Hello community, here is the log from the commit of package nodejs10 for openSUSE:Factory checked in at 2019-01-11 14:05:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs10 (Old) and /work/SRC/openSUSE:Factory/.nodejs10.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs10" Fri Jan 11 14:05:44 2019 rev:8 rq:664392 version:10.15.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs10/nodejs10.changes 2018-12-04 20:56:51.644684162 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs10.new.28833/nodejs10.changes 2019-01-11 14:06:41.647727298 +0100 @@ -1,0 +2,40 @@ +Mon Jan 7 15:01:53 UTC 2019 - adam.ma...@suse.de + +- New upstream LTS version 10.15.0 (still bsc#1112438, FATE#326776): + * cli: add --max-http-header-size flag + * http: add maxHeaderSize property + +- Changes in version 10.14.2 + * deps: upgrade to c-ares v1.15.0 + * child_process: handle undefined/null for fork() args + * http2: make Http2Settings constructors delegate + * os: fix memory leak in userInfo() + +- fix_ci_tests.patch: refreshed + +------------------------------------------------------------------- +Thu Dec 6 16:17:15 UTC 2018 - adam.ma...@suse.de + +- New upstream LTS version 10.14.1 (still bsc#1112438, FATE#326776): + * deps: Upgrade to OpenSSL 1.1.0j, fixing + + Timing vulnerability in DSA signature generation + (bsc#1113652, CVE-2018-0734) + + Timing vulnerability in ECDSA signature generation + (bsc#1113651, CVE-2018-0735) + * http: + + Headers received by HTTP servers must not exceed 8192 bytes + in total to prevent possible Denial of Service attacks. + (bsc#1117626, CVE-2018-12121) + + A timeout of 40 seconds now applies to servers receiving + HTTP headers. This value can be adjusted with + server.headersTimeout. Where headers are not completely + received within this period, the socket is destroyed on + the next received chunk. In conjunction + with server.setTimeout(), this aids in protecting against + excessive resource retention and possible Denial of Service. + (bsc#1117627, CVE-2018-12122) + * url: Fix a bug that would allow a hostname being spoofed when + parsing URLs with url.parse() with the 'javascript:' protocol. + (bsc#1117629, CVE-2018-12123) + +------------------------------------------------------------------- Old: ---- node-v10.13.0.tar.xz New: ---- node-v10.15.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs10.spec ++++++ --- /var/tmp/diff_new_pack.zQez4W/_old 2019-01-11 14:06:42.703726235 +0100 +++ /var/tmp/diff_new_pack.zQez4W/_new 2019-01-11 14:06:42.703726235 +0100 @@ -1,7 +1,7 @@ # # spec file for package nodejs10 # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,7 +26,7 @@ ########################################################### Name: nodejs10 -Version: 10.13.0 +Version: 10.15.0 Release: 0 %define node_version_number 10 ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.zQez4W/_old 2019-01-11 14:06:42.739726199 +0100 +++ /var/tmp/diff_new_pack.zQez4W/_new 2019-01-11 14:06:42.739726199 +0100 @@ -1,36 +1,36 @@ -9e8d0b86ef67ea2bf660a50f560ba8eb5b91665af7489c5ba8475708624dbd30 node-v10.13.0-aix-ppc64.tar.gz -815a5d18516934a3963ace9f0574f7d41f0c0ce9186a19be3d89e039e57598c5 node-v10.13.0-darwin-x64.tar.gz -d84966a26e44b98c5408dbab7c67c02af327eb9a9012fee9827f69cd8b722766 node-v10.13.0-darwin-x64.tar.xz -33b1eb17ab4e03b43aea4abdccdc31872e3e345d190eeb64714f1cf5280d5732 node-v10.13.0-headers.tar.gz -6678b6280e3829132d4a5b21714c35162eb5666cf4c8a3be7214e8b78b165d71 node-v10.13.0-headers.tar.xz -de4e92103d228f5a5d0e67f8a681b1bce63036776bb7a46e014fae072d188036 node-v10.13.0-linux-arm64.tar.gz -1537ebe64dc34a2a9b8ab6254213079789e9d59ed0ed26987afb1da37b6a8f87 node-v10.13.0-linux-arm64.tar.xz -6b99f473dbfeebf4d0360a70bc9d7566dd6a3a229714d7fcf1b72cb7639bf1e7 node-v10.13.0-linux-armv6l.tar.gz -c170b4a8ad0e2f6518bfc01c7419fb47180118e39596c015049f0979215a0437 node-v10.13.0-linux-armv6l.tar.xz -5c888b9e7f0438e0eb811988348917d1e7ca9ea17152d36d72752d3d73b7e9a7 node-v10.13.0-linux-armv7l.tar.gz -43891e40147ac15fca955174c2556a7be38c4cec006daf824fe05bb3609be684 node-v10.13.0-linux-armv7l.tar.xz -41fb140bc0e345df13647dc7f1622fcfac2c68bb91260fc353b5f693bfbcb0b1 node-v10.13.0-linux-ppc64le.tar.gz -e4df6165d68e5a59cfed6ba4a60f4d316f5ecdc2cd5f0ed0a1cac46d4679e74b node-v10.13.0-linux-ppc64le.tar.xz -3939987f3ae563fa9c43c1a25256c92fb3c3ba5c80ee5578bd5a1e94d3428b0f node-v10.13.0-linux-s390x.tar.gz -5b7c867ab5ec11f4e038ec381bcba9f346da8b8ec2bb099541e6a22a7602c763 node-v10.13.0-linux-s390x.tar.xz -b4b5d8f73148dcf277df413bb16827be476f4fa117cbbec2aaabc8cc0a8588e1 node-v10.13.0-linux-x64.tar.gz -0dc6dba645550b66f8f00541a428c29da7c3cde32fb7eda2eb626a9db3bbf08d node-v10.13.0-linux-x64.tar.xz -4246d8ceafe3c5f8b3a5012b2fccc030e788a263d71eb83620397f25e001fc59 node-v10.13.0.pkg -3412f5d348f3693e25be4014badb8b607ed57db460eb1158ab673003541487e7 node-v10.13.0-sunos-x64.tar.gz -bb0f3f4035c11ea8e26df231399476f9aa417c91af8b5c920e8639030bd260f3 node-v10.13.0-sunos-x64.tar.xz -aa06825fff375ece7c0d881ae0de5d402a857e8cabff9b4a50f2f0b7b44906be node-v10.13.0.tar.gz -8d80c96a0c28fb508c90de474b1967acd800896f184b8a18235a7e4613fae641 node-v10.13.0.tar.xz -8de84e68f79c7f399d31e03a25d08ecef9f72facc971e613f7cd70a8e4896fed node-v10.13.0-win-x64.7z -eb09c9e9677f1919ec1ca78623c09b2a718ec5388b72b7662d5c41e5f628a52c node-v10.13.0-win-x64.zip -25736103dfc0aea43c960324b686008ab357d600518f7ff7f38429cf453f12f9 node-v10.13.0-win-x86.7z -487bcae322a07d46aaad8d0cf0a33ee8c71cee8b9ea77fd78a1724a122443ae7 node-v10.13.0-win-x86.zip -a4810c4198d358bdc789a22e52fd86cb49cb9f7585f62215c6b9d0797b55113a node-v10.13.0-x64.msi -9f9ff8b4b4dce9c52ee5cd777d444d008932a196254db5be48b954106b1ba096 node-v10.13.0-x86.msi -0bc0b675da429e09c9832123fd45e1a1721f3f68b3a201b7bd66466a9e9311b4 win-x64/node.exe -c5126b09691549bbb4bc0a8bce1bf104dd872ade502421787f3d24b1d03d63b0 win-x64/node.lib -f6f29280602f0d4442ea81f20857e6583fd7a474db98ab8a7305c34435694eb3 win-x64/node_pdb.7z -58aa732ab9bffd272da366dc4eb2ed7eb559c791162ebf3f408881f739e316ef