Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs14 for openSUSE:Factory checked in at 2021-08-16 10:11:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs14 (Old) and /work/SRC/openSUSE:Factory/.nodejs14.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs14" Mon Aug 16 10:11:20 2021 rev:6 rq:911862 version:14.17.5 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs14/nodejs14.changes 2021-08-03 22:48:49.608490648 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs14.new.1899/nodejs14.changes 2021-08-16 10:17:25.654670506 +0200 @@ -1,0 +2,17 @@ +Thu Aug 12 13:50:24 UTC 2021 - Adam Majer <adam.ma...@suse.de> + +- update to 14.17.5: + * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical + characters in domain names (bsc#1189370, bsc#1188881) + * CVE-2021-22940: Use after free on close http2 on stream canceling + (bsc#1189368) + * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter + (bsc#1189369) +- cares_public_headers.patch: don't use private headers + +------------------------------------------------------------------- +Mon Aug 9 12:54:40 UTC 2021 - Adam Majer <adam.ma...@suse.de> + +- z15-test-skip.patch: skip problematic test on s390x + +------------------------------------------------------------------- Old: ---- node-v14.17.4.tar.xz New: ---- cares_public_headers.patch node-v14.17.5.tar.xz z15-test-skip.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs14.spec ++++++ --- /var/tmp/diff_new_pack.XpMD5j/_old 2021-08-16 10:17:26.358669660 +0200 +++ /var/tmp/diff_new_pack.XpMD5j/_new 2021-08-16 10:17:26.362669655 +0200 @@ -32,7 +32,7 @@ %endif Name: nodejs14 -Version: 14.17.4 +Version: 14.17.5 Release: 0 # Double DWZ memory limits @@ -126,6 +126,7 @@ Source20: bash_output_helper.bash ## Patches not distribution specific +Patch1: cares_public_headers.patch Patch3: fix_ci_tests.patch Patch4: PR39011.patch Patch5: sle12_python3_compat.patch @@ -150,6 +151,7 @@ # Use versioned binaries and paths Patch200: versioned.patch +Patch201: z15-test-skip.patch BuildRequires: pkg-config %if 0%{?suse_version} @@ -246,9 +248,9 @@ %endif %if ! 0%{with intree_cares} -BuildRequires: pkgconfig(libcares) >= 1.10.0 +BuildRequires: pkgconfig(libcares) >= 1.17.0 %else -Provides: bundled(libcares2) = 1.17.1 +Provides: bundled(libcares2) = 1.17.2 %endif %if ! 0%{with intree_icu} @@ -790,6 +792,7 @@ tar Jxf %{SOURCE5} --directory=tools/gyp --strip-components=1 %endif +%patch1 -p1 %patch3 -p1 %patch4 -p1 %patch5 -p1 @@ -805,10 +808,9 @@ %endif %patch104 -p1 %patch106 -p1 -%if 0%{?suse_version} >= 1550 -%endif %patch120 -p1 %patch200 -p1 +%patch201 -p1 # remove backup files, if any find -name \*~ -print0 -delete ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.XpMD5j/_old 2021-08-16 10:17:26.406669602 +0200 +++ /var/tmp/diff_new_pack.XpMD5j/_new 2021-08-16 10:17:26.410669597 +0200 @@ -1,32 +1,32 @@ -58e4ca29b0585ebeb1dbf5a701d9959dda219b5bdf6d8363213f51a779d395da node-v14.17.4-aix-ppc64.tar.gz -5c055a295e030cb789e2925b4c0647f7aaf461ffe5f2a08145c0605fb83ad4e0 node-v14.17.4-darwin-x64.tar.gz -f86bb831a371b3720e4d0037e4e77ffa427afdbd14e96d9fd16202fbbd84ce7d node-v14.17.4-darwin-x64.tar.xz -24fa6a3925027980e32cfa2555d1cc9eca989db6c0890fe1e12e1c9f9ef4baa7 node-v14.17.4-headers.tar.gz -9515893f1f6b844b179120d95e34ee2edbd47741291456ab69913184bdb9368c