Hello community, here is the log from the commit of package nodejs10 for openSUSE:Leap:15.2 checked in at 2020-06-10 16:50:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/nodejs10 (Old) and /work/SRC/openSUSE:Leap:15.2/.nodejs10.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs10" Wed Jun 10 16:50:42 2020 rev:11 rq:813114 version:10.21.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/nodejs10/nodejs10.changes 2020-02-29 17:15:34.292934574 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.nodejs10.new.3606/nodejs10.changes 2020-06-10 16:50:48.592516656 +0200 @@ -1,0 +2,46 @@ +Thu Jun 4 11:29:50 UTC 2020 - Adam Majer <[email protected]> + +- New upstream LTS version 10.21.0: + * napi: fix various types of memory corruption in napi_get_value_string_*() + (CVE-2020-8174, bsc#1172443) + * http2: fix HTTP/2 Large Settings Frame DoS + (CVE-2020-11080, bsc#1172442) + * deps: ICU-20958 Prevent SEGV_MAPERR in append + (CVE-2020-10531, bsc#1166844) + +------------------------------------------------------------------- +Mon May 4 12:28:30 UTC 2020 - Adam Majer <[email protected]> + +- Reduce Requires to Recommends on nodejs10-devel when installing npm10 + +------------------------------------------------------------------- +Mon Apr 27 13:02:42 UTC 2020 - Adam Majer <[email protected]> + +- New upstream LTS version 10.20.1: + * buffer: add {read|write}Big[U]Int64{BE|LE} methods + * build: macOS package notarization + * deps: + + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598) + + upgrade openssl sources to 1.1.1e + + upgrade to libuv 1.34.2 + * n-api: + + add napi_get_all_property_names + + add APIs for per-instance state management + + define release 6 + + turn NAPI_CALL_INTO_MODULE into a function + * tls: + + expose keylog event on TLSSocket + + support TLS min/max protocol defaults in CLI + * url: handle quasi-WHATWG URLs in urlToOptions() + +- openssl_rand_regression.patch: upstreamed +- versioned.patch: refreshed + +------------------------------------------------------------------- +Mon Mar 2 09:43:10 UTC 2020 - Adam Majer <[email protected]> + +- openssl_rand_regression.patch: Add getrandom syscall definition + for all Linux platforms. This fixes a runtime error in SLE-12 + (bnc#1162117) + +------------------------------------------------------------------- Old: ---- node-v10.19.0.tar.xz New: ---- node-v10.21.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs10.spec ++++++ --- /var/tmp/diff_new_pack.PeLp4r/_old 2020-06-10 16:50:49.160518303 +0200 +++ /var/tmp/diff_new_pack.PeLp4r/_new 2020-06-10 16:50:49.164518315 +0200 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs10 -Version: 10.19.0 +Version: 10.21.0 Release: 0 %define node_version_number 10 @@ -158,8 +158,10 @@ %endif BuildRequires: pkg-config +BuildRequires: config(netcfg) -# Node.js 