13 Commits

Author SHA256 Message Date
3a0bf9d1cc - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
on Aarch64 with gcc10 (bsc#1172686)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=127
2020-08-10 17:00:52 +00:00
d7ce2212a3 - Add Require for nodejs6 when intalling npm6. (bsc#1172728)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=126
2020-06-09 12:22:42 +00:00
94f566cb87 - Add Require for nodejs6 when intalling npm6.
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=125
2020-06-09 11:54:19 +00:00
c84b3bad03 - minimist.patch: Fixes a vulnerability in an npm component (bsc#1166916)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=124
2020-06-04 17:16:14 +00:00
78e5245db3 - Update to version 14.4.0:
* napi: fix various types of memory corruption in napi_get_value_string_*()
    (CVE-2020-8174, bsc#1172443)
  * http2: fix HTTP/2 Large Settings Frame DoS
    (CVE-2020-11080, bsc#1172442)
  * TLS session reuse can lead to host certificate verification bypass
    (CVE-2020-8172, bsc#1172441)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=123
2020-06-04 16:51:01 +00:00
e23c62f59b - CVE-2019-15604.patch: fixes a remotely triggerable assertion
on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=120
2020-02-07 15:13:00 +00:00
66bb813bbd Syncing ARM fixes
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=119
2020-01-07 17:00:38 +00:00
6120bed876 - Add npm.tar.xz - Update npm to 6.13.4 fixing an arbitrary path
overwrite and access via "bin" field (bsc#1159352,
  CVE-2019-16777, CVE-2019-16776, CVE-2019-16775).
- CVE-2019-13173.patch - upstreamed
- refreshed: node-gyp-addon-gypi.patch, npm_search_paths.patch,
  versioned.patch

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=116
2020-01-02 15:43:59 +00:00
215ca0ecd5 - New upstream LTS release 6.17.1:
* http: fix error check in Execute()

- Add _constraints for ppc64le to avoid build error

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=114
2019-10-24 15:47:30 +00:00
cb5e074103 - CVE-2019-13173.patch: fix potential file overwrite via hardlink
in fstream.DirWriter() function (bsc#1140290, CVE-2019-13173)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=113
2019-07-29 09:15:35 +00:00
ca81c5d1fe OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=112 2019-04-04 10:10:51 +00:00
c591f5ceaf - Add missing conflicts to base package. It's not possible to have
concurrent nodejs installations.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=2
2016-11-23 09:30:10 +00:00
Karl Cheng
45d1cfafa6 - Package unification across various branches of NodeJS. Package
for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs6?expand=0&rev=1
2016-11-21 12:51:51 +00:00