Hello community, here is the log from the commit of package nodejs10 for openSUSE:Factory checked in at 2019-09-02 12:42:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs10 (Old) and /work/SRC/openSUSE:Factory/.nodejs10.new.7948 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs10" Mon Sep 2 12:42:52 2019 rev:15 rq:726170 version:10.16.3 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs10/nodejs10.changes 2019-08-07 13:58:02.416855090 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs10.new.7948/nodejs10.changes 2019-09-02 12:42:55.873773415 +0200 @@ -1,0 +2,17 @@ +Fri Aug 16 14:33:44 UTC 2019 - Adam Majer <[email protected]> + +- Update to 10.16.3: + Security update regarding HTTP/2 Denial of Service vulnerabilities + For details see, + https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#12.8.1 + https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md + (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, + bsc#1146091, bsc#1146099, bsc#1146094, bsc#1146095, + CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, + bsc#1146100, bsc#1146090, bsc#1146097, bsc#1146093) + +- Changes in 10.16.2: + * fix OpenSSL upgrade to 1.1.1c that causes intermittent hangs in + machines that have low entropy. + +------------------------------------------------------------------- Old: ---- node-v10.16.1.tar.xz New: ---- node-v10.16.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs10.spec ++++++ --- /var/tmp/diff_new_pack.lebjXj/_old 2019-09-02 12:42:57.125773189 +0200 +++ /var/tmp/diff_new_pack.lebjXj/_new 2019-09-02 12:42:57.125773189 +0200 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs10 -Version: 10.16.1 +Version: 10.16.3 Release: 0 %define node_version_number 10 @@ -199,7 +199,7 @@ %if ! 0%{with intree_openssl} %if %node_version_number >= 8 -BuildRequires: openssl-devel >= %{openssl_req_ver} +BuildRequires: pkgconfig(openssl) >= %{openssl_req_ver} %else # older node doesn't support OpenSSL 1.1 %if 0%{?suse_version} >= 1330 @@ -220,7 +220,7 @@ %endif %if ! 0%{with intree_nghttp2} -BuildRequires: libnghttp2-devel >= 1.34.0 +BuildRequires: libnghttp2-devel >= 1.39.2 %endif %if 0%{with valgrind_tests} @@ -369,7 +369,7 @@ # percent-configure pulls in something that confuses node's configure # script, so we'll do it thus: export CFLAGS="%{optflags}" -export CXXFLAGS="%{optflags} -Wno-class-memaccess" +export CXXFLAGS="%{optflags} -Wno-class-memaccess -Wno-error=return-type" %if 0%{?cc_exec:1} export CC=%{?cc_exec} ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.lebjXj/_old 2019-09-02 12:42:57.161773183 +0200 +++ /var/tmp/diff_new_pack.lebjXj/_new 2019-09-02 12:42:57.161773183 +0200 @@ -1,36 +1,36 @@ -f9afd5285438e2f6b72c5c529a9f28a80f0fcd9cdc003e477d6e95177d89fdc2 node-v10.16.1-aix-ppc64.tar.gz -328e61fdacfe2f6f1a049d57e248b3eafc0345747831323a14fe1edf98d9b3bb node-v10.16.1-darwin-x64.tar.gz -c77d44ad057e1eea84b05b02e8392bb8f1c5b6392b006ecf76734e2d19c8e4c0 node-v10.16.1-darwin-x64.tar.xz -2589cafd5f11241fbfae3592b1337e97be86e436ad7a1db00d12586506f753ed node-v10.16.1-headers.tar.gz -e93ef520f3e750d8da1d48be3087a83c12671ade0261160bbee8a8c6e309b4af node-v10.16.1-headers.tar.xz -c5f1df1ae559a9e40fc7216f4c82379d4e8ce64a96921ab0bed216c82cf9a1f3 