4/6/7 requires GCC 4.8.5+. +# SLE-11 target only +# Node.js 6 requires GCC 4.8.5+. # # For Node.js 8.x, upstream requires GCC 4.9.4+, as GCC 4.8 may have # slightly buggy C++11 support: https://github.com/nodejs/node/pull/13466 @@ -176,15 +178,26 @@ BuildRequires: gcc48-c++ %define cc_exec gcc-4.8 %define cpp_exec g++-4.8 -%endif # node >= 8 -%endif # sles == 11 +%endif +%endif +# sles == 11 block -# Use GCC 7, since it is in SLE-12:Update -%if %node_version_number >= 8 && 0%{?suse_version} == 1315 +# Pick and stick with "latest" compiler at time of LTS release +# for SLE-12:Update targets +%if 0%{?suse_version} == 1315 +%if %node_version_number >= 14 +BuildRequires: gcc9-c++ +%define cc_exec gcc-9 +%define cpp_exec g++-9 +%else +%if %node_version_number >= 8 BuildRequires: gcc7-c++ %define cc_exec gcc-7 %define cpp_exec g++-7 -%endif # node >= 8 and sle == 12 +%endif +%endif +%endif +# compiler selection # No special version defined, use default. %if ! 0%{?cc_exec:1} @@ -196,7 +209,9 @@ BuildRequires: xz BuildRequires: zlib-devel +# Python dependencies %if %node_version_number > 12 +BuildRequires: netcfg BuildRequires: python3 %else %if 0%{?suse_version} >= 1500 @@ -289,11 +304,11 @@ %package -n npm10 Summary: Package manager for Node.js Group: Development/Languages/NodeJS -Requires: %{name}-devel = %{version} +Recommends: %{name}-devel = %{version} Provides: nodejs-npm = %{version} Obsoletes: nodejs-npm < 4.0.0 Provides: npm = %{version} -Provides: npm(npm) = 6.13.4 +Provides: npm(npm) = 6.14.3 %if 0%{?suse_version} >= 1500 %if %{node_version_number} >= 10 Requires: group(nobody) @@ -524,6 +539,11 @@ export CXX=%{?cpp_exec} %endif +export NODE_TEST_NO_INTERNET=1 +%if %{node_version_number} >= 14 +find test \( -name \*.out -or -name \*.js \) -exec sed -i 's,Use `node ,Use `node%{node_version_number} ,' {} \; +%endif + ln addon-rpm.gypi deps/npm/node_modules/node-gyp/addon-rpm.gypi # Tarball doesn't have eslint package distributed, so disable some tests find test -name \*-eslint-\* -print -delete ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.PeLp4r/_old 2020-06-10 16:50:49.200518420 +0200 +++ /var/tmp/diff_new_pack.PeLp4r/_new 2020-06-10 16:50:49.204518431 +0200 @@ -1,36 +1,36 @@ -9040615d614cf4039f4abbd62c799877c3c2efd517e4100d6f13064d368a25a0 node-v10.19.0-aix-ppc64.tar.gz -b16328570651be44213a2303c1f9515fc506e0a96a273806f71ed000e3ca3cb3 node-v10.19.0-darwin-x64.tar.gz -91725d2ed64e4ccd265259e3e29a0e64a4d26d9d1cd9ba390e0cdec13ea7b02f node-v10.19.0-darwin-x64.tar.xz -e664f44dae563abdf9fa1eda0ce404dcc2109eb4d3cb3d5305516dca29f4c3b5 node-v10.19.0-headers.tar.gz -82a1796cc87ce66db92cdaa0e54f67c1e0c130ec4549a9591b9ff0edff618d10 node-v10.19.0-headers.tar.xz -3510172797b63bb6a7247f62a241bdfcf51fef8b1134eb7d3a27973e2008e482 node-v10.19.0-linux-arm64.tar.gz -77bdbf859fc38e6e860efd479b0a7b7b6bd3e7cb05337e5cc5638251eb5d3a59 node-v10.19.0-linux-arm64.tar.xz -96fa937b8d9a8a4e3c606b33e2d71a971f2069dc3fe6a9a038e7fa74f9444568 node-v10.19.0-linux-armv6l.tar.gz -6f650dc7610d7fee1cb6b5bd7339e94858d8d10ab324e17afc4d551008b36f0a node-v10.19.0-linux-armv6l.tar.xz -838a92c63c0bf7d5bb63fbd62b5902e1281ea4bcccbd2de65a8d57edd9b003a1 node-v10.19.0-linux-armv7l.tar.gz -7eeddc7815885f665ecbfe2cf8ae2e71fab601eefece229673126ef8da2965f5 node-v10.19.0-linux-armv7l.tar.xz -65f9cf15490b33b45dff08e984a0786cf82dba7e7e9bbd74a2cffb63506061d5 node-v10.19.0-linux-ppc64le.tar.gz -6a0701f1b03321fb5789c0d6d6ccd5b11579001ad56635354b89fc423b080de0 node-v10.19.0-linux-ppc64le.tar.xz -273e264ee6338a7a520dd739620cb3b5388c86f522a77a1bfff011c55a3a2984 node-v10.19.0-linux-s390x.tar.gz -014c3fac92b0e3546a4d3de3b05bb00f3d6839f529455419cccc554f4c40409e node-v10.19.0-linux-s390x.tar.xz -36d90bc58f0418f31dceda5b18eb260019fcc91e59b0820ffa66700772a8804b node-v10.19.0-linux-x64.tar.gz -34127c7c6b1ba02d6d4dc3a926f38a5fb88bb37fc7f051349005ce331c7a53c6 node-v10.19.0-linux-x64.tar.xz -60eeec991f02e5564d4047387117c6c1884aa8d247c538dc93c51e134eec467f node-v10.19.0.pkg -eb883a9c32b1352e42dafc503797a088fa881896a933785aff1b2e49643bde1f node-v10.19.0-sunos-x64.tar.gz -015f31e0b2adb742021bd61c0566b5bdbf95e0275200d609d9f64944779a4ae7 node-v10.19.0-sunos-x64.tar.xz -db85b9992f1ec66629731d82f690987883dd2989abb4cc136eb65dd720b1bda8 node-v10.19.0.tar.gz -622721bc3e6b65faf7eb6a22bfb6e3e31817e42212aa6bf5a7991ea7d9b6f169 node-v10.19.0.tar.xz -46bdca8ce90ac091590c3473ed9ac9d7e0ae2010696ffb93474c272f4db218ba node-v10.19.0-win-x64.7z -210efd45a7f79cf4c350d8f575f990becdd3833cd922796a4c83b27996f5679e node-v10.19.0-win-x64.zip -8e90b780567178244c0716af43604f3ac4475e8cf21246f9c63386acddf7f841 node-v10.19.0-win-x86.7z -afd176d4f022b6a5dbd4a908d42c6d85d4f739c040f65430ab3bf60b8f3b9a96 node-v10.19.0-win-x86.zip -6151538702d4bd106b66d28ce606f9faa2a8fc8baa50762bea0baec564b5e79e node-v10.19.0-x64.msi -eae8dc6511bd467729fef043167a18ca0843c9d1bab17c31a20b197b44d06251 node-v10.19.0-x86.msi -00047df9589b6a860886d653ed9f817852615211a53b9a2563ff3c56a5090fbf win-x64/node.exe -bfc277d24ebc27c87642b9f8fd2b4a312feaadf57a4a27e81734bcb49752163d win-x64/node.lib -3782acd379b59bca0009debdaa1bea3b28772518d7134c56279485c0a076d207 win-x64/node_pdb.7z -6de35811191c919c09cc11192a151ac0ecd76e3f5ec7f5f3f44d2a7d5feb177e win-x64/node_pdb.zip -5480ed6bb4c83a4284737ffeb4bfe27b5d342f182f2a52939bf0eee8d9c4fac4 win-x86/node.exe -3484dacb6a6aa89ec532eb9150e0a45a6c55453814cc2f32660504f120c7a42a win-x86/node.lib -a1953bc23236083e508c9e42672c457c3a21dd5a97addad7729481a965696c69 win-x86/node_pdb.7z -12c7d6b8a6c138dd36063c939867ef98713b16ad89d277f319ffdc9ec3932f6d win-x86/node_pdb.zip +73f0bc9348b2f70f2deed898843f7212f494b085ee3022ff67967005852130fa node-v10.21.0-aix-ppc64.tar.gz +596900700c4a0de0303bb4c378a1abcd63f31efc848704c5fbc1230de628577a node-v10.21.0-darwin-x64.tar.gz +36eec82a6cd881a937c94a2d03136c9836b39e254ab325840426acd5f3c5787c node-v10.21.0-darwin-x64.tar.xz +262f5bc158f7a58bf41d8871c50ae74d7cb3210f3a6b2efe3ba5f21ea33a08c8 node-v10.21.0-headers.tar.gz +c09501ddd41a8c63f00d4952e31842e49c23007271d157de27e5fce82418eff6 node-v10.21.0-headers.tar.xz +43f821147c18367c227ea63ce173ee3acfd3da1fa3ea0581f6de1a27ca5b7d4e node-v10.21.0-linux-arm64.tar.gz +3af40706ff0da7fe0baa4683ead6c74445405a2553e7373e627f24d19d4ac100 node-v10.21.0-linux-arm64.tar.xz +220dcfa45ddab2c0217260a15fb0d6d18ecd457503f05bb97420a05e4795a452 node-v10.21.0-linux-armv6l.tar.gz +4943467e94ac2aed354bf6156c9ac43491327143357cf483b27b40ba7d3a8970 node-v10.21.0-linux-armv6l.tar.xz +a8009ea75f05c0b5cb13a233b9a09a3c83fd1715ba2eae1464bd1472cae885db node-v10.21.0-linux-armv7l.tar.gz +28808565e8e3565a7d3f2ebebda4bf0f0c1e2e7e350e7d0a8de7b39b9da573cd node-v10.21.0-linux-armv7l.tar.xz +56d82acd26898515d2cc27e5102c0f7253ced7ff3e35078a0a0472d6c9cbaa45 node-v10.21.0-linux-ppc64le.tar.gz +661d36981206d239fb6d55056a662a00eb047056ffe0c2d6078937a09eeb60c5 node-v10.21.0-linux-ppc64le.tar.xz +fc5a87fb704474077997839c22f93c579f957335589fee5293a383dc94578be9 node-v10.21.0-linux-s390x.tar.gz +ff5d3aa06bae5caacdcedaf75c9d835de80d899f36a4e93933c6b06effb4481e node-v10.21.0-linux-s390x.tar.xz +d0bac246001eed9268ba9cadbfc6cfd8b6eb0728ad000a0f9fa7ce29e66c2be4 node-v10.21.0-linux-x64.tar.gz +1d3296763e46540047099e4910812e81c4899c0595f2d82474e2099c1e1603e2 node-v10.21.0-linux-x64.tar.xz +bcd05dab3974ccb680c571671493d198bd5cae0be43a63f565564e57947aacb8 node-v10.21.0.pkg +ec1d79603065a01aa017a5e519b56a5448d789142163284ec6dcc8ee3f6bc4b6 node-v10.21.0-sunos-x64.tar.gz +c785dc061fda08f493cc70fc532c2657521e76826ba20ba737d2263619a994de node-v10.21.0-sunos-x64.tar.xz +bee7497e29c6c8f350fdf7dfa198c97041c7bf8d57cc2b58dfbfe6607d1ebf8f node-v10.21.0.tar.gz +26b01fa28338cacaa8a66d7963ab2514e81678c268ab52ec55dcf937aadcb73b node-v10.21.0.tar.xz +8dd25c93f6549f877f51686dc00e2f481e82cd0c41ace7b43847f65ec03f8ea9 node-v10.21.0-win-x64.7z +03dddcdaccdb40978ddf15d189acdc20409d9a666636db2595118690ff83ce82 node-v10.21.0-win-x64.zip +52e17029a13ea91770f8726beb602e02f0e5e4a693d446d88e8ecd6b42893683 node-v10.21.0-win-x86.7z +1ed92df4f39d183b0dee5205813ba9a32b8aff3e6f55d7f4d65193659dbad248 node-v10.21.0-win-x86.zip +d4c14e6b7881f729eafc0f5e6a8accc51c71d2670ffdd02becc43abd1d1d3448 node-v10.21.0-x64.msi +bc9ed68a1124f607a3847d8ce5a8a0eeaa42a0ee8f4b3eecd5fe90f36ad70122 node-v10.21.0-x86.msi +1b4ea1d005370eaa851346964f635306e9521a4286c9c7aa405f26d242c4d5cb win-x64/node.exe +d9b47d93598cbc6abf4604be1a96aa6cdaae229edb2fcc01122ac1ad249e3f46 win-x64/node.lib +66e02891b481f0573d9fd858556f02eec645c0a2b944637e026ad26347df82f9 