nodejs/nodejs12
SHA256
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
52 Commits 1 Branch 0 Tags
main
Commit Graph

9 Commits

Author SHA256 Message Date
Adam Majer
9f6873743e - update to 12.22.10 
* Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
      splitPathRe (bsc#1192153)
    + CVE-2021-23343 - node-tar: Insufficient symlink protection
      allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
      allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
      Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=138
 2022-02-16 14:35:41 +00:00
Adam Majer
cca3b8326b - update to 12.22.7: 
* deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
     bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
     bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=135
 2021-11-26 12:46:11 +00:00
Adam Majer
806fab5a08 - update to 12.22.4: 
http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=131
 2021-08-04 16:37:41 +00:00
Adam Majer
ea7b7e2bab - update to 12.22.2: 
* deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=130
 2021-07-06 08:54:43 +00:00
Adam Majer
32c06a7245 - New upstream LTS version 12.22.1: 
* CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=123
 2021-04-07 15:43:46 +00:00
Adam Majer
eb6043ea53 - New upstream LTS version 12.20.2: 
* deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=121
 2021-02-17 17:49:45 +00:00
Adam Majer
61ac6c96d4 No longer in Factory 
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=120
 2021-02-09 15:12:32 +00:00
Adam Majer
178bf0b14c - Update to 12.4.0: 
* esm: JSON module support is always enabled under
    --experimental-modules. The --experimental-json-modules flag
    has been removed
  * http, http2: A new flag has been added for overriding
    the default HTTP server socket timeout (which is two minutes).
    Pass --http-server-default-timeout=milliseconds or
    --http-server-default-timeout=0 to respectively change or
    disable the timeout. Starting with Node.js 13.0.0,
    the timeout will be disabled by default
  * inspector: Added an experimental --heap-prof flag to start
    the V8 heap profiler on startup and write the heap
    profile to disk before exit
  * stream: The readable.unshift() method now correctly converts
    strings to buffers. Additionally, a new optional argument is
    accepted to specify the string's encoding, such as 'utf8' or 'ascii'
  * v8: The object returned by v8.getHeapStatistics() has two
    new properties: number_of_native_contexts and number_of_detached_contexts
- nodejs-libpath.patch: install npx into proper directory
- versioned.patch, fix_ci_tests.patch: refreshed

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=10
 2019-06-11 13:11:16 +00:00
Adam Majer
188d1d7f60 - Update to 12.1.0: 
* intl: Update ICU to 64.2.
  * c++ API: Added an overload EmitAsyncDestroy that can be used
    during garbage collection
- Notable changes in 12.0.0:
  * assert:
    + validate required arguments
    + adjust loose assertions
  * async_hooks:
    + remove deprecated emitBefore and emitAfter
    + remove promise object from resource
  * bootstrap: make Buffer and process non-enumerable
  * buffer:
    + use stricter range checks
    + harden SlowBuffer creation
    + harden validation of buffer allocation size
    + do proper error propagation in addon methods
  * child_process:
    + remove options.customFds
    + harden fork arguments validation
    + use non-infinite maxBuffer defaults
  * console: don't use ANSI escape codes when TERM=dumb
  * crypto:
    + remove legacy native handles
    + decode missing passphrase errors
    + remove Cipher.setAuthTag() and Decipher.getAuthTag()
    + remove deprecated crypto._toBuf()
    + set DEFAULT_ENCODING property to non-enumerable
  * deps:
    + update V8 to 7.4.288.13

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs12?expand=0&rev=1
 2019-05-10 13:00:29 +00:00