adamm/nodejs20
SHA256
1
0
Fork 0
Code Pull Requests Activity

- Update to 20.12.1:

Browse Source 
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
    leads to HTTP/2 server crash- (High) (bsc#1222244)
  * CVE-2024-27982 - HTTP Request Smuggling via Content Length
    Obfuscation- (Medium) (bsc#1222384)
  * updated dependencies:
    + llhttp version 9.2.1
    + undici version 5.28.4 (bsc#1222530, CVE-2024-30260)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs20?expand=0&rev=75
This commit is contained in:
Adam Majer 2024-04-09 14:43:25 +00:00 committed by Git OBS Bridge
parent 5191972b49
commit 3c2da24458
6 changed files with 73 additions and 67 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
SHASUMS256.txt
View File

@ -1,41 +1,41 @@
8d2ce67d19e2eafe7581f5865382f19ce7f6e66c1d19ed451b7290dcb7b74bd9 node-v20.12.0-aix-ppc64.tar.gz
fb834931c0d6f71a8d352c37a0e56be1dc4a93544eba75e8098df02e16b9deb8 node-v20.12.0-arm64.msi
422a74b7ede14b697a8c2ca887ea161fe79898a35f163fdfb98435c5ab25027b node-v20.12.0-darwin-arm64.tar.gz
a45292e27d492ed3d4ede74cc73c6edcf6ff10b61fbf89108adf0df39a3ccbe8 node-v20.12.0-darwin-arm64.tar.xz
5c7d71a1c1cf613037432e0b6c3d913d96604d9293b3397ec70b344730c81daf node-v20.12.0-darwin-x64.tar.gz
81fb96bc67a92624c09998f9566ae5c8d64e916aa3cd8a0c75f868d43566d539 node-v20.12.0-darwin-x64.tar.xz
aa2d7c2734287fbb757d2e64050ad8454b68ea6eda3c870b5cb386daf059e354 node-v20.12.0-headers.tar.gz
c07c342b85b6ae78b00269e7d39c3f65c8680181d4a6bc0dcbd605dc77a1ace4 node-v20.12.0-headers.tar.xz
8e180526df8ad4086a4df7bfaaa14d21eb2a6cf58b1c5493c639022c165c2884 node-v20.12.0-linux-arm64.tar.gz
007ca2699cf6e84290e5bed844ed66ef9d707d23561dfaf117212b7dce216ba7 node-v20.12.0-linux-arm64.tar.xz
259626b4825d9abba3721941d97f56f10ca7c56757a2468835e40b6fe4520757 node-v20.12.0-linux-armv7l.tar.gz
668fb421a24be596c98f00a31049fbf6ada14d221b7382e0f1caa55ab421431a node-v20.12.0-linux-armv7l.tar.xz
767d6150c086fcdeb9f689b9f487194e3fb459a6ec4e5668d51a051fce67a161 node-v20.12.0-linux-ppc64le.tar.gz
78dc3b7ad993c332684802e35c1f0de2b76193d13394bc89e3bab216828587c7 node-v20.12.0-linux-ppc64le.tar.xz
d14fc89595949a6bde905158ad54f77f1be3b3341dc9876699f5fa77a5397e9e node-v20.12.0-linux-s390x.tar.gz
c271eeb99c98e13428b493b5ffc50ab949e1a282bf679fe3667097f86301961e node-v20.12.0-linux-s390x.tar.xz
b6b998947595c9550d6b89c815a68d608f5920275f1b48812f89792de3fdd893 node-v20.12.0-linux-x64.tar.gz
0a126adf5b6a5eb11a37bad76a0c626a18f20b6811322e68aae0e3cf9bf580bd node-v20.12.0-linux-x64.tar.xz
5081a9af0049b7137aa05e43b58dd81dc922ede26301b7e03e89f329f530b34c node-v20.12.0.pkg
6d81620a0d328ec3039184ad2f5a0fc340ed44a59e90947765567346671525e7 node-v20.12.0.tar.gz
