Accepting request 1034211 from devel:languages:nodejs

- Fix migration to openssl-3 (bsc#1205042)

- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)

OBS-URL: https://build.opensuse.org/request/show/1034211
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nodejs18?expand=0&rev=6
This commit is contained in:
Dominique Leuenberger 2022-11-08 09:53:35 +00:00 committed by Git OBS Bridge
commit 1fc05980bb
6 changed files with 51 additions and 39 deletions

View File

@ -1,34 +1,34 @@
10b1f6ffd3a10fc33e497ea66019a5f66b748c1f8767fcb22cd3c365b5c30b64 node-v18.12.0-aix-ppc64.tar.gz
7aa5ef109086be0adf433b851504f0522a71a02c6d675e729375cd591a854f3c node-v18.12.0-darwin-arm64.tar.gz
e37d6b4fbb4ca4ef3af0a095ff9089d7a5c3c80d4bc36d916987406f06573464 node-v18.12.0-darwin-arm64.tar.xz
cb3ca15bec3e5732a82bf321af30da8105f61df3934c0e79e6d3e54f84ca7913 node-v18.12.0-darwin-x64.tar.gz
e0e830f859ee20f53c830f1ad86477defee79f87915976cbee14caf6204bbf16 node-v18.12.0-darwin-x64.tar.xz
9c5910727de8edcb2f6cd9f41ee9efe6a6b20e5ebcf30ad4fa86682d0dab5dcf node-v18.12.0-headers.tar.gz
4b6cc138ebe09d0c6d5189a5352a582811ca67b21318240b928f522690a4e632 node-v18.12.0-headers.tar.xz
9bb70b30b9d34f2b859cfef73ec3134537408dbf7806d45f104bc1e1d3c832e9 node-v18.12.0-linux-arm64.tar.gz
a4b0579dd9a046e1bc99eb5bd739c3a9819170e0138a7fe0c8afc24fcad13ba8 node-v18.12.0-linux-arm64.tar.xz
994140b168f39a7d2ccf5c1a1a46a74264d3a1e82a2d76f1a737a5b8a5db4431 node-v18.12.0-linux-armv7l.tar.gz
4f2922620760b5cc1ebe8db4ed543100ab02ea39485d8bd84f8f11c46d9a28e5 node-v18.12.0-linux-armv7l.tar.xz
bc709119b634de60464f898ad215c4c273e5502f6f42df483e180f830f7f5a66 node-v18.12.0-linux-ppc64le.tar.gz
7906a3e5dfc21ed2be755e7867f72b6e839951d514005b01fe8ccfbac179bcb7 node-v18.12.0-linux-ppc64le.tar.xz
2eab63f02943722fd2e342938f0b6d6dea132ed5a0a9ba283dc36e3d3ff73ac8 node-v18.12.0-linux-s390x.tar.gz
47200196b1acf3931f521b87c57343c3a523825eb0922b7aca8456477df50afc node-v18.12.0-linux-s390x.tar.xz
0699c8e02581a9c312d7157331561d36ef23963766eb47daa702edb6fd6735bd node-v18.12.0-linux-x64.tar.gz
9429e26d9a35cb079897f0a22622fe89ff597976259a8fcb38b7d08b154789dc node-v18.12.0-linux-x64.tar.xz
83a0e2246c4f1b33e37b995b479137d14fc3cfc184cc3f798e41a8a4cca1da85 node-v18.12.0.pkg
1fbb44d083ec11d0c208535dac4fb33f9dff7360bbf4b127dd2b9808f3e41106 node-v18.12.0.tar.gz
73a7f01e2999eb197763ced666a6cd544ad580eaefb73e0a849603b3e804f42e node-v18.12.0.tar.xz
cfa003b9ed643d41167a82802fdc1335a280b4844330423bf15f07dc3148d2bb node-v18.12.0-win-x64.7z
56a3a49e0e4701f169bb742ea98f5006800229e2e3bf7e10493642f392416ac8 node-v18.12.0-win-x64.zip
3c822e7179c544f7cf1b12ddd0de48e5d65d4c54f0c41d27949cddde4a603469 node-v18.12.0-win-x86.7z
4affa3f3861dd791d62159fa323b91d7f555f5c94780b1452584e2df2bbfa4fe node-v18.12.0-win-x86.zip
5c9443cc6213f88a9c702b995f04b86cda78f01f47f251ce46b7567e1197a59c node-v18.12.0-x64.msi
8a6e8ec6e6a51d1d98052943dd324d0ac53a0f07185d9d7c7ea7c43b3b764a6b node-v18.12.0-x86.msi
f5d52e89e7fbe0a758892182f44fb097f6f7c8fe994eb412c8f6e87274e1ea5e win-x64/node.exe
adc237098880c85b3aacaf2dfbea86c3db065fa7e4cbf207b617a661f4627555 node-v18.12.1-aix-ppc64.tar.gz
9857042e18a0530a19f22f29a38de4fed5608e32543216f9afb6edea8d0dfdd3 node-v18.12.1-darwin-arm64.tar.gz
17f2e25d207d36d6b0964845062160d9ed16207c08d09af33b9a2fd046c5896f node-v18.12.1-darwin-arm64.tar.xz
