5 Commits

Author SHA256 Message Date
73a2fc673d OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=151 2023-10-25 07:46:34 +00:00
499a268b35 - CVE-2022-35256.patch: update llhttp to 2.1.6
+ fixes CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + fixes incorrect parsing of header fields (CVE-2022-35256, bsc#1203832)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=145
2022-09-29 11:34:57 +00:00
32c06a7245 - New upstream LTS version 12.22.1:
* CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=123
2021-04-07 15:43:46 +00:00
61ac6c96d4 No longer in Factory
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=120
2021-02-09 15:12:32 +00:00
188d1d7f60 - Update to 12.1.0:
* intl: Update ICU to 64.2.
  * c++ API: Added an overload EmitAsyncDestroy that can be used
    during garbage collection
- Notable changes in 12.0.0:
  * assert:
    + validate required arguments
    + adjust loose assertions
  * async_hooks:
    + remove deprecated emitBefore and emitAfter
    + remove promise object from resource
  * bootstrap: make Buffer and process non-enumerable
  * buffer:
    + use stricter range checks
    + harden SlowBuffer creation
    + harden validation of buffer allocation size
    + do proper error propagation in addon methods
  * child_process:
    + remove options.customFds
    + harden fork arguments validation
    + use non-infinite maxBuffer defaults
  * console: don't use ANSI escape codes when TERM=dumb
  * crypto:
    + remove legacy native handles
    + decode missing passphrase errors
    + remove Cipher.setAuthTag() and Decipher.getAuthTag()
    + remove deprecated crypto._toBuf()
    + set DEFAULT_ENCODING property to non-enumerable
  * deps:
    + update V8 to 7.4.288.13

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=1
2019-05-10 13:00:29 +00:00