76e5346cebfd581528f699f764f4d1a6e87cb818b696708f235ddcb625a0f78d node-v20.12.0.tar.xz
96690fd6580aa8df8883ae7283c5702d7774441d7ba6b761901047d51760017d node-v20.12.0-win-arm64.7z
d4115d4d533998d83aad50e68964e19c25df4d7b413b672e5a602b68c2b37830 node-v20.12.0-win-arm64.zip
2f623dac976071ef7a9cbf26081fd21b07349d234287bc863d690d4cf2adbe01 node-v20.12.0-win-x64.7z
85db3df652459e380edbbc57973c00c1e15626d354a9ae6ddfc45d27cc573584 node-v20.12.0-win-x64.zip
47e57d5409b6dba0ab72868fc6691345ded1a54c3f6b0d724410bfdcb976d383 node-v20.12.0-win-x86.7z
d52d99cabc2656680ff9abb390d4edd4cb3700a2f8542913b2d576c4ad2cec76 node-v20.12.0-win-x86.zip
937432cb688794cd1acb205bb60322dae5da1ff21b07d5f89c3c5218a1814512 node-v20.12.0-x64.msi
7736df30cbf133ab83d134e7feef71716c35cde662155c407c7bc9c709dd99a7 node-v20.12.0-x86.msi
08c6c69177c7fefd129d84ba178a8fd1aeb32416658b1ae469ffcd4d907d0218 win-arm64/node.exe
2a75c3cc9ed139b2ee82be709a04c171ed2d96d962082d4ab5fbf7f486846f4f node-v20.12.1-aix-ppc64.tar.gz
70f9921efbebd58dbcc77ee40d1e64fb6d27bb48a5befdcad9ad172287315df4 node-v20.12.1-arm64.msi
65df8cb0724e3a58c7757b75a70cc1057e1f67ffc5e852bfe6241de0b37c70a0 node-v20.12.1-darwin-arm64.tar.gz
f8a9a78dd9130db80844132bcef6045ceaa51166fc8f4223a97d82a99b87a946 node-v20.12.1-darwin-arm64.tar.xz
f5dc3c71c87c58c9b019d9f85302db3a6a6c47167c5a0480b697f153d02ac316 node-v20.12.1-darwin-x64.tar.gz
7ca444b4f05c588f27eb96e960dd07de98c18e20aaad2c05ef6cf2cee2f2a71a node-v20.12.1-darwin-x64.tar.xz
170844da1e1e2c853ae8e998734ce2a4d888d922aa575975d279104b81455f46 node-v20.12.1-headers.tar.gz
172cbe26f23b4f7d28dc4cdc1e05fa8c9586bc0be113a599be770f723b13e556 node-v20.12.1-headers.tar.xz
6eb199eaa4f83a729242c69792a126cb58ca6a60d791dffd9cedb4cfd32b96c0 node-v20.12.1-linux-arm64.tar.gz
cce8245b22953495efa105bf37621cfee0b62d76e330bd7899a0e702676a884b node-v20.12.1-linux-arm64.tar.xz
d4058aee344df896215eabbf367bbc9bf6504531e75016081565416c6e335e2a node-v20.12.1-linux-armv7l.tar.gz
01a98fbebd2e31a1de4aa174215765f4d906a920ec4120becbb4b572e1b379a5 node-v20.12.1-linux-armv7l.tar.xz
f79c53a39c559e35da24e67a9ca85557bc54a0560a34bea67c4610ac7007ac0c node-v20.12.1-linux-ppc64le.tar.gz
31e4ad7a8696bb2b8cc0169db1657149a19a759e70cd9997d1aeed2d7e825cc4 node-v20.12.1-linux-ppc64le.tar.xz
2cc1c25374995aed79194a50166927dcb2b10473683407a173119d45c42de419 node-v20.12.1-linux-s390x.tar.gz
8bf2fe299750f4591cd3b96f83fa591894550fcce7601b2c682c87f73b1a94ce node-v20.12.1-linux-s390x.tar.xz
da2f590a39717792dcf8c4bf6b9e4b269601e6ce3a3f150a3c4b379f7eea6d83 node-v20.12.1-linux-x64.tar.gz
042844eeea4e19fa46687cc028dd5e323602d81784a9da8386c24463e3984e11 node-v20.12.1-linux-x64.tar.xz
17efd39f30e46b82ce94061ccee058fce3e1c3f1e5538a3f30463c52e5ab82e8 node-v20.12.1-win-arm64.7z
