From a71f18ab659243176754e1ea86102c3f8fff926c370165d28d4adf42131ee0d2 Mon Sep 17 00:00:00 2001
From: Adam Majer <amajer@suse.com>
Date: Tue, 28 May 2024 11:30:26 +0000
Subject: [PATCH] - Update to 21.7.3:   * fixes bsc#1222665, CVE-2024-27980 -
 windows only bug

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=29
---
 SHASUMS256.txt      |  80 ++++++++++++++++++++++----------------------
 SHASUMS256.txt.sig  | Bin 437 -> 438 bytes
 node-v21.7.2.tar.xz |   3 --
 node-v21.7.3.tar.xz |   3 ++
 nodejs21.changes    |   6 ++++
 nodejs21.spec       |  14 +++-----
 6 files changed, 53 insertions(+), 53 deletions(-)
 delete mode 100644 node-v21.7.2.tar.xz
 create mode 100644 node-v21.7.3.tar.xz

diff --git a/SHASUMS256.txt b/SHASUMS256.txt
index adb6ba7..fffe251 100644
--- a/SHASUMS256.txt
+++ b/SHASUMS256.txt
@@ -1,41 +1,41 @@
-6290bc006ee81332da8345b2d254ecf75674de0898a6dd5e348c7685ca0df325  node-v21.7.2-aix-ppc64.tar.gz
-92b1d9ecd1e4520a1ac82963719dd7fd80b3f250751e34d67a8a7553fd149720  node-v21.7.2-arm64.msi
-d00a2b5002db121d798f1c9556342abb6ec6a4fac9d6197bc86c922a796812ae  node-v21.7.2-darwin-arm64.tar.gz
-47784735ff348e9ca6eed5a1482d58582949f0ace7d74ba5d510ab763d5e1327  node-v21.7.2-darwin-arm64.tar.xz
-6211829236013582fb654b4b9f8c6528dcb07620f6f82878ef514fae1b30685e  node-v21.7.2-darwin-x64.tar.gz
-309457de4a2e87db456b5656383be8590d8a69aacd1e161015d98a88697a206f  node-v21.7.2-darwin-x64.tar.xz
-32bc006ce485d8726e72c666feb08de567098d881b8e79ee37fc9aa9854329c6  node-v21.7.2-headers.tar.gz
-66fa0952f5b207c1e1771492d04285a2199bf0dc756e392fe03d3be54ca3733d  node-v21.7.2-headers.tar.xz
-5cf1cb89feb40404adad999307659754dd17fc9afa6c086aaff690ecbf8af66c  node-v21.7.2-linux-arm64.tar.gz
-0a07d44da8324ad0514ccd4d588d5aa8d749d76b01b69d55343c2132d1efbe3b  node-v21.7.2-linux-arm64.tar.xz
-73df605f0aaa18c4a8e9789206d18045b277f4233f50837b1563f9b3dd50f696  node-v21.7.2-linux-armv7l.tar.gz
-8c23b9f1d6a9022b04cda94c85bbfd329a178d7710c1bbd25587a668078d9915  node-v21.7.2-linux-armv7l.tar.xz
-4ece271c97fc434c34328081245e406e23a23fed32868f90fe901f1a232a27bd  node-v21.7.2-linux-ppc64le.tar.gz
-11750d12cec45b7f7451b18dcd98ddcdce07afbb68db57bb0dc89e883b78ab6b  node-v21.7.2-linux-ppc64le.tar.xz
-9df7a1c8c9be7a7f4a62b822c3cbbc0f4c66ad185b7383c6bfb021e99a9441b0  node-v21.7.2-linux-s390x.tar.gz
-ba8e598921c29e2ff5efd6f42a3e11c765a77339ac7ef7e1b55c6aba95f3bf8b  node-v21.7.2-linux-s390x.tar.xz
-06b891c82c9b19b8d8553222de5de8afd43a38c1b898f9ca323e1d2e22da9075  node-v21.7.2-linux-x64.tar.gz
-9d55843dd4b2400fe4034de3281003de718dbd0c6f61ce6b53e94e987b16c9dc  node-v21.7.2-linux-x64.tar.xz
-f9e642aa9e729842b289c0314be8c7d468aca2994b1b8d8a8c2143382f1c4136  node-v21.7.2-win-arm64.7z
-a9a62973ac69adb98d62f5aa6d3a7ca668fb7b1a5c84833e93ff330eef1d972b  node-v21.7.2-win-arm64.zip
-a532dd8dae519c78100497f398621574431757afa933ab32d39b1ba3fcf44d9b  node-v21.7.2-win-x64.7z
-99102e5964c6cd3c3ba5562243dbfda8e1f265e7fff2489aa1d806074893d88a  node-v21.7.2-win-x64.zip
-9987f8a12d2cb0439a9def11b449793b372d4ff96acceb9321a736f5c57e5f41  node-v21.7.2-win-x86.7z