win-x64/node_pdb.7z +6c87ea7317144afc28140b9c2c8d4f46d28e5e98f357dfc2595887d63a32e021 win-x64/node_pdb.zip +f36ab2272283f07e7ec381d8b4ab4508b3b9a18ab9defb7c36d04bb92819a4e9 win-x86/node.exe +b058a3b0e6e47f12a2ade2b3a758f0778d52e02e7d114d89e10ad6091079e9f7 win-x86/node.lib +493b381b005327422bfa27590880eda49b03665b7286ded740d2dea9bb301692 win-x86/node_pdb.7z +cb55af47d6e8e95bdae433571e76b097a34485e033ec2d9afa295bc68d0b9fbc win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.PeLp4r/_old and /var/tmp/diff_new_pack.PeLp4r/_new differ ++++++ node-v10.19.0.tar.xz -> node-v10.21.0.tar.xz ++++++ /work/SRC/openSUSE:Leap:15.2/nodejs10/node-v10.19.0.tar.xz /work/SRC/openSUSE:Leap:15.2/.nodejs10.new.3606/node-v10.21.0.tar.xz differ: char 43, line 1 ++++++ versioned.patch ++++++ --- /var/tmp/diff_new_pack.PeLp4r/_old 2020-06-10 16:50:49.308518733 +0200 +++ /var/tmp/diff_new_pack.PeLp4r/_new 2020-06-10 16:50:49.308518733 +0200 @@ -8,10 +8,10 @@ This is also important for generation of binary modules for multiple versions of NodeJS -Index: node-v10.18.0/Makefile +Index: node-git.4390674624/Makefile =================================================================== ---- node-v10.18.0.orig/Makefile -+++ node-v10.18.0/Makefile +--- node-git.4390674624.orig/Makefile ++++ node-git.4390674624/Makefile @@ -43,7 +43,7 @@ BUILDTYPE_LOWER := $(shell echo $(BUILDT EXEEXT := $(shell $(PYTHON) -c \ "import sys; print('.exe' if sys.platform == 'win32' else '')") @@ -21,10 +21,10 @@ NODE ?= ./$(NODE_EXE) NODE_G_EXE = node_g$(EXEEXT) NPM ?= ./deps/npm/bin/npm-cli.js -Index: node-v10.18.0/tools/install.py +Index: node-git.4390674624/tools/install.py =================================================================== ---- node-v10.18.0.orig/tools/install.py -+++ node-v10.18.0/tools/install.py +--- node-git.4390674624.orig/tools/install.py ++++ node-git.4390674624/tools/install.py @@ -77,7 +77,7 @@ def install(paths, dst): map(lambda path def uninstall(paths, dst): map(lambda path: try_remove(path, dst), paths) @@ -125,10 +125,10 @@ def run(args): global node_prefix, install_path, target_defaults, variables -Index: node-v10.18.0/doc/node.1 +Index: node-git.4390674624/doc/node.1 =================================================================== ---- node-v10.18.0.orig/doc/node.1 -+++ node-v10.18.0/doc/node.1 +--- node-git.4390674624.orig/doc/node.1 ++++ node-git.4390674624/doc/node.1 @@ -30,24 +30,24 @@ .Dt NODE 1 . @@ -158,10 +158,10 @@ .Op Fl -v8-options . .