win-x64/node_pdb.zip -cc4784d620f026366b936e711023c54a45d37c04c84fc9de7b72c7e611ba843e win-x86/node.exe -bfbb48de49910400e871567f5b27767bfb75e241e351fd2e5e754d28885d111f win-x86/node.lib -17a01c8e945712798e14344a1ab42ef580c278be75e31ec5f8746ee131247168 win-x86/node_pdb.7z -b0500f2397cd72c12b3b62d560748a153a50a62aab93616672ec224b43985718 win-x86/node_pdb.zip +5a0eac2db2dc6114a9095190a0e9e835e210d5cdf5c0042607bb50331c32313f node-v10.15.0-aix-ppc64.tar.gz +353402461c898c569658d0a963790476f4d9828cc6c9286d81617ee8afcba4e8 node-v10.15.0-darwin-x64.tar.gz +90c991ad51528705b47312fb63f52cd770c66757b02b782168e4bc6c5165b8be node-v10.15.0-darwin-x64.tar.xz +36a5b15184bec31a83d7abd4569b6808401e55cd53ed27c09e4c7b9d90048e6b node-v10.15.0-headers.tar.gz +339167b1d4d5b2fdb3263cd6512d43adead92e2402dfe69ad4c1a48f66172a33 node-v10.15.0-headers.tar.xz +69a86c71df32320dc8dfccd1aca124c73dc2b274c7ce50104dad733a06dc26f3 node-v10.15.0-linux-arm64.tar.gz +77aa4a02c5471b6eb7ba935cbc6829889a27115353cff7226a208c08b654e972 node-v10.15.0-linux-arm64.tar.xz +701ea80df70f86cb1980b1ccc8f38fe9d55e4155acc13a73717c9ea4aeed466c node-v10.15.0-linux-armv6l.tar.gz +6e3b97d35ab51fe7b236f78c2fff8e0d0c77587a5a297b6469c7b8f6e68f8314 node-v10.15.0-linux-armv6l.tar.xz +81a248baa989667d14a0868adf87e5048a53518e9aed169131194e88b39c20aa node-v10.15.0-linux-armv7l.tar.gz +a1f3fc1fade97ff44914a033a176118b8323575984c5897c464ab1bf03ce6be0 node-v10.15.0-linux-armv7l.tar.xz +fc4ce0770bfabbe6be61b52bf6ed48c4ffd10f4fa8a698e4bf22594525a3116a node-v10.15.0-linux-ppc64le.tar.gz +ebeae2719bba8fca47bb81e543bf5bd6391b2813db289b1e1af5ae6e90eecdfd node-v10.15.0-linux-ppc64le.tar.xz +80ae06a0f2fc936d663043b5b709ec050016ab846aa29faf9718c6fe3f20cc14 node-v10.15.0-linux-s390x.tar.gz +934263cd756983f734964ec3b5923ac4e257221a029dee95e2bb851c459338e3 node-v10.15.0-linux-s390x.tar.xz +f0b4ff9a74cbc0106bbf3ee7715f970101ac5b1bbe814404d7a0673d1da9f674 node-v10.15.0-linux-x64.tar.gz +4ee8503c1133797777880ebf75dcf6ae3f9b894c66fd2d5da507e407064c13b5 node-v10.15.0-linux-x64.tar.xz +b80f5b3136ed993f31c28cd37b54fd8528ff2620bc2423ea440aa41f61a57412 node-v10.15.0.pkg +77254ecb8576cf54af53df72842cbdb756b2b34b23309194649be7891ff9bd1f node-v10.15.0-sunos-x64.tar.gz +10c5605ea949118224e570a5723c4c97473a1cd5b052290efd2be71485649bfa node-v10.15.0-sunos-x64.tar.xz +dbe467e3dabb6854fcb0cd96e04082268cb1e313ce97a4b7100b2ed152b0a0ab node-v10.15.0.tar.gz +797ab34c74b83b21b7d6ea261b5ca235d34c61a7da5aebb32459a963097ede3e node-v10.15.0.tar.xz +ac2115dcd5ee53c0c8b10521368aec540370e75cd4f7ff1544a44791c7d3362d node-v10.15.0-win-x64.7z +c1dbc9372ad789cd21727cb5f63b4a44ed3eae216763959cff8e68e68c6fcfe1 node-v10.15.0-win-x64.zip +ba089a8120c63b322c888efd3d959c9b9ce2b3b954a39cd996531c4e4982be43 node-v10.15.0-win-x86.7z +3b7076ea74551f05747bb2db1803dc0406ce543f3744c6896359c619c7e5296e node-v10.15.0-win-x86.zip +1cf90ea486607a1e4e3191e4880d4e6a256168d800fe33a6e46680149b88e3ed node-v10.15.0-x64.msi +9b4b01c5e8181caa2b48ded5b481773b504b54b6145754a09aae8de948e46053 node-v10.15.0-x86.msi +7884185dcbadbb14a81a56caea569da87f21563dd60b8770763bb63de236b0a1 win-x64/node.exe +48dcf15c1eb32836e3124a5d4bfc8489e2e84c22b49576aa08a405b224e70fb6 win-x64/node.lib +be6bebbe07cf6f5ac840d889283406f0ec834b3076a7742bf79942910f78138d win-x64/node_pdb.7z +eeff351d2f79d30b3da9afc1026a28b589763e20b1a46294077549016389943a win-x64/node_pdb.zip +71bfd4449aa4c4505a6bbc23b1a9870bad4edaee5eae99a4d22fd0cad704fdae win-x86/node.exe +ede58d70f22373d7abfd71582ad3c93ec8f6a8b59efd7aa8e207d7cb30481010 win-x86/node.lib +f3c26eeb7921b2db8ad1eda410856a79d1de9e5cf69bdd30b3e06554c4ce42a1 win-x86/node_pdb.7z +bca112bc708f34cadc936fe71d50665175adf4436d382923888ab9c2c0ea8fc9 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.zQez4W/_old and /var/tmp/diff_new_pack.zQez4W/_new differ ++++++ fix_ci_tests.patch ++++++ --- /var/tmp/diff_new_pack.zQez4W/_old 2019-01-11 14:06:42.771726167 +0100 +++ /var/tmp/diff_new_pack.zQez4W/_new 2019-01-11 14:06:42.771726167 +0100 @@ -2,10 +2,10 @@ Date: Dec 20 09:18:49 UTC 2017 Summary: Fix CI unit tests framework for OBS building -Index: node-v10.12.0/test/parallel/test-module-loading-globalpaths.js +Index: node-v10.15.0/test/parallel/test-module-loading-globalpaths.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-module-loading-globalpaths.js -+++ node-v10.12.0/test/parallel/test-module-loading-globalpaths.js +--- node-v10.15.0.orig/test/parallel/test-module-loading-globalpaths.js ++++ node-v10.15.0/test/parallel/test-module-loading-globalpaths.js @@ -11,6 +11,9 @@ const { addLibraryPath } = require('../c addLibraryPath(process.env); @@ -16,20 +16,20 @@ if (process.argv[2] === 'child') { console.log(require(pkgName).string); } else { -Index: node-v10.12.0/Makefile +Index: node-v10.15.0/Makefile =================================================================== ---- node-v10.12.0.orig/Makefile -+++ node-v10.12.0/Makefile -@@ -454,7 +454,7 @@ test-ci-js: | clear-stalled +--- node-v10.15.0.orig/Makefile ++++ node-v10.15.0/Makefile +@@ -455,7 +455,7 @@ test-ci-js: | clear-stalled .PHONY: test-ci # Related CI jobs: most CI tests, excluding node-test-commit-arm-fanned test-ci: LOGLEVEL := info --test-ci: | clear-stalled build-addons build-addons-napi doc-only -+test-ci: | clear-stalled build-addons build-addons-napi +-test-ci: | clear-stalled build-addons build-addons-napi doc-only bench-addons-build ++test-ci: | clear-stalled build-addons build-addons-napi bench-addons-build out/Release/cctest --gtest_output=tap:cctest.tap $(PYTHON) tools/test.py $(PARALLEL_ARGS) -p tap --logfile test.tap \ --mode=$(BUILDTYPE_LOWER) --flaky-tests=$(FLAKY_TESTS) \ -@@ -605,11 +605,11 @@ apidocs_json = $(addprefix out/,$(apidoc +@@ -609,11 +609,11 @@ apidocs_json = $(addprefix out/,$(apidoc apiassets = $(subst api_assets,api/assets,$(addprefix out/,$(wildcard doc/api_assets/*))) tools/doc/node_modules: tools/doc/package.json @@ -46,10 +46,10 @@ .PHONY: doc-only doc-only: tools/doc/node_modules \ -Index: node-v10.12.0/test/parallel/test-tls-env-bad-extra-ca.js +Index: node-v10.15.0/test/parallel/test-tls-env-bad-extra-ca.