-ce346bb8e5d2722d653d8f6cee81fdcc80fb88c51ca945763ff12c7e4f659bbb  node-v21.7.2-win-x86.zip
-b936d30bbd0927157165fb09d2eaff2d939d1f13136bbddc50e64c31aa86b4ac  node-v21.7.2-x64.msi
-83b30683316bb2f8115d58af23b8bb154de9615632cf491fec6c365aff3b74f5  node-v21.7.2-x86.msi
-f75990a446cd3512c80598d815243592776a99ac7f4e5f2cbccc5cf1369b7cfe  node-v21.7.2.pkg
-dc1b18771e7ed3da051fc2242806bfde5ae02b63fe7205e80156e92de8f8fa3d  node-v21.7.2.tar.gz
-b4b1e2a07e96f85f6ce34a2fbfea348691aefe5cb219aa6951e23ccc991f9e2f  node-v21.7.2.tar.xz
-80541446e8ef8a2d26d73e4517afbb560717d47e4ed0d122fdddd90f8662da53  win-arm64/node.exe
-298d58a6fed36728a8d1b07f6fe3678c5a6faf4c77bdcd7288e155c117404eea  win-arm64/node.lib
-1881ceeab304bc003ed87c03a1206f9f9e7deb861a44af68361e493a23a5aec1  win-arm64/node_pdb.7z
-c7824ff2aea7a565d81d3ba0e2992497fd7a0f776f39179681f326d9b6eab75b  win-arm64/node_pdb.zip
-64b5a1e9101e6281f072b385691affbe45b2cb93ba84a592f1a9941d994e621f  win-x64/node.exe
+3ae059cab0a4f18ce79676bbc37112cd428b2f22ba66277bf12873ef9eb34143  node-v21.7.3-aix-ppc64.tar.gz
+e0f70657ad7ee7dac2b2b6e137b319a9967da95676567451f92d7a9f39e4cd65  node-v21.7.3-arm64.msi
+165d3ba3500cfc8708f85d3815aaaa21ce418164c933d5419c30825ccad3a99c  node-v21.7.3-darwin-arm64.tar.gz
+6725de89be5852b403456bba2892e3ef2f12cd533e129705d9f4ffcdfe763e05  node-v21.7.3-darwin-arm64.tar.xz
+58d0212e169764c3424d2d5bec73e8a098d34b4e82fca6e1dd54083ea3049c5f  node-v21.7.3-darwin-x64.tar.gz
+ab6efddd4a83be1be705ae519740d837582acb743bab53a361e5ba804a97a97d  node-v21.7.3-darwin-x64.tar.xz
+3211b00464b626e3a5890461edbae75488d5f02665834455eb2c019e54488588  node-v21.7.3-headers.tar.gz
+bb6a3602b2a2a7f6baaabb2c7a33be15a25cc3c85d1095f8d13c2e9795b894b6  node-v21.7.3-headers.tar.xz
+15390ba8509b71c0051e61f75a6fdb0a2eb38318c03a01bf60c93d33d414d138  node-v21.7.3-linux-arm64.tar.gz
+d48a76d02c5940a6dc0738bc0af22551d15cb58b30a5ddddb54fe6e00021f3c1  node-v21.7.3-linux-arm64.tar.xz
+89e430a705d0855b044ba42d3b48f052cffbd4530cc12029ed2965d299167151  node-v21.7.3-linux-armv7l.tar.gz
+5cceefa6803781a3f3fbb52e5e28e99b9bbaf3c7eac26950ea031a8f7c77c5fc  node-v21.7.3-linux-armv7l.tar.xz
+7421c811185c8b4e349af9eefb7c0d54b6451f82c0935e5207da334f8d00a133  node-v21.7.3-linux-ppc64le.tar.gz
+abdca8b36e378cbd7500fa3e839259cfa103db42d2b747948d69e70c28853f91  node-v21.7.3-linux-ppc64le.tar.xz
+837b88c7a1bf030ea210cafaa62d378ba464f5849ada47ad7afba9d95c225aec  node-v21.7.3-linux-s390x.tar.gz
+d4975ba2c87ece52d6d10aee8117b90a2d35412672997645be1b4e4594e9904b  node-v21.7.3-linux-s390x.tar.xz
+a64cbb12282cb60d35743ef4f51561f8d89946a5f0a484f99168f4de602d7c3d  node-v21.7.3-linux-x64.tar.gz
+19e17a77e59044de169cd19be3f3bccae686982fba022f9634421b44724ee90c  node-v21.7.3-linux-x64.tar.xz
+3de6fe25a494ed982adc81a585c88b62147a37d8ca74b26a184ff5959ebd771a  node-v21.7.3-win-arm64.7z
+686a1ed8ec076ec25e198b0e6e31fdd4198aaabbeb384ff137c1e3bf57664bc3  node-v21.7.3-win-arm64.zip
+22e771e992119ef5e6e1553601a301c6fe796a1485dae605ce10a5388834fea2  node-v21.7.3-win-x64.7z
