SHA256
1
0
forked from pool/nodejs21

Commit Graph

  • 24ee6bee74 Accepting request 1178492 from devel:languages:nodejs factory Ana Guerrero 2024-06-06 10:31:36 +0000
  • a71f18ab65 - Update to 21.7.3: * fixes bsc#1222665, CVE-2024-27980 - windows only bug Adam Majer 2024-05-28 11:30:26 +0000
  • 5a31d5297f Accepting request 1166607 from devel:languages:nodejs Ana Guerrero 2024-04-10 15:48:38 +0000
  • b5a83435e6 * Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash (High) (bsc#1222244, CVE-2024-27983) * HTTP Request Smuggling via Content Length Obfuscation (Medium) (bsc#1222384, CVE-2024-27982) + undici version 6.11.1 (bsc#1222530, bsc#1222603, CVE-2024-30260, CVE-2024-30261) Adam Majer 2024-04-10 09:02:14 +0000
  • df3c9dd6fb - Update to 21.7.2: * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High) (bsc#1222244) * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation- (Medium) (bsc#1222384) * updated dependencies: + llhttp version 9.2.1 + undici version 6.11.1 (bsc#1222530, CVE-2024-30260) - node-gyp-addon-gypi.patch: adapted for new unit test layouts Adam Majer 2024-04-09 14:39:25 +0000
  • b2d354a373 - node-gyp-addon-gypi.patch: refreshed Adam Majer 2024-04-09 12:50:48 +0000
  • c2da7b7524 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=24 Adam Majer 2024-04-04 08:06:04 +0000
  • 17690a8448 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=23 Adam Majer 2024-04-03 14:50:56 +0000
  • 460cb873eb OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=22 Adam Majer 2024-04-03 14:44:33 +0000
  • b1b1d9718b - Update to 21.7.1 * revert "test_runner: do not invoke after hook when test is empty" * lib: return directly if udp socket close before lookup - Changes in 21.7.0 * util.styleText(format, text): This function returns a formatted text considering the format passed. * support for multi-line values for .env file * sea: support embedding assets * vm: support using the default loader to handle dynamic import() * crypto: implement crypto.hash() * http2: add h2 compat support for appendHeader - versioned.patch, nodejs-libpath.patch: refreshed - c-ares-fixes.patch: upstreamed, removed Adam Majer 2024-04-02 14:32:44 +0000
  • 215f736741 Accepting request 1147153 from devel:languages:nodejs Ana Guerrero 2024-02-18 19:22:37 +0000
  • 3dd84fa6f5 - Update to 21.6.2: (security updates) * (CVE-2024-21892, bsc#1219992) - Code injection and privilege escalation through Linux capabilities- (High) * (CVE-2024-22019, bsc#1219993) - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High) * (CVE-2024-21896, bsc#1219994) - Path traversal by monkey-patching Buffer internals- (High) * (CVE-2024-22017, bsc#1219995) - setuid() does not drop all privileges due to io_uring - (High) * (CVE-2023-46809, bsc#1219997) - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium) * (CVE-2024-21891, bsc#1219998) - Multiple permission model bypasses due to improper path traversal sequence sanitization - (Medium) * (CVE-2024-21890, bsc#1219999) - Improper handling of wildcards in --allow-fs-read and --allow-fs-write (Medium) * (CVE-2024-22025, bsc#1220014) - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium) * undici version 5.28.3 (CVE-2024-24758, bsc#1220017) * libuv version 1.48.0 Adam Majer 2024-02-16 16:23:48 +0000
  • 2f0a9f69bc Accepting request 1146410 from devel:languages:nodejs Ana Guerrero 2024-02-14 22:18:44 +0000
  • 77c8365d40 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=17 Adam Majer 2024-02-13 12:35:48 +0000
