Hello community, here is the log from the commit of package nodejs12 for openSUSE:Leap:15.2 checked in at 2020-02-16 18:29:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/nodejs12 (Old) and /work/SRC/openSUSE:Leap:15.2/.nodejs12.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs12" Sun Feb 16 18:29:53 2020 rev:3 rq:774517 version:12.15.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/nodejs12/nodejs12.changes 2020-01-15 15:33:49.274876495 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.nodejs12.new.26092/nodejs12.changes 2020-02-16 18:30:27.118784955 +0100 @@ -1,0 +2,31 @@ +Fri Feb 7 10:38:50 UTC 2020 - Adam Majer <[email protected]> + +- Update to LTS release 12.15.0: + * fixes a remotely triggerable assertion on a TLS server via a + crafted certificate string (CVE-2019-15604, bsc#1163104) + * fixes an HTTP request smuggling vulnerability via malformed + Transfer-Encoding header (CVE-2019-15605, bsc#1163102) + * trim HTTP header values of optional white space + (CVE-2019-15606, bsc#1163103) + * enabled stricter HTTP header parsing by default. + +- fix_ci_tests.patch: refreshed + +------------------------------------------------------------------- +Thu Jan 9 10:42:21 UTC 2020 - Adam Majer <[email protected]> + +- Update to LTS release 12.14.1: + * crypto: fix key requirements in asymmetric cipher + * deps: + + update llhttp to 2.0.1 + + update nghttp2 to 1.40.0 + * v8: mark serdes API as stable + +- nodejs-libpath.patch: refreshed + +------------------------------------------------------------------- +Tue Jan 7 13:12:10 UTC 2020 - Guillaume GARDET <[email protected]> + +- Really disable LTO when required (nodejs < 12) + +------------------------------------------------------------------- Old: ---- node-v12.14.0.tar.xz New: ---- node-v12.15.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs12.spec ++++++ --- /var/tmp/diff_new_pack.xQMBvT/_old 2020-02-16 18:30:28.138785489 +0100 +++ /var/tmp/diff_new_pack.xQMBvT/_new 2020-02-16 18:30:28.146785493 +0100 @@ -1,7 +1,7 @@ # # spec file for package nodejs12 # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,7 +26,7 @@ ########################################################### Name: nodejs12 -Version: 12.14.0 +Version: 12.15.0 Release: 0 %define node_version_number 12 @@ -42,7 +42,16 @@ %endif %bcond_with valgrind_tests + +%if %{node_version_number} >= 12 %bcond_without nodejs_lto +%else +%bcond_with nodejs_lto +%endif + +%if !0%{?with nodejs_lto} +%define _lto_cflags %{nil} +%endif %if 0%{?suse_version} == 1110 %define _libexecdir %{_exec_prefix}/lib @@ -317,6 +326,12 @@ %setup -q -n node-%{version} %endif +%if %{node_version_number} == 6 +# Update NPM +rm -r deps/npm +tar Jxvf %{SOURCE10} +%endif + %if %{node_version_number} >= 10 tar Jxvf %{SOURCE11} %endif # node_version_number @@ -372,6 +387,7 @@ # script, so we'll do it thus: export CFLAGS="%{optflags}" export CXXFLAGS="%{optflags} -Wno-class-memaccess -Wno-error=return-type" +export LDFLAGS="%{?build_ldflags}" %if 0%{?cc_exec:1} export CC=%{?cc_exec} @@ -383,7 +399,7 @@ ./configure \ --prefix=%{_prefix} \ -%if 0%{?with nodejs_lto} && %{node_version_number} >= 12 +%if 0%{?with nodejs_lto} --enable-lto \ %endif %if ! 