+d2314f496782b53ad2fe5fa82fca6ff7f39f07fe59dd007116404ad92179c78e  node-v21.7.3-win-x64.zip
+17c50f9aaba6fe07f6468888614e36261a5b232333cd31478a6e33f243cddd49  node-v21.7.3-win-x86.7z
+e96df935994addbbb51228f1724e8411ea685cb60fa26d84cc7c5d74806c38da  node-v21.7.3-win-x86.zip
+de33d68e92e8948b96515bafee206d0b5c1f5440eb2e07aa15d6ce2f6493f53b  node-v21.7.3-x64.msi
+b152d667112572c7293408a6968429f20db117aef2f01d6ca652c0dcae9423b0  node-v21.7.3-x86.msi
+b8bccb2ec100c6db213d54deaa5aa064a254ec2f4730ca2810262caf425a9173  node-v21.7.3.pkg
+ce1f61347671ef219d9c2925313d629d3fef98fc8d7f5ef38dd4656f7d0f58e7  node-v21.7.3.tar.gz
+668b26fb1bfc1cff60622bbcf3d715843e16f50c8f30e9f64fb4141814d79a21  node-v21.7.3.tar.xz
+509c04ca7909d2bb715cab80e72da1b19f033eea0e0a84ea5de9145b6d3e75b9  win-arm64/node.exe
+0e271f1dff6290e15709869e78160b34277427f905f71afe621e6b22c06c0359  win-arm64/node.lib
+cff87c002f27b5d72722539749bc584192bc0f8c01d0d24e11501ee0df1c9e18  win-arm64/node_pdb.7z
+e826fdee0df83477d20aa73dbb930dfac03f43d9138b51940a1042cc43e833de  win-arm64/node_pdb.zip
+37901cb69f7de95891b5e5cead529393a18dc8886a7bb4c6c36e35ac955c70fa  win-x64/node.exe
 473d2b087bfa76b2746542c6c4bd019b0527545849e04cbc3d0872ebd9335f0a  win-x64/node.lib
-93d79e521d9f3513eee1cb9ad98f38c7b62b3845be285333ad3731cd50c983ab  win-x64/node_pdb.7z
-e8f7a31dae7239154e53f57e3b1545102b6905419c1545ffeed721509f95426c  win-x64/node_pdb.zip
-f16257e0cdae9de68cc3bff533ddac2bbfe42f3b7cba16a2a8fc1b40a98e3d3c  win-x86/node.exe
-8ecea23973c4e82d13c18f78f4e23beebac5b70f1d54c100d08d41f52ade421e  win-x86/node.lib
-6ddf27e2fcc6528a95fd5db9046a5629698714aeae43ff4e21d6b99904bb8cde  win-x86/node_pdb.7z
-91af5f3e3bb0e838a2c2e5c6a2d96331309fe52bb0897072774954eddc1976c4  win-x86/node_pdb.zip
+40f3e3f2bc1885ed318a70ffb4cae58358f09e4bc6da82227251d0133a015ce7  win-x64/node_pdb.7z
+2e39aa4be528bdc6182c1629d6ad7ebc57e7188a77963050df988b9116a7a7bc  win-x64/node_pdb.zip
+823764a39291d2693867c9d3cb953c660995b22f3ae4e5c1d164aa68c67c6609  win-x86/node.exe
+3b5733c6ef1ab0e6bc303eb01300c93d7671cb58e5991293bd9da732268b364b  win-x86/node.lib
+4f72d3d4448c66d71b5d016428ba385462d6e7ddac963c0b5ebb4e41ed0c2ca7  win-x86/node_pdb.7z
+a6c2907f9b3d5e6be1c06d8e98cdf20cd87de4481e3c68c71a50c225ecb05692  win-x86/node_pdb.zip
diff --git a/SHASUMS256.txt.sig b/SHASUMS256.txt.sig
index ecbebd5d9a683ec06769746396519623a24d1259ae0885fb6b6512cecf5e7773..d5bb95801f36e4e1540c260c413b4fbe318f2adce41a00b34f44cf46ef3faea3 100644
GIT binary patch
literal 438
zcmV;n0ZIOe0kZ@E0SEvc79j+Q3<%qWc@{734f)%P>a^d_RbKQ30%jJ!MgR&45R2-x
z-_KQE^jF^t{ymMn3S^*=eB<ebv;QIVupCaCuodtX^vxy~#V?Lr=8C_MU~ohxnZ0Y%
zsFa7lz*n>@?gb?RlLV2B7+7%AUUr+EoZjsr`B!<UEF!(KnHO7x%&mL>Iuvv3M`)Gl
zy16GT6iK;t6GidTZgGImSO5xtBFgj5gsCu!S^ekPY~mnpvHN)=l}N!L0^A*<m&AX?
zxc$t#5Nwig3{5sd9J0XUr_f4J@<tYmg#(|0*XS6S4Z&F>^3jV8;rZ<?@9Is)$ebEu
zE+(jTi}wSql<L*bGHDoS4(&^<v*#!CzfW(MDb6zf7x*|v6KAcxy{>Oj9UtvX49<ND
zp+z7n6%QB4kSZ**AX9!i|D{lMPKg&E3a-qp;O}l^B#%Xnd?ji$#WVfeCAxAA^1g$l
zR$@7rG9Xu(@7%7D2WvAksfy|lq?L3NcMN${#i-R4x@F7A%h~|0v&s2~PNB^BT7yN1
gaiK;r=tg9v9)k0j_tp5i?hr9@5|><&5oUly=WNW@3IG5A

