Hello community, here is the log from the commit of package nodejs10 for openSUSE:Factory checked in at 2020-06-11 14:46:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs10 (Old) and /work/SRC/openSUSE:Factory/.nodejs10.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs10" Thu Jun 11 14:46:23 2020 rev:23 rq:812980 version:10.21.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs10/nodejs10.changes 2020-05-05 18:54:47.953336324 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs10.new.3606/nodejs10.changes 2020-06-11 14:47:08.077807703 +0200 @@ -1,0 +2,21 @@ +Tue Jun 9 11:45:32 UTC 2020 - Adam Majer <[email protected]> + +- Add Require for nodejs10 when intalling npm10 (bsc#1172728) + +------------------------------------------------------------------- +Thu Jun 4 11:29:50 UTC 2020 - Adam Majer <[email protected]> + +- New upstream LTS version 10.21.0: + * napi: fix various types of memory corruption in napi_get_value_string_*() + (CVE-2020-8174, bsc#1172443) + * http2: fix HTTP/2 Large Settings Frame DoS + (CVE-2020-11080, bsc#1172442) + * deps: ICU-20958 Prevent SEGV_MAPERR in append + (CVE-2020-10531, bsc#1166844) + +------------------------------------------------------------------- +Mon May 4 12:28:30 UTC 2020 - Adam Majer <[email protected]> + +- Reduce Requires to Recommends on nodejs10-devel when installing npm10 + +------------------------------------------------------------------- @@ -8 +29 @@ - + update npm to 6.14.3 + + update npm to 6.14.3 (bsc#1166916, CVE-2020-7598) Old: ---- node-v10.20.1.tar.xz New: ---- node-v10.21.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs10.spec ++++++ --- /var/tmp/diff_new_pack.qD6Dx1/_old 2020-06-11 14:47:10.509814788 +0200 +++ /var/tmp/diff_new_pack.qD6Dx1/_new 2020-06-11 14:47:10.517814811 +0200 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs10 -Version: 10.20.1 +Version: 10.21.0 Release: 0 %define node_version_number 10 @@ -158,8 +158,10 @@ %endif BuildRequires: pkg-config +BuildRequires: config(netcfg) -# Node.js 4/6/7 requires GCC 4.8.5+. +# SLE-11 target only +# Node.js 6 requires GCC 4.8.5+. # # For Node.js 8.x, upstream requires GCC 4.9.4+, as GCC 4.8 may have # slightly buggy C++11 support: https://github.com/nodejs/node/pull/13466 @@ -176,15 +178,26 @@ BuildRequires: gcc48-c++ %define cc_exec gcc-4.8 %define cpp_exec g++-4.8 -%endif # node >= 8 -%endif # sles == 11 +%endif +%endif +# sles == 11 block -# Use GCC 7, since it is in SLE-12:Update -%if %node_version_number >= 8 && 0%{?suse_version} == 1315 +# Pick and stick with "latest" compiler at time of LTS release +# for SLE-12:Update targets +%if 0%{?suse_version} == 1315 +%if %node_version_number >= 14 +BuildRequires: gcc9-c++ +%define cc_exec gcc-9 +%define cpp_exec g++-9 +%else +%if %node_version_number >= 8 BuildRequires: gcc7-c++ %define cc_exec gcc-7 %define cpp_exec g++-7 -%endif # node >= 8 and sle == 12 +%endif +%endif +%endif +# compiler selection # No special version defined, use default. %if ! 