0%{with intree_openssl} ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.xQMBvT/_old 2020-02-16 18:30:28.370785610 +0100 +++ /var/tmp/diff_new_pack.xQMBvT/_new 2020-02-16 18:30:28.374785613 +0100 @@ -1,34 +1,34 @@ -b1c4db193ac9981d671a8b267d4d836dcdb20d9d0a9fa1b69150c349a5ac5b39 node-v12.14.0-aix-ppc64.tar.gz -5f3170b346b29e6902c0ca7e0993e3d1b4b650615348aa866de17ad965377048 node-v12.14.0-darwin-x64.tar.gz -4b5086941fe3a105c84f1770190c06210a86a1792c785f3b83e758bd386f1a95 node-v12.14.0-darwin-x64.tar.xz -12117b31a9062964521e31cf804989e319a6f320ea6ce019152ad3d323831701 node-v12.14.0-headers.tar.gz -c47631c1af878fdfd4e00c6a986f94e0bafbb78e88909947d775d96db8405139 node-v12.14.0-headers.tar.xz -63e9c96712868addef76a694852f54ea279479949669275dab506aa8ce4e0b73 node-v12.14.0-linux-arm64.tar.gz -733b4f71ccdf114038bbe0f20574a1e8f4f60b53d39caf445f518745596eadda node-v12.14.0-linux-arm64.tar.xz -d768518b377dcd22596d3c61ec73b41e9a7257aef9de9cf1b88834d635510c2a node-v12.14.0-linux-armv7l.tar.gz -bc7d4614a52782a65126fc1cc89c8490fc81eb317255b11e05b9e072e70f141d node-v12.14.0-linux-armv7l.tar.xz -c00134ae7cee96b5c2782dabc1c3b778b3bc2cf8d53702c63d2e46966bb8cc39 node-v12.14.0-linux-ppc64le.tar.gz -57522220a2c94466804bab39fe3148bd837977ae61a1ddddb99e8fad3e0926b0 node-v12.14.0-linux-ppc64le.tar.xz -82458edb46ef0ca410c4c21b0a002ee1098a3cc422e3cdf032aa96c9ed49425e node-v12.14.0-linux-s390x.tar.gz -e8694743785a3384850ba77d662a81380766485597666e59c200f14f7dce8b29 node-v12.14.0-linux-s390x.tar.xz -52207f643ab0fba66d5189a51aac280c4834c81f24a7297446896386ec93a5ed node-v12.14.0-linux-x64.tar.gz -82ae74ee0a204de7ebf7767eaa8e382518d9b49668dcbb5bd7fd003154445d1f node-v12.14.0-linux-x64.tar.xz -f735b1b915830484761cba761e7b6a396f71a78f2726d37cf647464cfdf364a0 node-v12.14.0.pkg -0b92878f7bea18144136b1fbb30cbf116efdfabb4eadbfda1ad678471e8026e7 node-v12.14.0-sunos-x64.tar.gz -a924f5dcfc985e9220561012427a99cd9c666c91cfbfda5e0598dffdfa296c88 node-v12.14.0-sunos-x64.tar.xz -5c1939867228f3845c808ef84a89c8ee93cc35f857bf7587ecee1b5a6d9da67b node-v12.14.0.tar.gz -088a217ba2af641b8cc15be29f6e2956b8a33e6badb85596bbc2cdea9df9be71 node-v12.14.0.tar.xz -c1b6a018a5e1bcb6ead9724601250bbe8f4293c830cda511bcc8ffb1f9701008 node-v12.14.0-win-x64.7z -526f4b01ffb270bdd8213b58b38843fa3c88f03c89b1898c641bc0e32607913e node-v12.14.0-win-x64.zip -b52848cfa2fbb523bb89041f815d22cef22d396e200ebd24497959bdf658f872 node-v12.14.0-win-x86.7z -99304aa5e1429cd2b7a143e8fd1200228fd5eb803886d68bcd8f82aae6b7f184 node-v12.14.0-win-x86.zip -bd0636856980c1fa855f1d517dcbd288a5619536286e4b1e452e19230355f7d9 node-v12.14.0-x64.msi -6c0e75be48a2410749b58fd7482dd96a689940290f5d7a624f00cbad0b901df8 