node-v10.16.1-linux-arm64.tar.gz -c46ba1a8e9b9c0490ae81f8b2b13d332ed6f5c86d172fa817f749042ab329b93 node-v10.16.1-linux-arm64.tar.xz -a783a7d1ba8c994616e3aa3b71f932fdaa35953e6461f1bbe2f48f55bc98cdb5 node-v10.16.1-linux-armv6l.tar.gz -de6055a51019b3f4abc7d53dbbacc34134471726de63b170dc7ff6a9eb0f3efd node-v10.16.1-linux-armv6l.tar.xz -7977c13f29827ef9177fe79948c39e2f000fa2ae10aa6c4b4de9f47d756354aa node-v10.16.1-linux-armv7l.tar.gz -ac05af22142d36fdab28c6304c98043341f5cdff715494ef1c2d2a94a3432dd6 node-v10.16.1-linux-armv7l.tar.xz -c1df7db6455f6f985c246b6d9acadb75d242ab0eb1ea4b7b8a51b3343c6aae74 node-v10.16.1-linux-ppc64le.tar.gz -09c543051096dbca046becde26c0e535a242e20d315f3d80fcb14f1ceb013985 node-v10.16.1-linux-ppc64le.tar.xz -388ed445df5a6560b0174fb14491be018b0e80b56a8c392123a8b21b24b533d0 node-v10.16.1-linux-s390x.tar.gz -fc8193c8f72ce4ccd6af9cff7d073455dc200ef183964abd50ba63a6a0b69f9e node-v10.16.1-linux-s390x.tar.xz -32db9700d2ba926e774c17e7cd8952499e64e241b095d22e05d3d62ebe4cb6d4 node-v10.16.1-linux-x64.tar.gz -127d9b2f485523805208f867fc513842570b29b4d6831773eeb6dd403a22ba9d node-v10.16.1-linux-x64.tar.xz -081cdcb0d43d141411cb308fd4ed7038cb15390a6d649974b8d85acf2c53e139 node-v10.16.1.pkg -3b7b2feb98380b082d9774b01081e815d6b459dc4125855d9f2dea9559c3d580 node-v10.16.1-sunos-x64.tar.gz -e3c2582645333ba62d81464221d40cdbc811aed793c45c7418f87221f37b0a69 node-v10.16.1-sunos-x64.tar.xz -98c92edcfced73b572917d01a53aa9deefec85d8a2fe96c46fe10ee1d0a7763d node-v10.16.1.tar.gz -6268319c8dddfdaa7886ea3f253ac5c2d133a6c682c00786296227e03f322009 node-v10.16.1.tar.xz -70b08ba7b488dee2b135b6d5c02ac5ccd6954fd5623da5b3408dec63ce60e6f9 node-v10.16.1-win-x64.7z -1ff8b26670e1b935b51f4b795728f29845c31a3c38b3220b4fe71fb139bc5623 node-v10.16.1-win-x64.zip -ba46e3bd5be77d5c13ac41efacb211508bef6da6cff894a2d0e99ddee79a244e node-v10.16.1-win-x86.7z -57c2b141c8122d5bfc8ebdaaf5c81b382e3f6fdd3fa7b936a210d8e8e278e4d6 node-v10.16.1-win-x86.zip -dc99f8c0be1e8bb1abfaa194113712ba85cc749bd32990f84cdcdd3b619f6a1c node-v10.16.1-x64.msi -63d03dff4c314f0adb08ef22f2c0efb05cd425db6a83ccf6a6a035050db9cc47 node-v10.16.1-x86.msi -bd4ce2f0543c2ca31c7a573bda7b816b51b5946e6dc8b7a4e0041b8ab0f758e7 win-x64/node.exe -4c0f7168444b6ef0d469c9303d132520c56e6950cbe9616c2f86c08a498e3632 win-x64/node.lib -835c121df473bcf58ff85d8f760e174f0dc11913aafa01a544b7dca7817d3794 win-x64/node_pdb.7z -b84a1d4bc9b936958074f56802d6f50fa98efc1fbbce42c7288687f2f114a506 win-x64/node_pdb.zip -4c69678620cc2ac6f2421a9585a01a7843499fce492e74e17545a46f1f810b2b win-x86/node.exe -831fb788501920391120a99d20f443a1f32b6d6446870efcc35a50cd1e485f2b win-x86/node.lib -91ccb69ae2bb425c2646f22c2476adc02d4ccd51d36f5f598d7ca60f43526f2c win-x86/node_pdb.7z -0f2b9d30a0c5ed61e86da5fd33e2fdd13cf0deed411ee787bfd9e0b522ba47b4 win-x86/node_pdb.zip +1e246436e177d69354b5e3ea47579a03b68d7b61a2565972c18c3a4cb5d8ee33 node-v10.16.3-aix-ppc64.tar.gz +6febc571e1543c2845fa919c6d06b36a24e4e142c91aedbe28b6ff7d296119e4 node-v10.16.3-darwin-x64.tar.gz +1d5ce05abf39ef482c2c3eaf16c1f4edb01314308066871d3dfc99e95701b19b node-v10.16.3-darwin-x64.tar.xz +0901d1f1bfe0f5d922f9d79c5822a3624c11eb0f2de9fd552425bc98c7b95e54 node-v10.16.3-headers.tar.gz +6ceb3249ac26a098c943de8104c19d7ea5a540b02db8652b80ab54deed1e5848 