70a8d7a444ffd87f2d06477ccb20c58d8791caaf7be4a1eddf5a9578c81b8028 node-v20.12.1-win-arm64.zip
2628e9698f3bdada3fd36096fba0433fbd8f85832350bd5d2537f8f0ac50320f node-v20.12.1-win-x64.7z
629e2619ef88c5a8ce9944201f00ca3124f079c43ceef7ab0826c6fd19e09d75 node-v20.12.1-win-x64.zip
552c6fec6a0b28e9c49ad8574e4e67c35d9cfa718a3f940552e594e948caa6d9 node-v20.12.1-win-x86.7z
5883ad36b8607801cdb4d5aa6b6c0683df782daecda3ad761204916fbcea860c node-v20.12.1-win-x86.zip
d0a6cfef17f54ceb4cff874cae03725259c2ac62999a97add026bb0e65271065 node-v20.12.1-x64.msi
8cfaf9c5ca56b469ad8a7d9e2119cbfdc086168651b2355946c6b6beac529be9 node-v20.12.1-x86.msi
b1f762be19806ab5070e0df75f585da48238edc1dcf86c57d09a3e16db270fac node-v20.12.1.pkg
b9bef0314e12773ef004368ee56a2db509a948d4170b9efb07441bac1f1407a0 node-v20.12.1.tar.gz
6840d490ba4d1d51655e0fbe1209956a15db405510d7ea166bad98a8c9d37a4e node-v20.12.1.tar.xz
73d58b74b79875417f20c73b0d64087d4e1cf817cd718959dafec76340b36616 win-arm64/node.exe
e780ac993543d4705ba5bffa79a53854fcb5e77b6845464074ca590dab194539 win-arm64/node.lib
d92d73d5cfd55ad8779a0a6003b0d1b6b660e5d863852ef91374afb9defa49dc win-arm64/node_pdb.7z
c38a950487156e304f11855eb677df5d32287857d374134b5315723691439178 win-arm64/node_pdb.zip
17bbe2cf844b2f2e00f1ef1c5fd136590c002ec1c11f9ff2933912845158d44c win-x64/node.exe
caf3833e5f15e703b91ff1720bb3b350c42f6c3dec8820d2b8fa43d7bf06553a win-x64/node.lib
985b712a8bec222e3d352895f16900fa57bd02116092ebf8a8eca1b55be14f04 win-x64/node_pdb.7z
25a372eaba2ad6c3bf4f3c98a4dbdda083609b6df553c1e658284c3f413fdbfd win-x64/node_pdb.zip
cc3b2d8efe6e004938b8a9fe07f9d2de7153b8c6dca4f1d23beec8e15987fd58 win-x86/node.exe
d4c3d7656ef310e538dcb372e99393fdce9bbce783cb03e12bf638c166d994a5 win-x86/node.lib
37f1e21a79655b577a96985df76cb008cb98db74c311998b8831246d4331e2a7 win-x86/node_pdb.7z
12d8fe239dcbdee9aff0bf28b509f5e86873e8de2147f61b2a624c7a6a0267fb win-x86/node_pdb.zip
d20319df9c67ffbed2866cd41f86b94570368f1e62fcd7cc6aaf813bd978a00a win-arm64/node_pdb.7z
6da9206f3cba1f6ff0551f1ce61ab9832d11f151d97ee1870fd17e0c09b8edf8 win-arm64/node_pdb.zip
ea392e1b5503f2294c24f2ff17a01471faab98c3ec67d75df5754bb6ee0a7b71 win-x64/node.exe
c6e9da74f78f98a465edfb8b51c84c9d33a047a71c4624a854b2af2b4e6a0d50 win-x64/node.lib
0966f51fc43f851ddd1a8581480be83c730abf7ade1a7744c702fcfcff965759 win-x64/node_pdb.7z
f8f78377ce2cc73f84dae58955caaa876b39a1a1c36bde48edad7469165bd205 win-x64/node_pdb.zip
a59bacb81d7440f0b4897d0cb86637a485876be98e6b2be7a476736e81364ce7 win-x86/node.exe
08399fc4d42a0ce0bad33dd9a9bcc9c845bfb0d5d1393e8c330b5a243411d8a9 win-x86/node.lib
66d0e23c21410cd35a1cd61ac4ada5fa3d8f3dd38a2de53c337b689ba71a23c6 win-x86/node_pdb.7z
47c9d17824c96cc51585d5f693be97ba4f9d674ab86548f1af78143fc862b008 win-x86/node_pdb.zip