node-v12.14.0-x86.msi -cd1debd9b97cd91988130745d8ec0a4c13c377b9e526c1aeeb8313e56b3b5699 win-x64/node.exe -30ec1ab45d9d22ad93e7c95691640d83818175b4fd74680d12a1f900a7d87f80 win-x64/node.lib -cce6d05c8d04af52838ea438a4a58afbb8dcb5655c86ba96a23d39260696b1ea win-x64/node_pdb.7z -67b7c4f3b35feb6e874dc6a1e84b03f2e185c6631407600853af4a7be4ce33ce win-x64/node_pdb.zip -ef8ea10e98fec792fdf6581395dc55f0eb2ee4ef7c8c40c8e0ebc35e3ab3828a win-x86/node.exe -87a49b27dfc454c5f8ff71dffb0c27322a8148a661d216741156ad61c2493cd1 win-x86/node.lib -eee65ac3abc019e66087a60d87f6b051b40d7fcf2aa40e25e3b59faafc39c61c win-x86/node_pdb.7z -7ccffb5e0f1bb824dd771347e7d41af9546ff0475683345bd449650b0a656026 win-x86/node_pdb.zip +4674d94402b8c0d79a9e20d4320652830032f0a7171cea2c815858b76d3d2ee9 node-v12.15.0-aix-ppc64.tar.gz +b6449cec39ac15b37abe4e59ef0eae50dcdfbf060c5276a01cc590f2a3372b7d node-v12.15.0-darwin-x64.tar.gz +fc2b68255c61663fe74338d372678fbb1fec367fef46924498e6d1b5e220c0b1 node-v12.15.0-darwin-x64.tar.xz +48e8ba40339e6cb9edc820f320b690b3401643e2c6bd36a7f2267ebf84cf98f2 node-v12.15.0-headers.tar.gz +44217fee8c0d003888783f65c36eec871d36b93d7347333b659633e30cbd85db node-v12.15.0-headers.tar.xz +9349bb00a522da9ecd0d2f9453b500904ccd56e271852ab2defb51a8c77a1aca node-v12.15.0-linux-arm64.tar.gz +c582cb65a0ec7f648618d3d33b4f87c374a3f930518b57eca1693828c965d6e5 node-v12.15.0-linux-arm64.tar.xz +53c4b21b23b8dc31da0ab9b5bdae7041d87fd7b7247e0b6cecaca36ca1d7e05d node-v12.15.0-linux-armv7l.tar.gz +a865e69914c568fcb28be7a1bf970236725a06a8fc66530799300181d2584a49 node-v12.15.0-linux-armv7l.tar.xz +91c4d019e2c86d088fcb0874f3dab6a074c354d4fe0fcce1fa2f535c86396f5e node-v12.15.0-linux-ppc64le.tar.gz +9b0c4faf637e9cd272964052933e7ff2ca05c50d89a473cf6f40031f55783fd0 node-v12.15.0-linux-ppc64le.tar.xz +3594746ef6a98d21e56b4f1c7a60526c53fd97750c9ba2347ffc3df24ea3b21a node-v12.15.0-linux-s390x.tar.gz +30f150720cc1a9f53d4d9a881961431428603dfe151cd487cdaec555f29db0c7 node-v12.15.0-linux-s390x.tar.xz +218279a33603b8bc958c46cce04c14851fd9d685bd21f5a39d6b98d08d80aae5 node-v12.15.0-linux-x64.tar.gz +63df953deb091c1500e1044bef01d1953117970e757e74e90d915e1a4a0d1c9c node-v12.15.0-linux-x64.tar.xz +f3c3103bcceb33898a8bc44c54d337c5bcb709dcdca95408e9307b6d4a86ca31 node-v12.15.0.pkg +4783ba63bcdfb8fa54cd4526401051df32835dc112cf7c11d64d98451ece20a6 node-v12.15.0-sunos-x64.tar.gz +b14aab80ccdf268f6347b17bd449217139fe46df3cceac00960e59ef835cec8b node-v12.15.0-sunos-x64.tar.xz +fb357de9262f60425ea3970dd09afd63312006a7b8355a808d358694e867f4fd node-v12.15.0.tar.gz +d2fb4fa80ccf321570552b0a6e6b5f2aedeb281a8450207b057cf54c54d5a81b node-v12.15.0.tar.xz +5b7d4beb9fc4c16b08b06de394b738caeec94f3d22d38f78ca02f386b9897f83 node-v12.15.0-win-x64.7z +48b29cab597962f12b0aac081522e6192bc8642c582cd0fc1bf51557273888da node-v12.15.0-win-x64.zip +a033ff4501155b3f0d63f08a40bf02d3bebd98485895ffd0cb638c6071eb6f6c node-v12.15.0-win-x86.7z +e76057fda953d964e9f53c1a210ca4daf7104072574744616eb079e053a0d3d9 node-v12.15.0-win-x86.zip +615fe16ec99ebb7de92cb0e1c343979f7ac9d943373e61cff17cd6a9f76547e8 node-v12.15.0-x64.msi +f558f19deea306c6caf167a687fe1ee65c4b191b1d327188c7f0d9fa7966d818 node-v12.15.0-x86.msi +51d09b8ce41fa3e6b7206141609e52e92f435b99e44932592cd529a9463bbf17 win-x64/node.exe +bd0c3ac36b1e484ddbc3de5e04abe399c1221057fabf16e74155b44af012504d win-x64/node.lib +9a644dfb80d9d6a4e01e83993b8c5de219130a39e5324ea78696d0ca7303c3bb win-x64/node_pdb.7z +7f7e3cff51f3d475e9f5427a74968cb83b2ef9625bcea006a9ac8ea1bc4fdf96 win-x64/node_pdb.zip +839ef38f0ed23a9dcca4f0a807e205f95e26370f35ec9ea9915721c06eda04f2 win-x86/node.exe +95fd2202f2ba9695cf4db59e932f50d3c96052e1d171797dfa955e348d96df1f win-x86/node.lib +d3659e3381a6c6fa7eec2ee0b340bc6049e47f23c055ef0d724d25bacabe4fdc win-x86/node_pdb.7z +cf15fcc38600ef4dc89c9a6e9eeb58a44ca35f9a59d9823dd0f839a8d6ee95d4 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.xQMBvT/_old and /var/tmp/diff_new_pack.xQMBvT/_new differ ++++++ fix_ci_tests.patch ++++++ --- /var/tmp/diff_new_pack.xQMBvT/_old 2020-02-16 18:30:28.570785716 +0100 +++ /var/tmp/diff_new_pack.xQMBvT/_new 2020-02-16 18:30:28.578785720 +0100 @@ -2,10 +2,10 @@ Date: Dec 20 09:18:49 UTC 2017 Summary: Fix CI unit tests framework for OBS building -Index: node-v12.14.0/test/parallel/test-module-loading-globalpaths.js +Index: node-git.8252c06165/test/parallel/test-module-loading-globalpaths.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-module-loading-globalpaths.js -+++ node-v12.14.0/test/parallel/test-module-loading-globalpaths.js +--- node-git.8252c06165.orig/test/parallel/test-module-loading-globalpaths.js ++++ node-git.8252c06165/test/parallel/test-module-loading-globalpaths.js @@ -11,6 +11,9 @@ const { addLibraryPath } = require('../c addLibraryPath(process.env); @@ -16,11 +16,11 @@ if (process.argv[2] === 'child') { console.log(require(pkgName).string); } else { -Index: node-v12.14.0/test/parallel/test-tls-env-bad-extra-ca.js +Index: node-git.8252c06165/test/parallel/test-tls-env-bad-extra-ca.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-tls-env-bad-extra-ca.js -+++ node-v12.14.0/test/parallel/test-tls-env-bad-extra-ca.js -@@ -36,7 +36,7 @@ fork(__filename, opts) +--- node-git.8252c06165.orig/test/parallel/test-tls-env-bad-extra-ca.js ++++ node-git.8252c06165/test/parallel/test-tls-env-bad-extra-ca.js +@@ -37,7 +37,7 @@ fork(__filename, opts) // TODO(addaleax): Make `SafeGetenv` work like `process.env` // encoding-wise if (!common.isWindows) { @@ -29,10 +29,10 @@ assert(re.test(stderr), stderr); } })) -Index: node-v12.14.0/test/parallel/test-tls-passphrase.js +Index: node-git.8252c06165/test/parallel/test-tls-passphrase.