Hello community, here is the log from the commit of package nodejs8 for openSUSE:Factory checked in at 2019-11-04 17:02:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs8 (Old) and /work/SRC/openSUSE:Factory/.nodejs8.new.2990 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs8" Mon Nov 4 17:02:42 2019 rev:28 rq:744749 version:8.16.2 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs8/nodejs8.changes 2019-08-29 17:17:20.751369158 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs8.new.2990/nodejs8.changes 2019-11-04 17:02:46.904028658 +0100 @@ -1,0 +2,18 @@ +Thu Oct 24 14:34:22 UTC 2019 - Adam Majer <[email protected]> + +- New upstream LTS release 8.16.2: + * deps: update OpenSSL to 1.0.2s + +------------------------------------------------------------------- +Wed Oct 2 10:13:11 UTC 2019 - Michel Normand <[email protected]> + +- Add _constraints for aarch64 & ppc64le to avoid build error + +------------------------------------------------------------------- +Wed Sep 18 13:44:55 UTC 2019 - Vítězslav Čížek <[email protected]> + +- Fix build with OpenSSL 1.1.1d (bsc#1149792) + * https://github.com/nodejs/node/pull/29550 + * add fix_build_with_openssl_1.1.1d.patch + +------------------------------------------------------------------- Old: ---- node-v8.16.1.tar.xz New: ---- _constraints fix_build_with_openssl_1.1.1d.patch node-v8.16.2.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs8.spec ++++++ --- /var/tmp/diff_new_pack.Jv8MUp/_old 2019-11-04 17:02:48.468030335 +0100 +++ /var/tmp/diff_new_pack.Jv8MUp/_new 2019-11-04 17:02:48.484030352 +0100 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs8 -Version: 8.16.1 +Version: 8.16.2 Release: 0 %define node_version_number 8 @@ -42,6 +42,7 @@ %endif %bcond_with valgrind_tests +%bcond_without nodejs_lto %if 0%{?suse_version} == 1110 %define _libexecdir %{_exec_prefix}/lib @@ -122,6 +123,7 @@ Patch12: openssl_1_1_1.patch Patch31: CVE-2019-13173.patch +Patch32: fix_build_with_openssl_1.1.1d.patch ## Patches specific to SUSE and openSUSE # PATCH-FIX-OPENSUSE -- set correct path for dtrace if it is built @@ -146,6 +148,8 @@ BuildRequires: binutils-gold %endif +BuildRequires: pkg-config + # Node.js 4/6/7 requires GCC 4.8.5+. # # For Node.js 8.x, upstream requires GCC 4.9.4+, as GCC 4.8 may have @@ -179,7 +183,6 @@ %endif BuildRequires: fdupes -BuildRequires: pkg-config BuildRequires: procps BuildRequires: xz BuildRequires: zlib-devel @@ -322,6 +325,7 @@ %endif %patch12 -p1 %patch31 -p1 +%patch32 -p1 %patch101 -p1 %patch102 -p1 # Add check_output to configure script (not part of Python 2.6 in SLE11). @@ -333,8 +337,11 @@ %patch120 -p1 %patch200 -p1 +# remove backup files, if any +find -name \*~ -print0 -delete + # abnormalities from patching -find -name configure.js.orig -delete +find \( -name \*.js.orig -or -name \*.md.orig \) -delete %build # normalize shebang @@ -360,10 +367,6 @@ find deps/zlib -name *.[ch] -delete -# Annoying, over-repetitive patch updated just because lines in -# documentation changes every version. -find -name *.md.orig -delete - # percent-configure pulls in something that confuses node's configure # script, so we'll do it thus: export CFLAGS="%{optflags}" @@ -379,7 +382,7 @@ ./configure \ --prefix=%{_prefix} \ -%if %{node_version_number} >= 12 +%if 0%{?with nodejs_lto} && %{node_version_number} >= 12 --enable-lto \ %endif %if ! 