0%{?cc_exec:1} @@ -196,6 +209,7 @@ BuildRequires: xz BuildRequires: zlib-devel +# Python dependencies %if %node_version_number > 12 BuildRequires: netcfg BuildRequires: python3 @@ -236,7 +250,7 @@ %endif %if ! 0%{with intree_nghttp2} -BuildRequires: libnghttp2-devel >= 1.39.2 +BuildRequires: libnghttp2-devel >= 1.41.0 %endif %if 0%{with valgrind_tests} @@ -290,7 +304,9 @@ %package -n npm10 Summary: Package manager for Node.js Group: Development/Languages/NodeJS -Requires: %{name}-devel = %{version} +Requires: %{name} = %{version} +Requires: nodejs-common +Recommends: %{name}-devel = %{version} Provides: nodejs-npm = %{version} Obsoletes: nodejs-npm < 4.0.0 Provides: npm = %{version} @@ -526,6 +542,9 @@ %endif export NODE_TEST_NO_INTERNET=1 +%if %{node_version_number} >= 14 +find test \( -name \*.out -or -name \*.js \) -exec sed -i 's,Use `node ,Use `node%{node_version_number} ,' {} \; +%endif ln addon-rpm.gypi deps/npm/node_modules/node-gyp/addon-rpm.gypi # Tarball doesn't have eslint package distributed, so disable some tests ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.qD6Dx1/_old 2020-06-11 14:47:10.561814939 +0200 +++ /var/tmp/diff_new_pack.qD6Dx1/_new 2020-06-11 14:47:10.561814939 +0200 @@ -1,36 +1,36 @@ -d25e795554942f467d6c3c3e22d3cd420aa3beac03adc71055c50c6cc41e79cf node-v10.20.1-aix-ppc64.tar.gz -6437e364cd93be246ffb67dd40775cbb467bb8d28d8af4413123f478bb6234b9 node-v10.20.1-darwin-x64.tar.gz -699f6c89e52a9eaba08b7769540a69cca19dfdc9aef16a2a569a20b198dd4b27 node-v10.20.1-darwin-x64.tar.xz -f2777bf2b140033c01d5f912df510dfa394e748f92bbaed24c832abf36cb3bdf node-v10.20.1-headers.tar.gz -9df57ca06f280ccbf1ffa083b39252f4eef20effbfac144fd9d2fd94d23f758a node-v10.20.1-headers.tar.xz -e0073e46fe85e389e7ddca990c99b27fbc1e833d00b1ee32561f0d104ab277f9 node-v10.20.1-linux-arm64.tar.gz -e33cafff94a6308916530b4b724bbc138399484d96f71b1c23677596bec268d0 node-v10.20.1-linux-arm64.tar.xz -33d53137cce5607c885ede9d838c8dcf9d5b3cf2b17d77ebf772124e0b623e10 node-v10.20.1-linux-armv6l.tar.gz -7a88676179b2e5dee7b88c81605f11b8e9f73556b3038a5f1f6109a5fbcef90f node-v10.20.1-linux-armv6l.tar.xz -ac6982bc6a9b299e9c8a9c9bf8ae6379bdba7796bfca6a3201ad5b6808514624 node-v10.20.1-linux-armv7l.tar.gz -2f220cef0a757351cde36881378ba79af4ca7ad324aebe3acee63602c135d752 node-v10.20.1-linux-armv7l.tar.xz -9387e0f272099d73f2f15940c54015837d8d047859360522637736888d70db2d node-v10.20.1-linux-ppc64le.tar.gz -6f51347f742d3ca3ae6a4907420f63323a7efc6c4d01b18e0c819667edfe8e7d node-v10.20.1-linux-ppc64le.tar.xz -2998055ccb29752564565c5e494bb1cc369248b7e3ae018f6636442b7f7cc3ec node-v10.20.1-linux-s390x.tar.gz -05e7577c8bf00f4a1b1118c80bb1ce5e014242fe62e84b189c176f3ee37b3c1c node-v10.20.1-linux-s390x.tar.xz -528643b0fc293ff32cf450dc2e5443a354967029d1536d96f9da4b34418e1e7a node-v10.20.1-linux-x64.tar.gz -5e0b1fbc6cf8c2c34dc33d880670ee1bc1c1e931099de3796a96143a962c92ee node-v10.20.1-linux-x64.tar.xz -91d589c6f091e64ce9b385c013fbe9f19c46bb85fa3c08c0f50d63e1dd26f9a3 node-v10.20.1.pkg -d181d2b64b7f0f14cab9d9313f6cf5b11b5ab4beece559dab58c295b4c6ae262 node-v10.20.1-sunos-x64.tar.gz -b31ee665de910d64234eedade819367097c20a4028941eef08ce536d78c5949b node-v10.20.1-sunos-x64.tar.xz -ea39a70b715bfbd0281979c95a5b81136ffdc0e5bf66b1fd7dc3ef3473ce2c5a node-v10.20.1.tar.gz -ee1f88a04c608aeda1299bbcb0895eebb6394e901f03398c377236905d95f492 node-v10.20.1.tar.xz -472902788bd99a5cb2f3f1385980578262442fe86590a5d51d26c4f0e87ae59d node-v10.20.1-win-x64.7z -5e4ec0936c51047c218c0c164cc80283cd36ecd40e0a6979281d395c1be8ee10 node-v10.20.1-win-x64.zip -0c67e4a67c4889670bb8fe11f7f2d99b24ef289c9d29ac5194675e93a684ff95 node-v10.20.1-win-x86.7z -e724cb12f0ef8429a3993868c50622e4b7ebf032fbc545748276a5eff1bc3841 node-v10.20.1-win-x86.zip -3bfc5ef20f4e93ec5bfb910c301101880d429409cd23e8f793618bf3caa5112b node-v10.20.1-x64.msi -61891d726a57c6dfdf1b78d1f73563dc02bb1edd4227e811fd4821fa0412341c node-v10.20.1-x86.msi -4d32dbf12acbe777eaa463dabd5b756e9d33e8d9330327f6e966082e2cfbecaf win-x64/node.exe -213d72051a68c37afc37a5d185a4c5bfacc985bc35331024e5f28635f084da70 win-x64/node.lib -70cabc7efeace6d172f007304b978a6a7399a480b5b965b7112fc127cedde687 win-x64/node_pdb.7z -7da481aa0077232000eaf15f6be654904d1596919bd9d22bd27f328dcb643c2b win-x64/node_pdb.zip -adb743373187ea7cba613e4e7688a4fd8d42398253c0e34f7e89028549d6cd05 win-x86/node.exe -e5224f36cf5ae52ee8532e383142073fd6c28866745e9967992de28cfbf5b63a win-x86/node.lib -16aee5fffe8bbf7f88cb723edad3cb2acb7722d6b9c885d7179bf5cb7d54f882 win-x86/node_pdb.7z -f6e811d82c02fdde86df1fb722bc584c0bb7fb3dbf76f97e4e7d0cb84334b589 win-x86/node_pdb.zip +73f0bc9348b2f70f2deed898843f7212f494b085ee3022ff67967005852130fa node-v10.21.0-aix-ppc64.tar.gz +596900700c4a0de0303bb4c378a1abcd63f31efc848704c5fbc1230de628577a node-v10.21.0-darwin-x64.tar.gz +36eec82a6cd881a937c94a2d03136c9836b39e254ab325840426acd5f3c5787c node-v10.21.0-darwin-x64.tar.xz +262f5bc158f7a58bf41d8871c50ae74d7cb3210f3a6b2efe3ba5f21ea33a08c8 node-v10.21.0-headers.tar.gz +c09501ddd41a8c63f00d4952e31842e49c23007271d157de27e5fce82418eff6 node-v10.21.0-headers.tar.xz +43f821147c18367c227ea63ce173ee3acfd3da1fa3ea0581f6de1a27ca5b7d4e node-v10.21.0-linux-arm64.tar.gz +3af40706ff0da7fe0baa4683ead6c74445405a2553e7373e627f24d19d4ac100 node-v10.21.0-linux-arm64.tar.xz +220dcfa45ddab2c0217260a15fb0d6d18ecd457503f05bb97420a05e4795a452 node-v10.21.0-linux-armv6l.tar.gz +4943467e94ac2aed354bf6156c9ac43491327143357cf483b27b40ba7d3a8970 