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-tls-passphrase.js -+++ node-v12.14.0/test/parallel/test-tls-passphrase.js +--- node-git.8252c06165.orig/test/parallel/test-tls-passphrase.js ++++ node-git.8252c06165/test/parallel/test-tls-passphrase.js @@ -223,7 +223,7 @@ server.listen(0, common.mustCall(functio }, onSecureConnect()); })).unref(); @@ -51,10 +51,10 @@ // Invalid passphrase assert.throws(function() { -Index: node-v12.14.0/test/parallel/test-crypto-scrypt.js +Index: node-git.8252c06165/test/parallel/test-crypto-scrypt.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-crypto-scrypt.js -+++ node-v12.14.0/test/parallel/test-crypto-scrypt.js +--- node-git.8252c06165.orig/test/parallel/test-crypto-scrypt.js ++++ node-git.8252c06165/test/parallel/test-crypto-scrypt.js @@ -12,30 +12,6 @@ if (typeof internalBinding('crypto').scr common.skip('no scrypt support'); @@ -146,10 +146,10 @@ get [name]() { if (--accessCount === 0) return ''; -Index: node-v12.14.0/test/parallel/test-repl-envvars.js +Index: node-git.8252c06165/test/parallel/test-repl-envvars.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-repl-envvars.js -+++ node-v12.14.0/test/parallel/test-repl-envvars.js +--- node-git.8252c06165.orig/test/parallel/test-repl-envvars.js ++++ node-git.8252c06165/test/parallel/test-repl-envvars.js @@ -2,12 +2,14 @@ // Flags: --expose-internals @@ -166,10 +166,10 @@ const tests = [ { env: {}, -Index: node-v12.14.0/test/common/index.mjs +Index: node-git.8252c06165/test/common/index.mjs =================================================================== ---- node-v12.14.0.orig/test/common/index.mjs -+++ node-v12.14.0/test/common/index.mjs +--- node-git.8252c06165.orig/test/common/index.mjs ++++ node-git.8252c06165/test/common/index.mjs @@ -45,6 +45,7 @@ const { expectsError, skipIfInspectorDisabled, @@ -186,23 +186,10 @@ getArrayBufferViews, getBufferSources, disableCrashOnUnhandledRejection, -Index: node-v12.14.0/test/parallel/test-fs-utimes.js +Index: node-git.8252c06165/Makefile =================================================================== ---- node-v12.14.0.orig/test/parallel/test-fs-utimes.js -+++ node-v12.14.0/test/parallel/test-fs-utimes.js -@@ -145,7 +145,7 @@ const path = `${tmpdir.path}/test-utimes - fs.writeFileSync(path, ''); - - // Test Y2K38 for all platforms [except 'arm', 'OpenBSD' and 'SunOS'] --if (!process.arch.includes('arm') && !common.isOpenBSD && !common.isSunOS) { -+if (!process.arch.includes('arm') && process.arch !== 's390' && !common.isOpenBSD && !common.isSunOS) { - const Y2K38_mtime = 2 ** 31; - fs.utimesSync(path, Y2K38_mtime, Y2K38_mtime); - const Y2K38_stats = fs.statSync(path); -Index: node-v12.14.0/Makefile -=================================================================== ---- node-v12.14.0.orig/Makefile -+++ node-v12.14.0/Makefile +--- node-git.8252c06165.orig/Makefile ++++ node-git.8252c06165/Makefile @@ -486,7 +486,7 @@ test-all-valgrind: test-build $(PYTHON) tools/test.py $(PARALLEL_ARGS) --mode=debug,release --valgrind @@ -230,10 +217,10 @@ .PHONY: doc-only doc-only: tools/doc/node_modules \ -Index: node-v12.14.0/test/parallel/test-child-process-spawnsync-args.js +Index: node-git.8252c06165/test/parallel/test-child-process-spawnsync-args.