90ac0e8148f3fb52bcfc01d9f7d7963ce565dd0add0cd8d3e0698fbd7ecf1e5a node-v18.12.1-darwin-x64.tar.gz
6c88d462550a024661e74e9377371d7e023321a652eafb3d14d58a866e6ac002 node-v18.12.1-darwin-x64.tar.xz
9d55ee072ba6d5a141db092cef1a0f715f7d3fc938285a6d927a1d0a0c7442f7 node-v18.12.1-headers.tar.gz
c16e93695b00520a085b999808883d40c0ec12759a9ee63448133060c3aab2eb node-v18.12.1-headers.tar.xz
521587df6d2b9d9c524105c8f3f9d775dcfc5e7fbf7633e4455cc2e9af7d0ced node-v18.12.1-linux-arm64.tar.gz
3904869935b7ecc51130b4b86486d2356539a174d11c9181180cab649f32cd2a node-v18.12.1-linux-arm64.tar.xz
0c726bb061d10befb5e383e3e787446dc86ba99ae849fb24f27f88fee27433d5 node-v18.12.1-linux-armv7l.tar.gz
d0131a764c0f44821fdacb3c3ab8b35b52af060a98ac7a150ec49d4c540be3d7 node-v18.12.1-linux-armv7l.tar.xz
b6eb0af1311f6cb0349c7b7babc17bb32865a2eed6c7f304eddc111bf9576481 node-v18.12.1-linux-ppc64le.tar.gz
9646cd3dbaf80828a7b420a9b80fd3be3ecf5d182e1c080c85397b9986a9c818 node-v18.12.1-linux-ppc64le.tar.xz
28270961975e3c166e049d6ceff8cd7068802f54ddd7c9c12b6941ee129ead44 node-v18.12.1-linux-s390x.tar.gz
c4672a02aaf5311d32a1bd3ec8a8607f03b2f692142b5fb305cc3562f9cb316f node-v18.12.1-linux-s390x.tar.xz
a8fcacb8033504e6d704bdee821f7005ee3774db25c799bcf2a13b5bda7de172 node-v18.12.1-linux-x64.tar.gz
4481a34bf32ddb9a9ff9540338539401320e8c3628af39929b4211ea3552a19e node-v18.12.1-linux-x64.tar.xz
16acaf8d12c9f828fdd71cd499b324014e961c9d36d0d0f7a092863ce3100065 node-v18.12.1.pkg
ba8174dda00d5b90943f37c6a180a1d37c861d91e04a4cb38dc1c0c74981c186 node-v18.12.1.tar.gz
4fa406451bc52659a290e52cfdb2162a760bd549da4b8bbebe6a29f296d938df node-v18.12.1.tar.xz
b8f73f9b7fa78aebf172893713b14908aa46585dbb88e333bf9c26102533a7f6 node-v18.12.1-win-x64.7z
5478a5a2dce2803ae22327a9f8ae8494c1dec4a4beca5bbf897027380aecf4c7 node-v18.12.1-win-x64.zip
a02b64d9a3f457e00a6138d6b51812b53dcc458632b228cba862081263d01d48 node-v18.12.1-win-x86.7z
099b42d27b7d05fe6feb04fa525364e960aa348f8ad2d95fef64e1608ee843be node-v18.12.1-win-x86.zip
68e5d77f23c71168b6066444c36c9489c4165db6619c6cf5ac96b48684831fdd node-v18.12.1-x64.msi
860682f15893741ad18c7c257d79a51b875c1136d5d9e3cc55e8c7f273780fbc node-v18.12.1-x86.msi
215180104150568025cc41ba9b234b8f6c6ad4c7f75f2e55a97de85cfb545060 win-x64/node.exe
1bd376a23d181d85096d1a9c46e6be7fcd20d30f9b8f77a2a847d3dbff8e25c7 win-x64/node.lib
9e1687e3662ddc35231ca25a9aac9cf16c88b6d4f07698b01c4ed1ced185c71c win-x64/node_pdb.7z
bc13c387a6aad16f73ee15fb2effb28de745cc43c36fd4dd0cbc6bffc19637f9 win-x64/node_pdb.zip
c5ea7601d9c284ba3c3e0bfe79a8d34c71e95ab77fa65e7ffeddab3bbe1a503e win-x86/node.exe
2b76e27f6cb0d30467b71a0ac22b55b36f657f6b38e6c38e49e98de6a1e60de9 win-x64/node_pdb.7z
fda35a2fd04d550831c5069d3b2f4024ec7d950e45dff9caa59e7b5f8b16e50c win-x64/node_pdb.zip
4fedbbe7d609875d75c6361974828ff7d2bd65195b4e17472c8c407d991cd209 win-x86/node.exe
b1c6dc670911d85ef1704fa56f4cc4c7e1071f4869778398e6d88b3b0b565978 win-x86/node.lib
eb4e367282a758d8dbcc4ff9ce9999817fe7a841bbb74fe48877c8ba137cd7f7 win-x86/node_pdb.7z
8b426361c373c2ac8471ee1f4321074a68c81d8b5776b92bac7c55560f0d7e6f win-x86/node_pdb.zip
99f54dfb72497d84ad3326ee811c667187983707c0f12c96d96d0dd948b78152 win-x86/node_pdb.7z
3fc2c909af7f8039459b86f42332310eb591b44970439445917ecd5fe295130e win-x86/node_pdb.zip