0%{with intree_openssl} ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.Jv8MUp/_old 2019-11-04 17:02:48.548030421 +0100 +++ /var/tmp/diff_new_pack.Jv8MUp/_new 2019-11-04 17:02:48.552030425 +0100 @@ -1,40 +1,40 @@ -be210d9ce20155877e56aa57901f71b45b214ebb6f78fc48e96ad3c37ec2ea0c node-v8.16.1-aix-ppc64.tar.gz -ef1cb93f03bca4b9528e5d3226bdf8efa135e4b12285eee1e4760da06bac631a node-v8.16.1-darwin-x64.tar.gz -8eac60c9d6687fb77a052a04712cc792a6cd1f55003e96d09404986690f8ad76 node-v8.16.1-darwin-x64.tar.xz -a9e646dd27f29611002298a5a69e753e37b501ebb587165c258fd18425bbd7ff node-v8.16.1-headers.tar.gz -96671638be9e66d81227647123218e0077b7af4105854ac190bc7840d22db91c node-v8.16.1-headers.tar.xz -880cdfba7072398b2f7ca84474d3a689a9325182b866e6705f04f1cde10fea94 node-v8.16.1-linux-arm64.tar.gz -0c61c6ae8a70d96ab19848a09b2010d29b806f2dd79177da22c743fd5e352a98 node-v8.16.1-linux-arm64.tar.xz -1dc93b1f5adbfb30410766911a6721f7572635704859b02f321165f928bcafce node-v8.16.1-linux-armv6l.tar.gz -3ee921a1915e34e8fd8c7a40e1383e89dc3d12a0ed8ac4f252d0ea4c3cb470d6 node-v8.16.1-linux-armv6l.tar.xz -1995c8a31e6939f47a93b101e1cb7f9d7caa2eacd01b1ffd90e50af5e8a776a2 node-v8.16.1-linux-armv7l.tar.gz -c71297cdb4336969ee10d5ac7daecdc380bb876a1e17db1cbf0479983cfe6f59 node-v8.16.1-linux-armv7l.tar.xz -22a89b8dc86da0f844ffc57b0d4a693795a4b6f006f9a930f3b8534a5b4927b8 node-v8.16.1-linux-ppc64le.tar.gz -5cfb323a649b7d9e6f54b5e3132141b18756a0d2b78435097ae6800acc286802 node-v8.16.1-linux-ppc64le.tar.xz -b3bbef731a4f058c6e86437220e14a246b64cf54e923fbceffa2538197446fa5 node-v8.16.1-linux-s390x.tar.gz -efaf43ddcf0f84d0ca6295fd35c1029b99150d94ce17f23764a5c2840afe4384 node-v8.16.1-linux-s390x.tar.xz -8ef575b64edbb6c04e506d8c8e0c5f92b90f4752841892c5adbb3a1e02863f46 node-v8.16.1-linux-x64.tar.gz -22a2580569c787ea83960bda0eae5dfaf1fe79382a52ad5fa5cd3accb93a1818 node-v8.16.1-linux-x64.tar.xz -a7f60fc6f41bedd2a387bc99067df11d53161fa235b8c90c6b5e73b0dff9af8e node-v8.16.1-linux-x86.tar.gz -ad19074012d957e8e524b3ef2ebad8cf36bdf58f86505e0ec2c131c1004ea9bb node-v8.16.1-linux-x86.tar.xz -b479883439ac4dbbbf509de5699f2b64b7788479b7715fc140bf6e89d2205d51 node-v8.16.1.pkg -8bf305578e0020ea3643a59f1b8bf2153e6eaf4e13527d24c30e60150ff5bc69 node-v8.16.1-sunos-x64.tar.gz -da4c673ab4fcefd892a833bb57b4b8d25e1c18d3d876fe810477b1ef3d7af98a node-v8.16.1-sunos-x64.tar.xz -2ac82a583da792d04c336350a7f482c716c1abe1a8db84daaaaf98e117a16e56 node-v8.16.1-sunos-x86.tar.gz -779ff5950e03b48ba2fa36c133a05d5f3c94e25849b94025e9305be36218ecb0 node-v8.16.1-sunos-x86.tar.xz -7666207212ac5cbd766b052951f57da62aaa641fedf83fabcb31dbb19f61169d node-v8.16.1.tar.gz -d8c190acdf2d967faf49c22df883d31a8d4e249d67852dae3c2d8a0f756b0512 node-v8.16.1.tar.xz -a70cd3c72351675bc3f4c51bedd293b173cb42ea973ef1c1dc19d90c6f769f17 node-v8.16.1-win-x64.7z -396dc41740bca0355d11865780e2af8e88eb17581cd2c445ccaf29b862901ab8 node-v8.16.1-win-x64.zip -c524468cf0d278b8daf4f4e864fad75fe457fadfc9f920aa93be8271529bf189 node-v8.16.1-win-x86.7z -18345ecb826ff63ab82b3688b53f4586fa67605b3adb0e87b853c6d15891b1aa node-v8.16.1-win-x86.zip -e5ad1a5e9e2de3ce98e4accbaaf59b8e78e2e3e08fed6c1863616e2886499250 node-v8.16.1-x64.msi -26a7e5fb30710d54fa3b93cd4cba3b805b1b4b1e6d3980387ab335c4bbb3d302 node-v8.16.1-x86.msi -68eb7432f06a63b4456ab88e0ca984df4c993e60a6c6f05e6f8d12de177941ef win-x64/node.exe -b277fd2148b2d06d7279976cb5a87224281db8a1417d334fef1402cddc3a606c win-x64/node.lib -558341be54e43a9c4ed0845b36afc547e7413d3c977a879f0f4494fb2863c092 win-x64/node_pdb.7z -663ea606cc994bd0508843a40d079f3beeb8a4814eb4607d7c05a859f577e547 win-x64/node_pdb.zip -b009f4a4bc0eada5c4430b6e3140061728bc2b01e4e33c06b467321a9c4db329 win-x86/node.exe -a8d422d7eac6539a43d53a59d50f3a37020c8ea53080d2cdfd55eb07ce027ab4 win-x86/node.lib -8520521b679d21a75aa3794042ecadfc11b523c140a71e085c4d9e947d7ee231 win-x86/node_pdb.7z -11ed30cc63a58e30564c599235ab4705a54aff3008ce090f5edd50cd05d8e907 win-x86/node_pdb.zip +8ed8a96300c116eb9533beb70510882fb5a9bc4b1f9acfa31bb718d52213e4a3 node-v8.16.2-aix-ppc64.tar.gz +359331120e83f0707219398fc543b05eee9476446ecce549c20c4d9c7c103d29 node-v8.16.2-darwin-x64.tar.gz +5bbb5be5c388276b78d6c8a17cb1ce0dd2c7e157c08fe7f3eda7414c1f450b39 node-v8.16.2-darwin-x64.tar.xz +a43156bc0e2fd2f60a4e4a9194564d69b3e9f0f956a175b7ebe95d2610239f1c node-v8.16.2-headers.tar.gz +ed608f070fcc84e80ef4caf9004fe955067d003a62ff76c2bf2c1c9c5bfb01b7 node-v8.16.2-headers.tar.xz +19b8c246dd12840ee6a94c89df683f853ed91cbbf6a133820fb163181d77202d node-v8.16.2-linux-arm64.tar.gz +5afe366affb05136d25e99ec97a7a1ee1b690cc26df43567af0509f36b45e682 node-v8.16.2-linux-arm64.tar.xz +9f3b47244f502a150a09d6ad7f7eb68c835d148712b326d2af8db2b7ca81c14f node-v8.16.2-linux-armv6l.tar.gz +0fb8e030651776c490e7a8612e97b0d11af27d6e89461a612fa7fab6afda6c95 node-v8.16.2-linux-armv6l.tar.xz +291f507d32b79fcd8c16739515516464f27b77cadb8b86f7a8ab43e74032cf69 node-v8.16.2-linux-armv7l.tar.gz +9b7070578d58785da2bd31d3256b42f91d993a2fb4091e87a21fb9e66cca3b6e node-v8.16.2-linux-armv7l.tar.xz +9eb932ac222cbd6a1feeee145e515b2d41b18ad2ff686eb23782dc0e7205f838 node-v8.16.2-linux-ppc64le.tar.gz +f442590923136024b23bf8c40533f5d6a7b5fb23ae34a889f77f1539ed9bfe8c node-v8.16.2-linux-ppc64le.tar.xz +0dd28c879c3bdfdb7e71b84cd74bf5667146a582b1af7afba25963772303aefb node-v8.16.2-linux-s390x.tar.gz +7c40b92a0466ffcade181f750d7fa659fd335a10bf156179c0d4b5bc0b40f10e node-v8.16.2-linux-s390x.tar.xz +722d07291a8886384388c6795a747ec2055073f83dc73c0a97efba0022cc23ff node-v8.16.2-linux-x64.tar.gz +88617a293f5828cc94ee99c94a43fbea12b989e34fe643fc14885a14748a8da6 node-v8.16.2-linux-x64.tar.xz +938cc9651ce38091eba8c72ef2b235339fe3bed3980c04d1429f01412c68546c node-v8.16.2-linux-x86.tar.gz +3c1be98f792e41ab2a26bf03ed061ec2f98977218662f91daa394f8a23b94127 node-v8.16.2-linux-x86.tar.xz +5721d8c76809cb138a19a4cf9897faf875cd385df6c115cd004412ef01807e08 node-v8.16.2.pkg +f9905b0e69884e7f8c95b8a924cb6c4e3a5ec4fd6390a6f6daa5110214b5f841 node-v8.16.2-sunos-x64.tar.gz +2eb39c7dfb21ed384924761e3315e754c427a1a29da0e49cb1e52d8469ab7ee3 node-v8.16.2-sunos-x64.tar.xz +73a156c47ec5e3c628e5960d15d798786073afb02a31621f0e7a4e92f0f484e1 node-v8.16.2-sunos-x86.tar.gz +5793c4c8f47e9da65bb17a749a357767c01640436bff0d8e5098c1804494a0af node-v8.16.2-sunos-x86.tar.xz +4f94361bbe087bc3a9d48ff69c2cefabb6460c64cb7d959204726467b9ee84b8 node-v8.16.2.tar.gz +8c16b500ad74c1b1bde099996c287eeed5a4b2ab0efdf5d94d1d683cc2654ec3 node-v8.16.2.tar.xz +c27a170595851fc85b9b419c9fc76b6c70e237f7d60d483fa5ec3d8f8cea76c1 node-v8.16.2-win-x64.7z +98c615221500434155a8a5aff5fe96cd000400f3e76858ca97e6624f1d15eb73 node-v8.16.2-win-x64.zip +c4b7eb2839b19f8217717ac359c6b23725d9e25872338d6a56f4d9f74af11324 node-v8.16.2-win-x86.7z +6cadb66e46a7aa40f5401ddcbfd514f886d7e9b17e1c9d3ac89c594c338d64e5 node-v8.16.2-win-x86.zip +573f4780464942794d7496d7deef0a49c44f8b2c220dfe7383e288f9ada8662a node-v8.16.2-x64.msi +a9e5c53ff8ce29d82fe0c78a8c5ed7fa9db21d11cc64f6961dd10a79fdb3521b node-v8.16.2-x86.msi +e4e2c2aadcae1f6b5fe1936a4606b2fb59fbcfda263114e3abd10892d1433024 win-x64/node.exe +99959198ff808d2888dc9cdaf8080f05936452069e1542c0d3d4942834152d93 win-x64/node.lib +e52e4fced1bb038cbfc009d798e41f9c1a8b001040e59c42407e704c791ec509 win-x64/node_pdb.7z +37f34a8583edede6bc286652c6a9e6b6d4de2981ae41614b66c828b3e0dc86aa win-x64/node_pdb.zip +521f0f095ad104bbe7a3446c357a91f59b4227d8f68d719cf7132525df00dcab win-x86/node.exe +c63832cd5413211cde419c9ca95d1d79914853891d593ecac334d714cdc6f701 win-x86/node.lib +1a44e95ee27ecb933bb89daf9defaf4f418bdecae3416a71e7ba0ac55a565c0f win-x86/node_pdb.7z +bd5a46e4a3705f74707b7d808ebed93d58414c6784e678293c97acb40c536a56 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.Jv8MUp/_old and /var/tmp/diff_new_pack.Jv8MUp/_new differ ++++++ _constraints ++++++ <constraints> <overwrite> <conditions> <arch>aarch64</arch> <arch>ppc64le</arch> </conditions> <hardware> <disk> <size unit="G">4</size> </disk> </hardware> </overwrite> </constraints> ++++++ fix_build_with_openssl_1.1.1d.patch ++++++ FROM: https://github.com/nodejs/node/pull/29550/commits >From 94c599e80218b09b27c0df93573a51e6adb45e61 Mon Sep 17 00:00:00 2001 From: Sam Roberts <[email protected]> Date: Thu, 19 Sep 2019 13:06:46 -0700 Subject: [PATCH] fixup! test: well-defined DH groups now verify clean test/parallel/test-crypto-binary-default.js | 3 +-- test/parallel/test-crypto-dh.js | 17 ++--------------- 2 files changed, 3 insertions(+), 17 deletions(-) >From 7dc56e082b96aeee34e83dabbad81ee12607e38f Mon Sep 17 00:00:00 2001 From: Sam Roberts <[email protected]> Date: Fri, 13 Sep 2019 13:19:06 -0700 Subject: [PATCH] test: well-defined DH groups now verify clean OpenSSL 1.1.1d no longer generates warnings for some DH groups that used to be considered unsafe. See below for discussion. This is considered a bug fix. See: - https://github.com/openssl/openssl/pull/9363 - https://github.com/openssl/openssl/pull/9363#discussion_r324802618 --- test/parallel/test-crypto-binary-default.js | 3 +-- test/parallel/test-crypto-dh.js | 28 +++++++++++++-------- 2 files changed, 19 insertions(+), 12 deletions(-) Index: node-v8.16.1/test/parallel/test-crypto-binary-default.js =================================================================== --- node-v8.16.1.orig/test/parallel/test-crypto-binary-default.js +++ node-v8.16.1/test/parallel/test-crypto-binary-default.js @@ -34,7 +34,6 @@ const crypto = require('crypto'); const fs = require('fs'); const tls = require('tls'); const fixtures = require('../common/fixtures'); -const DH_NOT_SUITABLE_GENERATOR = crypto.constants.DH_NOT_SUITABLE_GENERATOR; crypto.DEFAULT_ENCODING = 'latin1'; @@ -612,8 +611,7 @@ assert.throws(function() { '020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F1437' + '4FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' + 'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF'; - const d = crypto.createDiffieHellman(p, 'hex'); - assert.strictEqual(d.verifyError, DH_NOT_SUITABLE_GENERATOR); + crypto.createDiffieHellman(p, 'hex'); // Test RSA key signing/verification const rsaSign = crypto.createSign('SHA1'); Index: node-v8.16.1/test/parallel/test-crypto-dh.js =================================================================== --- node-v8.16.1.orig/test/parallel/test-crypto-dh.js +++ node-v8.16.1/test/parallel/test-crypto-dh.js @@ -6,8 +6,6 @@ if (!common.hasCrypto) const assert = require('assert'); const crypto = require('crypto'); -const DH_NOT_SUITABLE_GENERATOR = crypto.constants.DH_NOT_SUITABLE_GENERATOR; - // Test Diffie-Hellman with two parties sharing a secret, // using various encodings as we go along const dh1 = crypto.createDiffieHellman(common.hasFipsCrypto ? 1024 : 256); @@ -101,8 +99,6 @@ bob.generateKeys(); const aSecret = alice.computeSecret(bob.getPublicKey()).toString('hex'); const bSecret = bob.computeSecret(alice.getPublicKey()).toString('hex'); assert.strictEqual(aSecret, bSecret); -assert.strictEqual(alice.verifyError, DH_NOT_SUITABLE_GENERATOR); -assert.strictEqual(bob.verifyError, DH_NOT_SUITABLE_GENERATOR); /* Ensure specific generator (buffer) works as expected. * The values below (modp2/modp2buf) are for a 1024 bits long prime from @@ -133,8 +129,6 @@ const modp2buf = Buffer.from([ const exmodp2Secret = exmodp2.computeSecret(modp2.getPublicKey()) .toString('hex'); assert.strictEqual(modp2Secret, exmodp2Secret); - assert.strictEqual(modp2.verifyError, DH_NOT_SUITABLE_GENERATOR); - assert.strictEqual(exmodp2.verifyError, DH_NOT_SUITABLE_GENERATOR); } for (const buf of [modp2buf, ...common.getArrayBufferViews(modp2buf)]) { @@ -147,7 +141,6 @@ for (const buf of [modp2buf, ...common.g const exmodp2Secret = exmodp2.computeSecret(modp2.getPublicKey()) .toString('hex'); assert.strictEqual(modp2Secret, exmodp2Secret); - assert.strictEqual(exmodp2.verifyError, DH_NOT_SUITABLE_GENERATOR); } { @@ -159,7 +152,6 @@ for (const buf of [modp2buf, ...common.g const exmodp2Secret = exmodp2.computeSecret(modp2.getPublicKey()) .toString('hex'); assert.strictEqual(modp2Secret, exmodp2Secret); - assert.strictEqual(exmodp2.verifyError, DH_NOT_SUITABLE_GENERATOR); } { @@ -171,17 +163,20 @@ for (const buf of [modp2buf, ...common.g const exmodp2Secret = exmodp2.computeSecret(modp2.getPublicKey()) .toString('hex'); assert.strictEqual(modp2Secret, exmodp2Secret); - assert.strictEqual(exmodp2.verifyError, DH_NOT_SUITABLE_GENERATOR); } - +// Second OAKLEY group, see +// https://github.com/nodejs/node-v0.x-archive/issues/2338 and +// https://xml2rfc.tools.ietf.org/public/rfc/html/rfc2412.html#anchor49 const p = 'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74' + '020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F1437' + '4FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' + 'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF'; -const bad_dh = crypto.createDiffieHellman(p, 'hex'); -assert.strictEqual(bad_dh.verifyError, DH_NOT_SUITABLE_GENERATOR); +crypto.createDiffieHellman(p, 'hex'); +// Confirm DH_check() results are exposed for optional examination. +const bad_dh = crypto.createDiffieHellman('02', 'hex'); +assert.notStrictEqual(bad_dh.verifyError, 0); const availableCurves = new Set(crypto.getCurves()); const availableHashes = new Set(crypto.getHashes()); ++++++ node-v8.16.1.tar.xz -> node-v8.16.2.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs8/node-v8.16.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs8.new.2990/node-v8.16.2.tar.xz differ: char 27, line 1