BIN
SHASUMS256.txt.sig
View File

Binary file not shown.

3
node-v20.12.0.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:76e5346cebfd581528f699f764f4d1a6e87cb818b696708f235ddcb625a0f78d
size 41829480

BIN
node-v20.12.1.tar.xz (Stored with Git LFS) Normal file
View File

Binary file not shown.

9
nodejs20.changes
View File

@ -1,6 +1,15 @@
-------------------------------------------------------------------
Tue Apr 9 12:30:22 UTC 2024 - Adam Majer <adam.majer@suse.de>
- Update to 20.12.1:
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
leads to HTTP/2 server crash- (High) (bsc#1222244)
* CVE-2024-27982 - HTTP Request Smuggling via Content Length
Obfuscation- (Medium) (bsc#1222384)
* updated dependencies:
+ llhttp version 9.2.1
+ undici version 5.28.4 (bsc#1222530, CVE-2024-30260)
- node-gyp-addon-gypi.patch: adapted for new unit test layouts
-------------------------------------------------------------------

45
nodejs20.spec
View File

@ -31,7 +31,7 @@
%endif
Name: nodejs20
Version: 20.12.0
Version: 20.12.1
Release: 0
# Double DWZ memory limits
@ -379,7 +379,7 @@ BuildRequires: pkgconfig(libbrotlidec)
%endif
Provides: bundled(llhttp) = 8.1.1
Provides: bundled(llhttp) = 8.1.2
Provides: bundled(ngtcp2) = 0.8.1
Provides: bundled(base64) = 0.5.2
Provides: bundled(simdutf) = 4.0.8
@ -387,16 +387,13 @@ Provides: bundled(simdutf) = 4.0.8
# bundled url-ada parser, not ada
Provides: bundled(ada) = 2.7.6
Provides: bundled(node-@fastify/busboy) = 2.1.0
Provides: bundled(node-@fastify/busboy) = 2.1.1
Provides: bundled(node-acorn) = 8.11.3
Provides: bundled(node-acorn-walk) = 8.3.2
Provides: bundled(node-busboy) = 1.6.0
Provides: bundled(node-cjs-module-lexer) = 1.2.2
Provides: bundled(node-corepack) = 0.25.2
Provides: bundled(node-minimatch) = 9.0.3
Provides: bundled(node-streamsearch) = 1.1.0
Provides: bundled(node-undici) = 5.28.3
Provides: bundled(node-undici-types) = 5.25.1
Provides: bundled(node-undici) = 5.28.4
%description
Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js
@ -671,39 +668,39 @@ tar Jxf %{SOURCE5}
popd
%if %{node_version_number} >= 19
%patch308 -p1
%patch -P 308 -p1
%else
%endif
%endif
%patch1 -p1
%patch3 -p1
%patch -P 1 -p1
%patch -P 3 -p1
%if %{node_version_number} <= 12 && 0%{?suse_version} < 1500
%patch5 -p1
%patch -P 5 -p1
%endif
%patch7 -p1
%patch -P 7 -p1
%if 0%{with valgrind_tests}
%endif
%patch13 -p1
%patch100 -p1
%patch101 -p1
%patch -P 13 -p1
%patch -P 100 -p1
%patch -P 101 -p1
%if 0%{?suse_version} >= 1500 || 0%{?suse_version} == 0
%patch102 -p1
%patch -P 102 -p1
%endif
# Add check_output to configure script (not part of Python 2.6 in SLE11).
%if 0%{?suse_version} == 1110
%endif
%patch104 -p1
%patch106 -p1
%patch110 -p1
%patch120 -p1
%patch132 -p1
%patch -P 104 -p1
%patch -P 106 -p1
%patch -P 110 -p1
%patch -P 120 -p1
%patch -P 132 -p1
%if ! 0%{with openssl_RSA_get0_pss_params}
%endif
%patch200 -p1
%patch -P 200 -p1
%patch305 -p1
%patch309 -p1
%patch -P 305 -p1
%patch -P 309 -p1
%if %{node_version_number} == 12
# minimist security update - patch50