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-child-process-spawnsync-args.js -+++ node-v12.14.0/test/parallel/test-child-process-spawnsync-args.js +--- node-git.8252c06165.orig/test/parallel/test-child-process-spawnsync-args.js ++++ node-git.8252c06165/test/parallel/test-child-process-spawnsync-args.js @@ -12,6 +12,8 @@ const tmpdir = require('../common/tmpdir const assert = require('assert'); const { spawnSync } = require('child_process'); @@ -243,10 +230,10 @@ const command = common.isWindows ? 'cd' : 'pwd'; const options = { cwd: tmpdir.path }; -Index: node-v12.14.0/test/parallel/test-dns.js +Index: node-git.8252c06165/test/parallel/test-dns.js =================================================================== ---- node-v12.14.0.orig/test/parallel/test-dns.js -+++ node-v12.14.0/test/parallel/test-dns.js +--- node-git.8252c06165.orig/test/parallel/test-dns.js ++++ node-git.8252c06165/test/parallel/test-dns.js @@ -320,16 +320,6 @@ common.expectsError(() => { }); ++++++ node-v12.14.0.tar.xz -> node-v12.15.0.tar.xz ++++++ /work/SRC/openSUSE:Leap:15.2/nodejs12/node-v12.14.0.tar.xz /work/SRC/openSUSE:Leap:15.2/.nodejs12.new.26092/node-v12.15.0.tar.xz differ: char 26, line 1 ++++++ nodejs-libpath.patch ++++++ --- /var/tmp/diff_new_pack.xQMBvT/_old 2020-02-16 18:30:28.662785764 +0100 +++ /var/tmp/diff_new_pack.xQMBvT/_new 2020-02-16 18:30:28.662785764 +0100 @@ -1,7 +1,7 @@ -Index: node-v12.7.0/tools/install.py +Index: node-v13.2.0/tools/install.py =================================================================== ---- node-v12.7.0.orig/tools/install.py -+++ node-v12.7.0/tools/install.py +--- node-v13.2.0.orig/tools/install.py ++++ node-v13.2.0/tools/install.py @@ -7,6 +7,7 @@ import errno import os import shutil @@ -46,16 +46,16 @@ # behave similarly for systemtap action(['src/node.stp'], 'share/systemtap/tapset/') -Index: node-v12.7.0/lib/internal/modules/cjs/loader.js +Index: node-v13.2.0/lib/internal/modules/cjs/loader.js =================================================================== ---- node-v12.7.0.orig/lib/internal/modules/cjs/loader.js -+++ node-v12.7.0/lib/internal/modules/cjs/loader.js -@@ -902,7 +902,7 @@ Module._initPaths = function() { - } else { - prefixDir = path.resolve(process.execPath, '..', '..'); - } -- var paths = [path.resolve(prefixDir, 'lib', 'node')]; -+ var paths = ['/usr/lib/node']; +--- node-v13.2.0.orig/lib/internal/modules/cjs/loader.js ++++ node-v13.2.0/lib/internal/modules/cjs/loader.js +@@ -1247,7 +1247,7 @@ Module._initPaths = function() { + path.resolve(process.execPath, '..') : + path.resolve(process.execPath, '..', '..'); + +- let paths = [path.resolve(prefixDir, 'lib', 'node')]; ++ let paths = ['/usr/lib/node']; if (homeDir) { paths.unshift(path.resolve(homeDir, '.node_libraries'));
