- CVE-2024-30261.patch: update undici to v5.28.4 (bsc#1222530, bsc#1222603,

CVE-2024-30260, CVE-2024-30261)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs16?expand=0&rev=103

nodejs16.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon May 27 11:44:37 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- CVE-2024-30261.patch: update undici to v5.28.4 (bsc#1222530, bsc#1222603,
+  CVE-2024-30260, CVE-2024-30261)
+
 -------------------------------------------------------------------
 Thu Apr 11 10:51:31 UTC 2024 - Adam Majer <adam.majer@suse.de>
 

nodejs16.spec

@@ -163,6 +163,7 @@ Patch75:        CVE-2024-22019.patch
 Patch76:        CVE-2023-46809.patch
 Patch77:        CVE-2024-27983.patch
 Patch78:        CVE-2024-27982.patch
+Patch79:        CVE-2024-30261.patch
 
 ## Patches specific to SUSE and openSUSE
 Patch100:       linker_lto_jobs.patch
@@ -404,7 +405,7 @@ Provides:       bundled(node-busboy) = 1.6.0
 Provides:       bundled(node-cjs-module-lexer) = 1.2.2
 Provides:       bundled(node-corepack) = 0.17.0
 Provides:       bundled(node-streamsearch) = 1.1.0
-Provides:       bundled(node-undici) = 5.22.1
+Provides:       bundled(node-undici) = 5.28.4
 
 %description
 Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js
@@ -674,7 +675,7 @@ tar Jxf %{SOURCE11}
 %endif
 
 # downgrade node-gyp to last version that supports python 3.4 for SLE12
-%if 0%{?suse_version} && 0%{?suse_version} < 1500 && %{node_version_number} >= 16
+%if 0%{?suse_version} && 0%{?suse_version} < 1500 && %{node_version_number} >= 16 && %{node_version_number} < 22
 rm -r  deps/npm/node_modules/node-gyp
 mkdir deps/npm/node_modules/node-gyp
 pushd deps/npm/node_modules/node-gyp
@@ -798,9 +799,6 @@ EOF
 
 . ./spec.build.config
 
-# Node.js 4.x does not include the ICU database in the source tarball.
-%define has_small_icu %(test -d "deps/icu-small" && echo 1 || echo 0)
-
 ./configure \
     --prefix=%{_prefix} \
 %if 0%{?with nodejs_lto}
@@ -815,11 +813,6 @@ EOF
 %endif
 %if ! 0%{with intree_icu}
     --with-intl=system-icu \
-%else
-%if %{has_small_icu}
-    --with-intl=small-icu \
-    --with-icu-source=deps/icu-small \
-%endif
 %endif
 %if ! 0%{with intree_nghttp2}
     --shared-nghttp2 \