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-tls-env-bad-extra-ca.js -+++ node-v10.12.0/test/parallel/test-tls-env-bad-extra-ca.js +--- node-v10.15.0.orig/test/parallel/test-tls-env-bad-extra-ca.js ++++ node-v10.15.0/test/parallel/test-tls-env-bad-extra-ca.js @@ -36,7 +36,7 @@ fork(__filename, opts) // TODO(addaleax): Make `SafeGetenv` work like `process.env` // encoding-wise @@ -59,10 +59,10 @@ assert(re.test(stderr), stderr); } })) -Index: node-v10.12.0/test/parallel/test-tls-passphrase.js +Index: node-v10.15.0/test/parallel/test-tls-passphrase.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-tls-passphrase.js -+++ node-v10.12.0/test/parallel/test-tls-passphrase.js +--- node-v10.15.0.orig/test/parallel/test-tls-passphrase.js ++++ node-v10.15.0/test/parallel/test-tls-passphrase.js @@ -221,7 +221,7 @@ server.listen(0, common.mustCall(functio }, common.mustCall()); })).unref(); @@ -72,10 +72,10 @@ // Missing passphrase assert.throws(function() { -Index: node-v10.12.0/test/parallel/test-crypto-scrypt.js +Index: node-v10.15.0/test/parallel/test-crypto-scrypt.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-crypto-scrypt.js -+++ node-v10.12.0/test/parallel/test-crypto-scrypt.js +--- node-v10.15.0.orig/test/parallel/test-crypto-scrypt.js ++++ node-v10.15.0/test/parallel/test-crypto-scrypt.js @@ -167,7 +167,7 @@ for (const options of bad) { for (const options of toobig) { @@ -85,10 +85,10 @@ type: Error, }; common.expectsError(() => crypto.scrypt('pass', 'salt', 1, options, () => {}), -Index: node-v10.12.0/test/parallel/test-repl-envvars.js +Index: node-v10.15.0/test/parallel/test-repl-envvars.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-repl-envvars.js -+++ node-v10.12.0/test/parallel/test-repl-envvars.js +--- node-v10.15.0.orig/test/parallel/test-repl-envvars.js ++++ node-v10.15.0/test/parallel/test-repl-envvars.js @@ -2,12 +2,14 @@ // Flags: --expose-internals @@ -105,10 +105,10 @@ const tests = [ { env: {}, -Index: node-v10.12.0/test/parallel/test-fs-utimes.js +Index: node-v10.15.0/test/parallel/test-fs-utimes.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-fs-utimes.js -+++ node-v10.12.0/test/parallel/test-fs-utimes.js +--- node-v10.15.0.orig/test/parallel/test-fs-utimes.js ++++ node-v10.15.0/test/parallel/test-fs-utimes.js @@ -186,8 +186,8 @@ process.on('exit', () => { const path = `${tmpdir.path}/test-utimes-precision`; fs.writeFileSync(path, ''); @@ -120,11 +120,11 @@ // because 2 ** 31 doesn't look right // eslint-disable-next-line space-infix-ops const Y2K38_mtime = 2**31; -Index: node-v10.12.0/test/common/index.js +Index: node-v10.15.0/test/common/index.js =================================================================== ---- node-v10.12.0.orig/test/common/index.js -+++ node-v10.12.0/test/common/index.js -@@ -190,6 +190,8 @@ const pwdCommand = isWindows ? +--- node-v10.15.0.orig/test/common/index.js ++++ node-v10.15.0/test/common/index.js +@@ -187,6 +187,8 @@ const pwdCommand = isWindows ? function platformTimeout(ms) { @@ -133,11 +133,11 @@ if (process.features.debug) ms = 2 * ms; -Index: node-v10.12.0/test/common/index.mjs +Index: node-v10.15.0/test/common/index.mjs =================================================================== ---- node-v10.12.0.orig/test/common/index.mjs -+++ node-v10.12.0/test/common/index.mjs -@@ -44,6 +44,7 @@ const { +--- node-v10.15.0.orig/test/common/index.mjs ++++ node-v10.15.0/test/common/index.mjs +@@ -42,6 +42,7 @@ const { expectsError, skipIfInspectorDisabled, skipIf32Bits, @@ -145,7 +145,7 @@ getArrayBufferViews, getBufferSources, disableCrashOnUnhandledRejection, -@@ -93,6 +94,7 @@ export { +@@ -89,6 +90,7 @@ export { expectsError, skipIfInspectorDisabled, skipIf32Bits, @@ -153,10 +153,10 @@ getArrayBufferViews, getBufferSources, disableCrashOnUnhandledRejection, -Index: node-v10.12.0/test/sequential/test-http2-session-timeout.js +Index: node-v10.15.0/test/sequential/test-http2-session-timeout.js =================================================================== ---- node-v10.12.0.orig/test/sequential/test-http2-session-timeout.js -+++ node-v10.12.0/test/sequential/test-http2-session-timeout.js +--- node-v10.15.0.orig/test/sequential/test-http2-session-timeout.js ++++ node-v10.15.0/test/sequential/test-http2-session-timeout.js @@ -6,7 +6,7 @@ if (!common.hasCrypto) const assert = require('assert'); const http2 = require('http2'); @@ -166,10 +166,10 @@ let requests = 0; const mustNotCall = () => { -Index: node-v10.12.0/test/parallel/test-crypto-keygen.js +Index: node-v10.15.0/test/parallel/test-crypto-keygen.js =================================================================== ---- node-v10.12.0.orig/test/parallel/test-crypto-keygen.js -+++ node-v10.12.0/test/parallel/test-crypto-keygen.js +--- node-v10.15.0.orig/test/parallel/test-crypto-keygen.js ++++ node-v10.15.0/test/parallel/test-crypto-keygen.js @@ -171,7 +171,7 @@ function convertDERToPEM(label, der) { // Since the private key is encrypted, signing shouldn't work anymore. assert.throws(() => { ++++++ flaky_test_rerun.patch ++++++ --- /var/tmp/diff_new_pack.zQez4W/_old 2019-01-11 14:06:42.783726155 +0100 +++ /var/tmp/diff_new_pack.zQez4W/_new 2019-01-11 14:06:42.783726155 +0100 @@ -9,7 +9,6 @@ - output = Execute(full_command, + reruns = 0 + while(reruns < 5): -+ print("FLAKY rerun: ", command) + reruns += 1 + output = Execute(full_command, self.context, @@ -18,6 +17,7 @@ disable_core_files = self.disable_core_files) + if output.exit_code == 0: + break; ++ print("FLAKY rerun: ", command) return TestOutput(self, full_command, output, ++++++ node-v10.13.0.tar.xz -> node-v10.15.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs10/node-v10.13.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs10.new.28833/node-v10.15.0.tar.xz differ: char 27, line 1