Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 98b49ec96f Syncing ARM fixes main Adam Majer 2020-01-07 17:00:37 +00:00
• f5e1c839f2 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=109 Adam Majer 2019-10-25 11:47:31 +00:00
• 2d083583c0 - CVE-2019-13173.patch: fix potential file overwrite via hardlink in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173) Adam Majer 2019-07-29 09:14:52 +00:00
• 8eeb6a8320 Fix typo in patch name Adam Majer 2019-03-04 11:50:22 +00:00
• f6cb000be3 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=106 Adam Majer 2019-03-04 10:54:06 +00:00
• a3999ac2a7 Backport security fixes from NodeJS 6.x: * deps: upgrade OpenSSL source to 1.0.2r. Under certain circumstances, a TLS server can be forced to respond differently to a client if a zero-byte record is received with an invalid padding compared to a zero-byte record with an invalid MAC. This can be used as the basis of a padding oracle attack to decrypt data. (openssl_1_0_2q.patch - CVE-2019-1559, bsc#1127080) * http: (http-keep-alive.patch) + Backport server.keepAliveTimeout to prevent keep-alive HTTP and HTTPS connections remaining open and inactive for an extended period of time, leading to a potential Denial of Service (DoS). (CVE-2019-5739, bsc#1127533) + Further prevention of "Slowloris" attacks on HTTP and HTTPS connections by consistently applying the receive timeout set by server.headersTimeout to connections in keep-alive mode. (CVE-2019-5737, bsc#1127532) Adam Majer 2019-03-01 15:42:35 +00:00
• a52fd358ee - env_shebang.patch: dropped in favour of programmatic update Adam Majer 2019-01-10 14:20:46 +00:00
• a03dbb07ed OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=103 Adam Majer 2019-01-09 14:49:51 +00:00
• 3ae33731c9 * deps: upgrade OpenSSL sources to 1.0.2q (openssl_1_0_2q.patch - CVE-2018-0734, bsc#1113652, CVE-2018-5407, bsc#1113534) Adam Majer 2019-01-09 14:37:24 +00:00
• 57718cd79b * cli: add --max-http-header-size flag (max_header_size.patch) + add maxHeaderSize property (max_header_size.patch) (CVE-2018-12121.patch - CVE-2018-12121, bsc#1117626) + A timeout of 40 seconds now applies to servers receiving HTTP headers. This value can be adjusted with server.headersTimeout. Where headers are not completely received within this period, the socket is destroyed on the next received chunk. In conjunction with server.setTimeout(), this aids in protecting against excessive resource retention and possible Denial of Service. (CVE-2018-12122.patch - CVE-2018-12122, bsc#1117627) (CVE-2018-12116.patch - CVE-2018-12116, bsc#1117630) (CVE-2018-12123.patch - CVE-2018-12123, bnc#1117629) Adam Majer 2019-01-09 14:07:18 +00:00
• e0342a286e + Headers received by HTTP servers must not exceed 8192 bytes in total to prevent possible Denial of Service attacks. CVE-2018-12121.patch - (CVE-2018-12121, bsc#1117626) Adam Majer 2019-01-09 11:22:02 +00:00
• 3f386ef218 Backport security fixes from NodeJS 6.x: * debugger: prevent the debugger from listening on 0.0.0.0. It now defaults to 127.0.0.1. CVE-2018-12120.patch - (CVE-2018-12120, bsc#1117625) * http: + Two-byte characters are now strictly disallowed for the path option in HTTP client requests. Paths containing characters outside of the range \u0021 - \u00ff will now be rejected with a TypeError. This behavior can be reverted if necessary by supplying the --security-revert=CVE-2018-12116 command line argument (this is not recommended). CVE-2018-12116.patch - (CVE-2018-12116, bsc#1117630) * util: Fix a bug that would allow a hostname being spoofed when parsing URLs with url.parse() with the 'javascript:' protocol. CVE-2018-12123.patch - (CVE-2018-12123, bnc#1117629) Adam Majer 2019-01-08 16:04:58 +00:00