node-v10.16.3-headers.tar.xz +3bab16e7107092e43426e082ee9fd88ef0a43a35816f662f14563bcc5152600d node-v10.16.3-linux-arm64.tar.gz +8ee77bad022bd460bf2867a97bf56ce7ddc4aa2ace067e45995fb1721a958428 node-v10.16.3-linux-arm64.tar.xz +c4ce8f8627c4d0d71647987924e5369cd1adeef2865bf1bdbb4387b75fba804b node-v10.16.3-linux-armv6l.tar.gz +17b6ea87cde13c330a72c44be8a30ebebf83c7c71d1a1b92e1d629f273fa0743 node-v10.16.3-linux-armv6l.tar.xz +f267710728ca56ca3b522076fff808540ea27d6aa5fd586bc0ad39c389530c3b node-v10.16.3-linux-armv7l.tar.gz +4a6f27308cd0cea136be6f5f7c194b0faabea016efe844fb1452c846d2eca7b1 node-v10.16.3-linux-armv7l.tar.xz +3e0f41b3cb991f062e1c93a297675af34d1a2f29052306cd585f1f5e25ea9159 node-v10.16.3-linux-ppc64le.tar.gz +b51731b49f6816f5e3e670c399611eb9386f558cc2d597301fb73e585640a642 node-v10.16.3-linux-ppc64le.tar.xz +ae87fa499fd5fd9d86d4f788cb4e54bd3eb4fdb735b20235537e9d38ae5da73b node-v10.16.3-linux-s390x.tar.gz +90cc57506c98cd5561f5dda9e103fa70083242fff2b1a39a5351fc15ff63db46 node-v10.16.3-linux-s390x.tar.xz +2f0397bb81c1d0c9901b9aff82a933257bf60f3992227b86107111a75b9030d9 node-v10.16.3-linux-x64.tar.gz +d2271fd8cf997fa7447d638dfa92749ff18ca4b0d796bf89f2a82bf7800d5506 node-v10.16.3-linux-x64.tar.xz +1c820559780c7a5b90ceebd819afce58f3c14805191141fbd59feb8485c2fc73 node-v10.16.3.pkg +d8f2418b748c4c9b1d8c1dc008b42384ca87c4c4c134df3a3009e6b7546f8b23 node-v10.16.3-sunos-x64.tar.gz +2952da9d127c3f72fe5b3e466fbfe8a45ab3ef63263d881da7e9b586559f3693 node-v10.16.3-sunos-x64.tar.xz +db5a5e03a815b84a1266a4b48bb6a6d887175705f84fd2472f0d28e5e305a1f8 node-v10.16.3.tar.gz +7bf1123d7415964775b8f81fe6ec6dd5c3c08abb42bb71dfe4409dbeeba26bbd node-v10.16.3.tar.xz +c2cc3b95d6e8504b20623cfe74f848d1ebc2f43a262e7bae14bee64db2b13889 node-v10.16.3-win-x64.7z +19aa47de7c5950d7bd71a1e878013b98d93871cc311d7185f5472e6d3f633146 node-v10.16.3-win-x64.zip +fc1ccb1e6f12fe68e816c552e6b1df289a8bfe064c025eb62c360bd041da4a5f node-v10.16.3-win-x86.7z +02a30a17c25c354747ac76fd130ff5495dde2f60f0a21ad675526951c2d7a52a node-v10.16.3-win-x86.zip +f68b75eea46232adb8fd38126c977dc244166d29e7c6cd2df930b460c38590a9 node-v10.16.3-x64.msi +b3cf18ad447d177cf858dbe45751100846cad96ba7497cd7c1850a616758e67f node-v10.16.3-x86.msi +cb8f5c1981e11a3d438b6867df5fb8e4f77cd29ddc0856d99b62060ef991c649 win-x64/node.exe +9f10cd25d27fc31f8fe8f5fcc5e9f27a8ba5bb79dc0791dc0df102f063c0066e win-x64/node.lib +654d350ee101cbb4a0246e5226169f99af763a4d4c14546370ec6dfb09cf5a47 win-x64/node_pdb.7z +426f326d88b5a184cc74ba50f5106eca933cb3386f872ffeb5844f3916296c09 win-x64/node_pdb.zip +78b71fd2fb792c5f24848a05119d50d02407675a54a72caf0e40b039a43fefdd win-x86/node.exe +459095d9bd9dc4e2d12c4284e6fc5bdc78eec8181c8327c57876499b002a59fd win-x86/node.lib +1d0bb57a74e836835a1f9b8c1e0bf2493d4bd095c81a8e12d05cbfbf8c363534 win-x86/node_pdb.7z +e2b5ea28cbe965e074e61035b559efda9312044ac5d0346243c041bbb62cea73 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.lebjXj/_old and /var/tmp/diff_new_pack.lebjXj/_new differ ++++++ node-v10.16.1.tar.xz -> node-v10.16.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs10/node-v10.16.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs10.new.7948/node-v10.16.3.tar.xz differ: char 27, line 1
