120 -p1 ++++++ PR39011.patch ++++++ >From da3c17f122f0419c125f70df5c35eb41155628c0 Mon Sep 17 00:00:00 2001 From: Adam Majer <ama...@suse.de> Date: Fri, 11 Jun 2021 20:21:22 +0200 Subject: [PATCH] test: use localhost test instead of connecting to remote Fixes: https://github.com/nodejs/node/issues/39008 --- .../parallel/test-https-agent-unref-socket.js | 24 +++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/test/parallel/test-https-agent-unref-socket.js b/test/parallel/test-https-agent-unref-socket.js index b2863a74d817..49169b523e10 100644 --- a/test/parallel/test-https-agent-unref-socket.js +++ b/test/parallel/test-https-agent-unref-socket.js @@ -6,8 +6,24 @@ if (!common.hasCrypto) const https = require('https'); -const request = https.get('https://example.com'); +if (process.argv[2] === 'localhost') { + const request = https.get('https://localhost:' + process.argv[3]); -request.on('socket', (socket) => { - socket.unref(); -}); + request.on('socket', (socket) => { + socket.unref(); + }); +} else { + const assert = require('assert'); + const net = require('net'); + const server = net.createServer(); + server.listen(0); + server.on('listening', () => { + const port = server.address().port; + const { fork } = require('child_process'); + const child = fork(__filename, ['localhost', port], {}); + child.on('close', (exit_code) => { + server.close(); + assert.strictEqual(exit_code, 0); + }); + }); +} ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.PvKyvs/_old 2021-08-03 22:48:51.684488143 +0200 +++ /var/tmp/diff_new_pack.PvKyvs/_new 2021-08-03 22:48:51.684488143 +0200 @@ -1,32 +1,32 @@ -fb4348515d67085153c58d7b5114ca71690e3938d6c6000a02a7977cf154290a node-v14.17.2-aix-ppc64.tar.gz -e45db91fc2136202868a5eb7c6d08b0a2b75394fafdf8538f650fa945b7dee16 node-v14.17.2-darwin-x64.tar.gz -1b5227ec537a456ce4f3af9631db652e7fd3ab8ac7b9a38be117e0bc2f54d1d5 node-v14.17.2-darwin-x64.tar.xz -ccda5c3ce6dd51e6901cd227c1e6b39b17efa1dfe17fcc5ae1cde15d88cbb05c node-v14.17.2-headers.tar.gz -935e8661db59ab51e4079fbcafd70185ad65ac0924cc48209d976faf69a3b286 node-v14.17.2-headers.tar.xz -05117e74f424fd4ab744c3013c77906c5fe4a19fa22ce624a21986ce152fd258 node-v14.17.2-linux-arm64.tar.gz -3aff08c49b8c0c3443e7a9ea9bfe607867d79e6e5ccf204a5c8f13fb92a48abd node-v14.17.2-linux-arm64.tar.xz -c5b3447eda84a402e604a3ca317747f8f3661b1c9cb68f73a2e2f5a39ed95533 node-v14.17.2-linux-armv7l.tar.gz -0ef956711d6f984b2f7a2e8a3c5d1f274668fd50ba73a4f4580dc72e4d7dff87 node-v14.17.2-linux-armv7l.tar.xz -d94681c9953a68cfbc3903edbe680d9068581c140a5d24c265e557c2e0a57a51 node-v14.17.2-linux-ppc64le.tar.gz -64364f96ff04083bf91ee82a2e27ae6d45a4b8512d38e70da976909db5400d2a node-v14.17.2-linux-ppc64le.tar.xz -9b60ec8bb3675f3648b1474a4d911838ca11630e07ec99230a078937e73be158 node-v14.17.2-linux-s390x.tar.gz -76f955856626a3e596b438855fdfe438937623dc71af9a25a8466409be470877 node-v14.17.2-linux-s390x.tar.xz -48cc87b7adb13f479643166a16514861556d0936761b317a3b65f4fbbb265b4d node-v14.17.2-linux-x64.tar.gz -6cf9db7349407c177b36205feec949729d0ee9db485e19b10b0b1ffca65a3a46 node-v14.17.2-linux-x64.tar.xz -16286b9d41238dc85af791aafc71523cdc8456cd7eccebdf92f8368ce879e363 node-v14.17.2.pkg -03bea54a68c6fa8b520c273a1dc80f2fdbf80ddc9c303200d2eeaf25bd7e62fa node-v14.17.2.tar.gz -4f5fb2b87e2255da3b200ed73ab076002e4b088df0027ec85e25541a6830583e node-v14.17.2.tar.xz -6f59257b20861efb506f9b7f5b8587a310c6df6de4d719324ae8f3dcda68bcbc node-v14.17.2-win-x64.7z -0e27897578752865fa61546d75b20f7cd62957726caab3c03f82c57a4aef5636 node-v14.17.2-win-x64.zip -b5b2f6d2523b0c60399111b4c60ee3066d6e7e51fe22ce045c5181d52dd2dd20 node-v14.17.2-win-x86.7z -308e3e2228cd6b0e991fd9d23dcd0c57f913926355adcb702f9660a1574a79fa node-v14.17.2-win-x86.zip -452a94f6db29ea6ef298cb731765c615624eed2c8bd8746c827d5abbed89a5de node-v14.17.2-x64.msi -92443d36339a76f39102e785ecf663a072d26c9c45a2b4b68ddb82ae54345682 node-v14.17.2-x86.msi -140fd660d63eab02812ec583a4c958c9252f041a92d76047c63ac34d773aab66 win-x64/node.exe -2166a3ae8728f872727ced97eaccdc8e463ae3c00b7dcb94c3b9da80feedb735 win-x64/node.lib -a79264dcce6c4f6aba147aee4bfd9e6b69b4134f07e487d381efecf771f7e275 win-x64/node_pdb.7z -2a57321f0767c3a89a8dfd5355ac2c0ccdec728da97a8f5bd3bd53ea4252eb0e win-x64/node_pdb.zip -2695c86b7000623119abfd7b9aed48c04d5ae4247ea7398ff2c77f61907d531f win-x86/node.exe -bab3fdbacbd6621e27762c559041723dc35d3122ddfd153f81315aaab78646ae win-x86/node.lib -dc5a8c41b0ceaea49dadd0ff53b25837809a90e75222b3f34c5c01325a52bd26 win-x86/node_pdb.7z -f5e6ae2fcc35f94749e8404f909734649e5617ac3e41ce326fb2601cbf72c862 win-x86/node_pdb.zip +58e4ca29b0585ebeb1dbf5a701d9959dda219b5bdf6d8363213f51a779d395da node-v14.17.4-aix-ppc64.tar.gz +5c055a295e030cb789e2925b4c0647f7aaf461ffe5f2a08145c0605fb83ad4e0 node-v14.17.4-darwin-x64.tar.gz +f86bb831a371b3720e4d0037e4e77ffa427afdbd14e96d9fd16202fbbd84ce7d node-v14.17.4-darwin-x64.tar.xz +24fa6a3925027980e32cfa2555d1cc9eca989db6c0890fe1e12e1c9f9ef4baa7 node-v14.17.4-headers.tar.gz +9515893f1f6b844b179120d95e34ee2edbd47741291456ab69913184bdb9368c node-v14.17.4-headers.tar.xz +88b130c8f08a2baafb4e4c953ad46ba69cc60210da7d95c558c7ae3456beb825 node-v14.17.4-linux-arm64.tar.gz +4c42f31e7b52980e6bb930a7c2872e6e29533828c40623ba39e1c847e9ee6c89 node-v14.17.4-linux-arm64.tar.xz +e5452a8786ea018fe9c588ffe05ca4b4b66d6a7cda1f6352bda9bd0d0421e325 node-v14.17.4-linux-armv7l.tar.gz +df65ca9aea52b693b82638077a46218ae555160a20a8a5b0edd15ff0b3438c2b node-v14.17.4-linux-armv7l.tar.xz +67dc73c42d08b5b365da37354568555e404aa902bf17dfe35f5b3ecbf699700b node-v14.17.4-linux-ppc64le.tar.gz +255fffa3b2a78b86aa7dce7b65442bb2092d99be74d2f326f1dd66f7a1931b5d node-v14.17.4-linux-ppc64le.tar.xz +b169c8b3821e3360be90bde075e28bf4632c5d36ce97d8c30b10411abc960ac8 node-v14.17.4-linux-s390x.tar.gz +3e086d99c3e303a05657c04053df9e31e46a7cdf0245b1022ddecd0fc0e14663 node-v14.17.4-linux-s390x.tar.xz +99cc7115a30fe62abf06145d57b314092c9bf27499da85413a12f50140199619 node-v14.17.4-linux-x64.tar.gz +db18c54ebe01974d46198b08729249acbb0dcdc9aea82b53eec913f8c56035c6 node-v14.17.4-linux-x64.tar.xz +aaf06036afcc730971e9048b72ea6c79659a1fcc15d810ed822d33f51c35c848 node-v14.17.4.pkg +70c75f21ac601ae9e0fd86bdfd4e13e4d302f42b4fafcd6d21804b043a571c36 node-v14.17.4.tar.gz +ae7bf4e784f8c8027ffa1e3757f37d2bd5925d0c48988c4d7f07e4515853cf2c node-v14.17.4.tar.xz +0de71309336bc324bc5155867dc9d8d6337d83c1eed4777141ae83e967b3aca1 node-v14.17.4-win-x64.7z +d82a3ca777b4dccc97aa391eb483325cda731e0ae9b3a5669dbf34bb8defde6e node-v14.17.4-win-x64.zip +67caaa209d2d938f763f1a9ab08b3e30c06b2f18bf5c5d90b1198d0ddbd35feb node-v14.17.4-win-x86.7z +6564c13aa47240231eff9c28fdafa479dda3186fbc7e2bbc97bb5b791ccd0419 node-v14.17.4-win-x86.zip +e889da1ee06e576de4f31c3e6e0f12c73cfec495a53db4dd166fd58b0fea9f22 node-v14.17.4-x64.msi +296378f482fed803adfc0dd63870ebdd925adfadd0f2e0e04a3c2ccd2b16999e node-v14.17.4-x86.msi +dcef8bbee862ffbf498327d2ab0b9e1ccfc412d8e2270cbc0e45b0e6a1cdca86 win-x64/node.exe +859ceb82ba9af9df5831bb67f45427bfb774aae22e7c0ee52623a3196ec0e1eb win-x64/node.lib +bd9b1ff379588006a22d27b2cfbfa8e9a6291c4eb44ab4ec4819d971e56c0485 win-x64/node_pdb.7z +65ffd6a70fb9164d1a340683462edf64c52dd05f9363d7add276d79bcc92e93f win-x64/node_pdb.zip +300c4e8ca527361eab0e9128dd15913cf9e4edd0d3b00c3d623ab925d5fa2f91 win-x86/node.exe +1078be47b9315c81aa3bb989c4bba8ee23e0da9e4854a44006decf45d578833e win-x86/node.lib +e3c8ad2df1de6be3478479ae2f45a88402c423850dda7bf7aab1f76432f4efc9 win-x86/node_pdb.7z +c5a49448e192b41e8f93992055f773f5d3915f1ee908d8b1c596020e84aafe62 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.PvKyvs/_old and /var/tmp/diff_new_pack.PvKyvs/_new differ ++++++ node-v14.17.2.tar.xz -> node-v14.17.4.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs14/node-v14.17.2.tar.xz /work/SRC/openSUSE:Factory/.nodejs14.new.1899/node-v14.17.4.tar.xz differ: char 26, line 1 ++++++ node_modules.tar.xz ++++++ ++++ 250580 lines of diff (skipped) ++++++ versioned.patch ++++++ --- /var/tmp/diff_new_pack.PvKyvs/_old 2021-08-03 22:48:52.296487405 +0200 +++ /var/tmp/diff_new_pack.PvKyvs/_new 2021-08-03 22:48:52.300487400 +0200 @@ -8,11 +8,11 @@ This is also important for generation of binary modules for multiple versions of NodeJS -Index: node-v14.17.0/Makefile +Index: node-v14.17.4/Makefile =================================================================== ---- node-v14.17.0.orig/Makefile -+++ node-v14.17.0/Makefile -@@ -46,7 +46,7 @@ BUILDTYPE_LOWER := $(shell echo $(BUILDT +--- node-v14.17.4.orig/Makefile ++++ node-v14.17.4/Makefile +@@ -51,7 +51,7 @@ BUILDTYPE_LOWER := $(shell echo $(BUILDT EXEEXT := $(shell $(PYTHON) -c \ "import sys; print('.exe' if sys.platform == 'win32' else '')") @@ -21,10 +21,10 @@ NODE ?= ./$(NODE_EXE) NODE_G_EXE = node_g$(EXEEXT) NPM ?= ./deps/npm/bin/npm-cli.js -Index: node-v14.17.0/tools/install.py +Index: node-v14.17.4/tools/install.py =================================================================== ---- node-v14.17.0.orig/tools/install.py -+++ node-v14.17.0/tools/install.py +--- node-v14.17.4.orig/tools/install.py ++++ node-v14.17.4/tools/install.py @@ -81,34 +81,34 @@ def uninstall(paths, dst): try_remove(path, dst) @@ -137,10 +137,10 @@ def run(args): global node_prefix, install_path, target_defaults, variables -Index: node-v14.17.0/doc/node.1 +Index: node-v14.17.4/doc/node.1 =================================================================== ---- node-v14.17.0.orig/doc/node.1 -+++ node-v14.17.0/doc/node.1 +--- node-v14.17.4.orig/doc/node.1 ++++ node-v14.17.4/doc/node.1 @@ -30,24 +30,24 @@ .Dt NODE 1 . @@ -170,10 +170,10 @@ .Op Fl -v8-options . .