node-v14.17.4-headers.tar.xz -88b130c8f08a2baafb4e4c953ad46ba69cc60210da7d95c558c7ae3456beb825 node-v14.17.4-linux-arm64.tar.gz -4c42f31e7b52980e6bb930a7c2872e6e29533828c40623ba39e1c847e9ee6c89 node-v14.17.4-linux-arm64.tar.xz -e5452a8786ea018fe9c588ffe05ca4b4b66d6a7cda1f6352bda9bd0d0421e325 node-v14.17.4-linux-armv7l.tar.gz -df65ca9aea52b693b82638077a46218ae555160a20a8a5b0edd15ff0b3438c2b node-v14.17.4-linux-armv7l.tar.xz -67dc73c42d08b5b365da37354568555e404aa902bf17dfe35f5b3ecbf699700b node-v14.17.4-linux-ppc64le.tar.gz -255fffa3b2a78b86aa7dce7b65442bb2092d99be74d2f326f1dd66f7a1931b5d node-v14.17.4-linux-ppc64le.tar.xz -b169c8b3821e3360be90bde075e28bf4632c5d36ce97d8c30b10411abc960ac8 node-v14.17.4-linux-s390x.tar.gz -3e086d99c3e303a05657c04053df9e31e46a7cdf0245b1022ddecd0fc0e14663 node-v14.17.4-linux-s390x.tar.xz -99cc7115a30fe62abf06145d57b314092c9bf27499da85413a12f50140199619 node-v14.17.4-linux-x64.tar.gz -db18c54ebe01974d46198b08729249acbb0dcdc9aea82b53eec913f8c56035c6 node-v14.17.4-linux-x64.tar.xz -aaf06036afcc730971e9048b72ea6c79659a1fcc15d810ed822d33f51c35c848 node-v14.17.4.pkg -70c75f21ac601ae9e0fd86bdfd4e13e4d302f42b4fafcd6d21804b043a571c36 node-v14.17.4.tar.gz -ae7bf4e784f8c8027ffa1e3757f37d2bd5925d0c48988c4d7f07e4515853cf2c node-v14.17.4.tar.xz -0de71309336bc324bc5155867dc9d8d6337d83c1eed4777141ae83e967b3aca1 node-v14.17.4-win-x64.7z -d82a3ca777b4dccc97aa391eb483325cda731e0ae9b3a5669dbf34bb8defde6e node-v14.17.4-win-x64.zip -67caaa209d2d938f763f1a9ab08b3e30c06b2f18bf5c5d90b1198d0ddbd35feb node-v14.17.4-win-x86.7z -6564c13aa47240231eff9c28fdafa479dda3186fbc7e2bbc97bb5b791ccd0419 node-v14.17.4-win-x86.zip -e889da1ee06e576de4f31c3e6e0f12c73cfec495a53db4dd166fd58b0fea9f22 node-v14.17.4-x64.msi -296378f482fed803adfc0dd63870ebdd925adfadd0f2e0e04a3c2ccd2b16999e node-v14.17.4-x86.msi -dcef8bbee862ffbf498327d2ab0b9e1ccfc412d8e2270cbc0e45b0e6a1cdca86 win-x64/node.exe +9085e04afb5ac85f70d9ac1080a486022ad14a2e36c0f668cb8a8c23e7f413cf node-v14.17.5-aix-ppc64.tar.gz +2e40ab625b45b9bdfcb963ddd4d65d87ddf1dd37a86b6f8b075cf3d77fe9dc09 node-v14.17.5-darwin-x64.tar.gz +6e1d9e6091b14f5accb03dad7617492442dad83778cc34de45f1818a75b6368b node-v14.17.5-darwin-x64.tar.xz +c8e264312804785020b68ad7afe1c41f3bf2a6aea4bba62f9b8e825cadfdfe49 node-v14.17.5-headers.tar.gz +cc70abea8fdd52c82b45dd9187ee555f6bbe931b33739aa7d8a3c5f25a9f5cac node-v14.17.5-headers.tar.xz +bee6d7fb5dbdd2931e688b33defd449afdfd9cd6e716975864406cda18daca66 node-v14.17.5-linux-arm64.tar.gz +3a2e674b6db50dfde767c427e8f077235bbf6f9236e1b12a4cc3496b12f94bae node-v14.17.5-linux-arm64.tar.xz +c79cc802f6034e9a9583ccbf8ccd17a0d8e0942c136011c0f4c3a475d46614be node-v14.17.5-linux-armv7l.tar.gz +496f7bf14e360026421db1b803575c4f1d3614646ecdaca98d607553579f8904 node-v14.17.5-linux-armv7l.tar.xz +bbcd0142e65614670ac88017290a1b875bfecbe46b35d1a330360b8f2679b85e node-v14.17.5-linux-ppc64le.tar.gz +29f2e1f0e1c13ceb8225bfbfb6ab0a236398eca5ceff602c4f3bc1e7eff88927 node-v14.17.5-linux-ppc64le.tar.xz +469d5a39a81baba588768404b58eb369c14a1667fcb0569c2247461476b6cc0e node-v14.17.5-linux-s390x.tar.gz +7d40eee3d54241403db12fb3bc420cd776e2b02e89100c45cf5e74a73942e7f6 node-v14.17.5-linux-s390x.tar.xz +dc04c7e60235ff73536ba0d9e50638090f60cacabfd83184082dce3b330afc6e node-v14.17.5-linux-x64.tar.gz +2d759de07a50cd7f75bd73d67e97b0d0e095ee3c413efac7d1b3d1e84ed76fff node-v14.17.5-linux-x64.tar.xz +508dca638ee5807601bbaae72307d2413b16cf7f73f92a79b8b070e4c5a83c0b node-v14.17.5.pkg +bd1bb74eae48c7aa7d4519736385e99477d954c6915adefdc3c373be461d1aaa node-v14.17.5.tar.gz +42b1a7ff87580c6058063e943d7d53efa8c236145e6e9c8264ee425b40911fa8 node-v14.17.5.tar.xz +f6e651a76e0158e07ac12753c40739554455f42eec355a651242a28ed979e483 node-v14.17.5-win-x64.7z +a99b7ee08e846e5d1f4e70c4396265542819d79ed9cebcc27760b89571f03cbf node-v14.17.5-win-x64.zip +2f2933bfb42d407b064f83c6047f71b75c55389b4bebf82b7ff5a97f4635ce54 node-v14.17.5-win-x86.7z +122ff403f4fadf9997ff2ceac5e07b6b0efd23294da369a1cf907ec98bf69db7 node-v14.17.5-win-x86.zip +f40926f33c4517a64978050fb8e88110d279a3a15adc962de4002f65ed34e821 node-v14.17.5-x64.msi +53763a06ff498d9deabff2cc6f4041d0a3c3f38f940acb6c8a8339df8d8b3827 node-v14.17.5-x86.msi +a6f14eab020e5b96214b9e08c1add28787526bfc47fa6f449c0e8059908bcb75 win-x64/node.exe 859ceb82ba9af9df5831bb67f45427bfb774aae22e7c0ee52623a3196ec0e1eb win-x64/node.lib -bd9b1ff379588006a22d27b2cfbfa8e9a6291c4eb44ab4ec4819d971e56c0485 win-x64/node_pdb.7z -65ffd6a70fb9164d1a340683462edf64c52dd05f9363d7add276d79bcc92e93f win-x64/node_pdb.zip -300c4e8ca527361eab0e9128dd15913cf9e4edd0d3b00c3d623ab925d5fa2f91 win-x86/node.exe +9ccd696aa53573b3882524cf75bcf50ce0e04aca46ac85c11f2705920df9d38b win-x64/node_pdb.7z +113e591eb4c433733ac5ad78764698f230877d441ae28d62faf90a48c7698630 win-x64/node_pdb.zip +23e8f9db8908051153b305b8d1b474d75d6503a1208604d19c39d15799d097c4 win-x86/node.exe 1078be47b9315c81aa3bb989c4bba8ee23e0da9e4854a44006decf45d578833e win-x86/node.lib -e3c8ad2df1de6be3478479ae2f45a88402c423850dda7bf7aab1f76432f4efc9 win-x86/node_pdb.7z -c5a49448e192b41e8f93992055f773f5d3915f1ee908d8b1c596020e84aafe62 win-x86/node_pdb.zip +facb6feaab3b11bac3b3e571898ebdc9ad0e0049a4d0b14cce0930eb3d8437ac win-x86/node_pdb.7z +795e518e063abdda5866ecf5b4c29683115a6ef83bffb401d4066ada2067d144 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.XpMD5j/_old and /var/tmp/diff_new_pack.XpMD5j/_new differ ++++++ cares_public_headers.patch ++++++ Index: node-v14.17.5/src/cares_wrap.h =================================================================== --- node-v14.17.5.orig/src/cares_wrap.h +++ node-v14.17.5/src/cares_wrap.h @@ -22,7 +22,7 @@ # include <netdb.h> #endif // __POSIX__ -# include <ares_nameser.h> +#include <arpa/nameser.h> namespace node { namespace cares_wrap { ++++++ node-v14.17.4.tar.xz -> node-v14.17.5.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs14/node-v14.17.4.tar.xz /work/SRC/openSUSE:Factory/.nodejs14.new.1899/node-v14.17.5.tar.xz differ: char 26, line 1 ++++++ z15-test-skip.patch ++++++ Index: node-v10.24.1/test/parallel/test-zlib-dictionary-fail.js =================================================================== --- node-v10.24.1.orig/test/parallel/test-zlib-dictionary-fail.js +++ node-v10.24.1/test/parallel/test-zlib-dictionary-fail.js @@ -23,6 +23,9 @@ const common = require('../common'); const assert = require('assert'); const zlib = require('zlib'); +const os = require('os'); +if (os.arch() === 's390x') + common.skip("Skipping bug on s390 pending zlib review on z15"); // String "test" encoded with dictionary "dict". const input = Buffer.from([0x78, 0xBB, 0x04, 0x09, 0x01, 0xA5]);