literal 437
zcmV;m0ZRUf0kQ-D0SEvc79j+Q3<%qWc@{734f)%P>a^d_RbKQ30%i?kEC31#5R2-x
z-_KQE^jCNb_^)+s#eA~MKEeGZ$AbaKZbBnT{jj50u=4eB4{}QO7A3z(VqAaV=cTCB
z^?mWUqIs<h81v5kLsVG=#bUXcZ(V4E(|pbELwpB%sJNJapGO*{=!EeV)N~eJeI`h2
znUWSWgl|>BdxFwfS&V2RwDqdTlIrZHV;1@95QfblLkx;mzy6VM(Cqx2+5bz8OUXw(
ztvl*x#zeWF+4yeEAB+4JnIUR&(C^%KgyULJ@7tDb_iB37C;O90kq9~>gD@IN9%N4e
zU356Mqlx+U3WkVqtmO<QtLjUsY8_ysvy0xkW&J0ec%H2%A)wUbdb5Uy3ga9lxc!2|
zEc3OP#2rek?}Bfc&8)l?6XnBc=ZJ3)?QAO&cfJ8jFNWguTQRu_6@pH$Bs*3m`NZyh
z`ncqvwbJ=ruDoDt6$%}W9+te#t@D3ja_K&x5-LUP!Oe$LEgZeNOA0hHrRA~TS55|0
f8YAP{LC(L28h{_qAkkC(_9$x71tS{S2zHU;@-y5A