\"====================================================================== -Index: node-v14.17.0/src/node.stp +Index: node-v14.17.4/src/node.stp =================================================================== ---- node-v14.17.0.orig/src/node.stp -+++ node-v14.17.0/src/node.stp +--- node-v14.17.4.orig/src/node.stp ++++ node-v14.17.4/src/node.stp @@ -19,7 +19,7 @@ // OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE // USE OR OTHER DEALINGS IN THE SOFTWARE. @@ -246,12 +246,12 @@ { scavenge = 1 << 0; compact = 1 << 1; -Index: node-v14.17.0/deps/npm/man/man1/npm.1 +Index: node-v14.17.4/deps/npm/man/man1/npm.1 =================================================================== ---- node-v14.17.0.orig/deps/npm/man/man1/npm.1 -+++ node-v14.17.0/deps/npm/man/man1/npm.1 +--- node-v14.17.4.orig/deps/npm/man/man1/npm.1 ++++ node-v14.17.4/deps/npm/man/man1/npm.1 @@ -1,11 +1,11 @@ - .TH "NPM" "1" "April 2021" "" "" + .TH "NPM" "1" "July 2021" "" "" .SH "NAME" -\fBnpm\fR \- javascript package manager +\fBnpm14\fR \- javascript package manager @@ -356,10 +356,10 @@ +npm14 help npmrc .RE -Index: node-v14.17.0/src/node_main.cc +Index: node-v14.17.4/src/node_main.cc =================================================================== ---- node-v14.17.0.orig/src/node_main.cc -+++ node-v14.17.0/src/node_main.cc +--- node-v14.17.4.orig/src/node_main.cc ++++ node-v14.17.4/src/node_main.cc @@ -136,6 +136,7 @@ int main(int argc, char* argv[]) { #endif // Disable stdio buffering, it interacts poorly with printf() @@ -368,10 +368,10 @@ setvbuf(stdout, nullptr, _IONBF, 0); setvbuf(stderr, nullptr, _IONBF, 0); return node::Start(argc, argv); -Index: node-v14.17.0/deps/npm/man/man1/npx.1 +Index: node-v14.17.4/deps/npm/man/man1/npx.1 =================================================================== ---- node-v14.17.0.orig/deps/npm/man/man1/npx.1 -+++ node-v14.17.0/deps/npm/man/man1/npx.1 +--- node-v14.17.4.orig/deps/npm/man/man1/npx.1 ++++ node-v14.17.4/deps/npm/man/man1/npx.1 @@ -1,32 +1,32 @@ .TH "NPX" "1" "July 2020" "npx@10.2.3" "User Commands" .SH "NAME" @@ -456,11 +456,11 @@ .RE -Index: node-v14.17.0/tools/test.py +Index: node-v14.17.4/tools/test.py =================================================================== ---- node-v14.17.0.orig/tools/test.py -+++ node-v14.17.0/tools/test.py -@@ -908,7 +908,7 @@ class Context(object): +--- node-v14.17.4.orig/tools/test.py ++++ node-v14.17.4/tools/test.py +@@ -936,7 +936,7 @@ class Context(object): if self.vm is not None: return self.vm if arch == 'none': @@ -469,10 +469,10 @@ else: name = 'out/%s.%s/node' % (arch, mode) -Index: node-v14.17.0/node.gyp +Index: node-v14.17.4/node.gyp =================================================================== ---- node-v14.17.0.orig/node.gyp -+++ node-v14.17.0/node.gyp +--- node-v14.17.4.orig/node.gyp ++++ node-v14.17.4/node.gyp @@ -23,8 +23,8 @@ 'node_use_openssl%': 'true', 'node_shared_openssl%': 'false',