Binary file not shown.

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:73a7f01e2999eb197763ced666a6cd544ad580eaefb73e0a849603b3e804f42e
size 38443968

3
node-v18.12.1.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4fa406451bc52659a290e52cfdb2162a760bd549da4b8bbebe6a29f296d938df
size 38454588

View File

@ -1,3 +1,15 @@
-------------------------------------------------------------------
Mon Nov 7 14:00:54 UTC 2022 - Adam Majer <adam.majer@suse.de>
- Fix migration to openssl-3 (bsc#1205042)
-------------------------------------------------------------------
Mon Nov 7 09:05:07 UTC 2022 - Adam Majer <adam.majer@suse.de>
- Update to NodeJS 18.12.1 LTS:
* inspector: DNS rebinding in --inspect via invalid octal IP
(bsc#1205119, CVE-2022-43548)
-------------------------------------------------------------------
Fri Oct 28 10:31:50 UTC 2022 - Adam Majer <adam.majer@suse.de>

View File

@ -31,7 +31,7 @@
%endif
Name: nodejs18
Version: 18.12.0
Version: 18.12.1
Release: 0
# Double DWZ memory limits
@ -269,7 +269,7 @@ BuildRequires: group(nobody)
BuildRequires: pkgconfig(openssl) >= %{openssl_req_ver}
# require patched openssl library on SLES for nodejs16
%if 0%{?suse_version}
%if 0%{?suse_version} && "%{pkg_version openssl-1_1}" != "~~~"
%if %node_version_number >= 16 && 0%{suse_version} <= 1500 && %{pkg_vcmp openssl-1_1 < '1.1.1e' } && 0%{with openssl_RSA_get0_pss_params}
BuildRequires: openssl-has-RSA_get0_pss_params
Requires: openssl-has-RSA_get0_pss_params
@ -293,7 +293,7 @@ BuildRequires: openssl >= %{openssl_req_ver}
%else
%if %node_version_number <= 12 && 0%{?suse_version} == 1315 && 0%{?sle_version} < 120400
Provides: bundled(openssl) = 3.0.5
Provides: bundled(openssl) = 3.0.7
%else
BuildRequires: bundled_openssl_should_not_be_required
%endif
@ -684,7 +684,7 @@ find -name \*~ -print0 -delete
find \( -name \*.js.orig -or -name \*.md.orig -or -name \*.1.orig \) -delete
# downgrade node-gyp to last version that supports python 3.4 for SLE12
%if 0%{?suse_version} && 0%{?suse_version} < 1500
%if 0%{?suse_version} && 0%{?suse_version} < 1500 && 0%{node_version_number} > 16
rm -r deps/npm/node_modules/node-gyp
mkdir deps/npm/node_modules/node-gyp
tar -C deps/npm/node_modules/node-gyp Jxf %{SOURCE5}