\"====================================================================== -Index: node-v10.18.0/src/node.stp +Index: node-git.4390674624/src/node.stp =================================================================== ---- node-v10.18.0.orig/src/node.stp -+++ node-v10.18.0/src/node.stp +--- node-git.4390674624.orig/src/node.stp ++++ node-git.4390674624/src/node.stp @@ -19,7 +19,7 @@ // OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE // USE OR OTHER DEALINGS IN THE SOFTWARE. @@ -234,12 +234,12 @@ { scavenge = 1 << 0; compact = 1 << 1; -Index: node-v10.18.0/deps/npm/man/man1/npm.1 +Index: node-git.4390674624/deps/npm/man/man1/npm.1 =================================================================== ---- node-v10.18.0.orig/deps/npm/man/man1/npm.1 -+++ node-v10.18.0/deps/npm/man/man1/npm.1 +--- node-git.4390674624.orig/deps/npm/man/man1/npm.1 ++++ node-git.4390674624/deps/npm/man/man1/npm.1 @@ -1,11 +1,11 @@ - .TH "NPM" "1" "December 2019" "" "" + .TH "NPM" "1" "March 2020" "" "" .SH "NAME" -\fBnpm\fR \- javascript package manager +\fBnpm10\fR \- javascript package manager @@ -344,10 +344,10 @@ +npm10 help npmrc .RE -Index: node-v10.18.0/node.gyp +Index: node-git.4390674624/node.gyp =================================================================== ---- node-v10.18.0.orig/node.gyp -+++ node-v10.18.0/node.gyp +--- node-git.4390674624.orig/node.gyp ++++ node-git.4390674624/node.gyp @@ -22,8 +22,8 @@ 'node_shared_openssl%': 'false', 'node_v8_options%': '', @@ -359,10 +359,10 @@ 'node_intermediate_lib_type%': 'static_library', 'library_files': [ 'lib/internal/per_context.js', -Index: node-v10.18.0/src/node_main.cc +Index: node-git.4390674624/src/node_main.cc =================================================================== ---- node-v10.18.0.orig/src/node_main.cc -+++ node-v10.18.0/src/node_main.cc +--- node-git.4390674624.orig/src/node_main.cc ++++ node-git.4390674624/src/node_main.cc @@ -119,6 +119,7 @@ int main(int argc, char* argv[]) { #endif // Disable stdio buffering, it interacts poorly with printf() @@ -371,12 +371,12 @@ setvbuf(stdout, nullptr, _IONBF, 0); setvbuf(stderr, nullptr, _IONBF, 0); return node::Start(argc, argv); -Index: node-v10.18.0/deps/npm/man/man1/npx.1 +Index: node-git.4390674624/deps/npm/man/man1/npx.1 =================================================================== ---- node-v10.18.0.orig/deps/npm/man/man1/npx.1 -+++ node-v10.18.0/deps/npm/man/man1/npx.1 +--- node-git.4390674624.orig/deps/npm/man/man1/npx.1 ++++ node-git.4390674624/deps/npm/man/man1/npx.1 @@ -1,32 +1,32 @@ - .TH "NPX" "1" "April 2018" "[email protected]" "User Commands" + .TH "NPX" "1" "January 2020" "[email protected]" "User Commands" .SH "NAME" -\fBnpx\fR \- execute npm package binaries +\fBnpx10\fR \- execute npm package binaries @@ -459,10 +459,10 @@ .RE -Index: node-v10.18.0/tools/test.py +Index: node-git.4390674624/tools/test.py =================================================================== ---- node-v10.18.0.orig/tools/test.py -+++ node-v10.18.0/tools/test.py +--- node-git.4390674624.orig/tools/test.py ++++ node-git.4390674624/tools/test.py @@ -893,7 +893,7 @@ class Context(object): if self.vm is not None: return self.vm