  • e1d05d0d69 - Update to 21.6.1: * Revert "stream: fix cloned webstreams not being unref'd" - Changes in 21.6.0: * New connection attempt events * --allow-addons to enable addon usage when using the Permission Model. * Support configurable snapshot through --build-snapshot-config flag - fix_ci_tests.patch: refreshed Adam Majer 2024-02-12 15:19:46 +0000
  • f2e273114c Accepting request 1137596 from devel:languages:nodejs Ana Guerrero 2024-01-10 20:50:43 +0000
  • 1b9c34e5e2 - Update to 21.5.0: * module: merge config with package_json_reader * src: move package resolver to c++ * doc: + deprecate hash constructor + deprecate dirent.path - linker_lto_jobs.patch: refreshed Adam Majer 2024-01-08 15:10:14 +0000
  • 6c41f997fd Accepting request 1136239 from devel:languages:nodejs Dominique Leuenberger 2024-01-04 14:56:50 +0000
  • ec5470976f - c-ares-fixes.patch: fixes unit tests for new c-ares Adam Majer 2024-01-02 14:28:38 +0000
  • 375da68f12 Accepting request 1133448 from devel:languages:nodejs Ana Guerrero 2023-12-17 20:28:48 +0000
  • abbeb2783e OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=10 Adam Majer 2023-12-15 14:11:41 +0000
  • 6502229e81 - Update to 21.4.0: * fs: introduce dirent.parentPath * fs: use default w flag for writeFileSync with utf8 encoding - Changes in 21.3.0: * New --disable-warning flag * Fast fs.writeFileSync with UTF-8 Strings For details, see https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V21.md#21.4.0 - fix_ci_tests.patch: added workaround for missing deps Adam Majer 2023-12-13 13:27:50 +0000
  • 6ad92ba65e - node-gyp-addon-gypi.patch: fix misapplied patch (bsc#1217424) Adam Majer 2023-11-23 10:50:30 +0000
  • f1bab96069 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=7 Adam Majer 2023-11-20 10:20:05 +0000
  • b8ebd289d7 Accepting request 1126795 from devel:languages:nodejs Ana Guerrero 2023-11-17 19:48:15 +0000
  • c57e7a4279 - Update to 21.2.0 * esm: add import.meta.dirname and import.meta.filename * fs: add stacktrace to fs/promises * lib: + add --no-experimental-global-navigator CLI flag + add navigator.language & navigator.languages + add navigator.platform * stream: + add support for deflate-raw format to webstreams compression + use Array for Readable buffer + optimize creation * test_runner: + adds built in lcov reporter + test_runner: add Date to the supported mock APIs + test_runner, cli: add --test-timeout flag For details see https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V21.md#21.2.0 - nodejs20-zlib-1.3.patch: upstreamed, dropped - node-gyp-addon-gypi.patch: rebased - fix_ci_tests.patch: partially upstreamed Adam Majer 2023-11-16 09:24:16 +0000
  • 8d6eaf7e31 Accepting request 1124211 from devel:languages:nodejs Ana Guerrero 2023-11-08 21:18:46 +0000
  • e5adac6923 OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=3 Adam Majer 2023-11-07 15:18:56 +0000
  • 4b741e7fab OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs21?expand=0&rev=2 Adam Majer 2023-11-07 13:27:58 +0000
  • b9ebe15f35 - Package new version 21.1.0 For overview of changes and details since 20.x and earlier see https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V21.md#21.0.0 - imported the following patches from prior patches: + cares_public_headers.patch + fix_ci_tests.patch + flaky_test_rerun.patch + gcc13.patch + legacy_python.patch + linker_lto_jobs.patch + manual_configure.patch + node-gyp-addon-gypi.patch + node-gyp-config.patch + nodejs20-zlib-1.3.patch + nodejs-libpath.patch + npm_search_paths.patch + openssl_binary_detection.patch + qemu_timeouts_arches.patch + skip_no_console.patch + sle12_python3_compat.patch + test-skip-y2038-on-32bit-time_t.patch + versioned.patch Adam Majer 2023-11-07 09:48:41 +0000