diff --git a/node-v21.7.2.tar.xz b/node-v21.7.2.tar.xz
deleted file mode 100644
index 085c215..0000000
--- a/node-v21.7.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b4b1e2a07e96f85f6ce34a2fbfea348691aefe5cb219aa6951e23ccc991f9e2f
-size 42378944
diff --git a/node-v21.7.3.tar.xz b/node-v21.7.3.tar.xz
new file mode 100644
index 0000000..0eba5b7
--- /dev/null
+++ b/node-v21.7.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:668b26fb1bfc1cff60622bbcf3d715843e16f50c8f30e9f64fb4141814d79a21
+size 42376664
diff --git a/nodejs21.changes b/nodejs21.changes
index 01cddc2..c7111b8 100644
--- a/nodejs21.changes
+++ b/nodejs21.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue May 28 11:25:35 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- Update to 21.7.3:
+  * fixes bsc#1222665, CVE-2024-27980 - windows only bug
+
 -------------------------------------------------------------------
 Tue Apr  9 14:13:21 UTC 2024 - Adam Majer <adam.majer@suse.de>
 
diff --git a/nodejs21.spec b/nodejs21.spec
index 96238a7..8159cf9 100644
--- a/nodejs21.spec
+++ b/nodejs21.spec
@@ -31,7 +31,7 @@
 %endif
 
 Name:           nodejs21
-Version:        21.7.2
+Version:        21.7.3
 Release:        0
 
 # Double DWZ memory limits
@@ -659,7 +659,7 @@ tar Jxf %{SOURCE11}
 %endif
 
 # downgrade node-gyp to last version that supports python 3.4 for SLE12
-%if 0%{?suse_version} && 0%{?suse_version} < 1500 && %{node_version_number} >= 16
+%if 0%{?suse_version} && 0%{?suse_version} < 1500 && %{node_version_number} >= 16 && %{node_version_number} < 22
 rm -r  deps/npm/node_modules/node-gyp
 mkdir deps/npm/node_modules/node-gyp
 pushd deps/npm/node_modules/node-gyp
@@ -674,6 +674,8 @@ popd
 
 %patch -P 1 -p1
 %patch -P 3 -p1
+%if 0%{?suse_version} < 1500
+%endif
 %if %{node_version_number} <= 12 && 0%{?suse_version} < 1500
 %patch -P 5 -p1
 %endif
@@ -771,9 +773,6 @@ EOF
 
 . ./spec.build.config
 
-# Node.js 4.x does not include the ICU database in the source tarball.
-%define has_small_icu %(test -d "deps/icu-small" && echo 1 || echo 0)
-
 ./configure \
     --prefix=%{_prefix} \
 %if 0%{?with nodejs_lto}
@@ -788,11 +787,6 @@ EOF
 %endif
 %if ! 0%{with intree_icu}
     --with-intl=system-icu \
-%else
-%if %{has_small_icu}
-    --with-intl=small-icu \
-    --with-icu-source=deps/icu-small \
-%endif
 %endif
 %if ! 0%{with intree_nghttp2}
     --shared-nghttp2 \