node-v10.21.0-linux-armv6l.tar.xz +a8009ea75f05c0b5cb13a233b9a09a3c83fd1715ba2eae1464bd1472cae885db node-v10.21.0-linux-armv7l.tar.gz +28808565e8e3565a7d3f2ebebda4bf0f0c1e2e7e350e7d0a8de7b39b9da573cd node-v10.21.0-linux-armv7l.tar.xz +56d82acd26898515d2cc27e5102c0f7253ced7ff3e35078a0a0472d6c9cbaa45 node-v10.21.0-linux-ppc64le.tar.gz +661d36981206d239fb6d55056a662a00eb047056ffe0c2d6078937a09eeb60c5 node-v10.21.0-linux-ppc64le.tar.xz +fc5a87fb704474077997839c22f93c579f957335589fee5293a383dc94578be9 node-v10.21.0-linux-s390x.tar.gz +ff5d3aa06bae5caacdcedaf75c9d835de80d899f36a4e93933c6b06effb4481e node-v10.21.0-linux-s390x.tar.xz +d0bac246001eed9268ba9cadbfc6cfd8b6eb0728ad000a0f9fa7ce29e66c2be4 node-v10.21.0-linux-x64.tar.gz +1d3296763e46540047099e4910812e81c4899c0595f2d82474e2099c1e1603e2 node-v10.21.0-linux-x64.tar.xz +bcd05dab3974ccb680c571671493d198bd5cae0be43a63f565564e57947aacb8 node-v10.21.0.pkg +ec1d79603065a01aa017a5e519b56a5448d789142163284ec6dcc8ee3f6bc4b6 node-v10.21.0-sunos-x64.tar.gz +c785dc061fda08f493cc70fc532c2657521e76826ba20ba737d2263619a994de node-v10.21.0-sunos-x64.tar.xz +bee7497e29c6c8f350fdf7dfa198c97041c7bf8d57cc2b58dfbfe6607d1ebf8f node-v10.21.0.tar.gz +26b01fa28338cacaa8a66d7963ab2514e81678c268ab52ec55dcf937aadcb73b node-v10.21.0.tar.xz +8dd25c93f6549f877f51686dc00e2f481e82cd0c41ace7b43847f65ec03f8ea9 node-v10.21.0-win-x64.7z +03dddcdaccdb40978ddf15d189acdc20409d9a666636db2595118690ff83ce82 node-v10.21.0-win-x64.zip +52e17029a13ea91770f8726beb602e02f0e5e4a693d446d88e8ecd6b42893683 node-v10.21.0-win-x86.7z +1ed92df4f39d183b0dee5205813ba9a32b8aff3e6f55d7f4d65193659dbad248 node-v10.21.0-win-x86.zip +d4c14e6b7881f729eafc0f5e6a8accc51c71d2670ffdd02becc43abd1d1d3448 node-v10.21.0-x64.msi +bc9ed68a1124f607a3847d8ce5a8a0eeaa42a0ee8f4b3eecd5fe90f36ad70122 node-v10.21.0-x86.msi +1b4ea1d005370eaa851346964f635306e9521a4286c9c7aa405f26d242c4d5cb win-x64/node.exe +d9b47d93598cbc6abf4604be1a96aa6cdaae229edb2fcc01122ac1ad249e3f46 win-x64/node.lib +66e02891b481f0573d9fd858556f02eec645c0a2b944637e026ad26347df82f9 win-x64/node_pdb.7z +6c87ea7317144afc28140b9c2c8d4f46d28e5e98f357dfc2595887d63a32e021 win-x64/node_pdb.zip +f36ab2272283f07e7ec381d8b4ab4508b3b9a18ab9defb7c36d04bb92819a4e9 win-x86/node.exe +b058a3b0e6e47f12a2ade2b3a758f0778d52e02e7d114d89e10ad6091079e9f7 win-x86/node.lib +493b381b005327422bfa27590880eda49b03665b7286ded740d2dea9bb301692 win-x86/node_pdb.7z +cb55af47d6e8e95bdae433571e76b097a34485e033ec2d9afa295bc68d0b9fbc win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.qD6Dx1/_old and /var/tmp/diff_new_pack.qD6Dx1/_new differ ++++++ node-v10.20.1.tar.xz -> node-v10.21.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs10/node-v10.20.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs10.new.3606/node-v10.21.0.tar.xz differ: char 26, line 1