• a84d0c769f - flaky_test_rerun.patch: Rerun failing tests in case of flakiness Adam Majer 2018-11-26 15:38:06 +00:00
• b72a40cacd OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=97 Adam Majer 2018-11-12 12:26:04 +00:00
• b21df4f55f OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=96 Adam Majer 2018-10-15 16:03:30 +00:00
• d44dce1e51 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=95 Adam Majer 2018-10-08 14:18:29 +00:00
• 360fb6e8ed - fix_ci_tests.patch: skip parallel/test-tick-processor on arm. Unreliable test in shared environment. - enable unit tests build failures Adam Majer 2018-10-05 12:18:36 +00:00
• 421e392db5 - test-ca-bumps.patch: update certificates used in unit tests Adam Majer 2018-10-01 13:40:18 +00:00
• 604c6a1696 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=92 Adam Majer 2018-08-23 14:41:49 +00:00
• 2b6708c728 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=91 Adam Majer 2018-08-23 14:18:46 +00:00
• e33e85f2bb OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=90 Adam Majer 2018-08-23 14:11:09 +00:00
• b4fc86cf7f * Client DoS due to large DH parameter (CVE-2018-0732, bsc#1097158) Adam Majer 2018-08-23 13:50:43 +00:00
• 78e90cf35f - openssl_1_0_2p.patch: deps: Upgrade to OpenSSL 1.0.2p, fixing: * Client DoS due to large DH parameter (CVE-2018-0732) * ECDSA key extraction via local side-channel Adam Majer 2018-08-23 13:47:54 +00:00
• 642428b270 - CVE-2018-12115.patch: buffer: avoid overrun on UCS-2 string write (CVE-2018-12115, bsc#1105019) Adam Majer 2018-08-20 10:25:03 +00:00
• c76f170bd4 - Ensure neutrality of description. - Use %make_install. Adam Majer 2018-08-13 11:25:20 +00:00
• 0ee9ab9b67 - Recommend same major version npm package (bsc#1097748) Adam Majer 2018-06-15 12:16:39 +00:00
• 256c78e673 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=84 Adam Majer 2018-06-13 16:52:15 +00:00
• 20a26881e8 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=83 Adam Majer 2018-05-24 14:27:58 +00:00
• 3b24fbe6ff OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=82 Adam Majer 2018-05-23 11:35:05 +00:00
• 32740dfc53 - icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764) Adam Majer 2018-05-16 11:22:28 +00:00
• 8ef346b209 own %license directory Adam Majer 2018-04-05 08:27:36 +00:00
• 04e3f5cc9f Use %license to install license Adam Majer 2018-04-05 07:23:57 +00:00
• 6bea4de185 fix node-gyp permissions Adam Majer 2018-04-04 13:31:19 +00:00
• 8c8ed57248 security updates mostly, Adam Majer 2018-04-03 11:21:08 +00:00
• 739d0c6a73 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=76 Adam Majer 2018-03-23 14:24:57 +00:00
• 7388810da0 npx manpage install Adam Majer 2018-03-22 13:35:12 +00:00
• d77a04dbdb - remove any old manpage files in %pre from before update-alternatives were used to manage symlinks to these manpages. Adam Majer 2018-03-22 13:26:54 +00:00
• 72b14ddf6d Fix changelog Adam Majer 2018-02-13 08:49:56 +00:00
• 43f467e072 - Add Recommends and BuildRequire on python2 for npm. node-gyp requires this old version of python for now. This is only needed for binary modules. Adam Majer 2018-02-13 08:45:48 +00:00
• d7f7992326 - Use gcc7 on Leap 42.3 Adam Majer 2018-02-07 14:08:37 +00:00
• 4edb15da9f - even on recent codestreams there is no binutils gold on s390 only on s390x Adam Majer 2018-01-31 08:59:54 +00:00
• dd4e7eb08e OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs4?expand=0&rev=69 Adam Majer 2018-01-29 12:56:22 +00:00
• 6eaf9dd2a4 - sync with SLE12 version - bump npm_version as per .changes file - drop unused test patch Adam Majer 2016-09-16 12:56:45 +00:00
• a85db52787 Accepting request 424018 from home:adamm Joachim Gleissner 2016-09-06 10:52:46 +00:00