Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs16 for openSUSE:Factory checked in at 2022-07-21 11:32:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs16 (Old) and /work/SRC/openSUSE:Factory/.nodejs16.new.1523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs16" Thu Jul 21 11:32:59 2022 rev:21 rq:989961 version:16.16.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs16/nodejs16.changes 2022-07-06 15:41:41.518490036 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs16.new.1523/nodejs16.changes 2022-07-21 11:33:28.514952593 +0200 @@ -1,0 +2,10 @@ +Mon Jul 11 12:07:16 UTC 2022 - Adam Majer <adam.ma...@suse.de> + +- Update to LTS version 16.16.0: + * http: stricter Transfer-Encoding and header separator parsing + (bsc#1201325, bsc#1201326, bsc#1201327, + CVE-2022-32213, CVE-2022-32214, CVE-2022-32215) + * src: fix IPv4 validation in inspector_socket + (bsc#1201328, CVE-2022-32212) + +------------------------------------------------------------------- Old: ---- node-v16.15.1.tar.xz New: ---- node-v16.16.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs16.spec ++++++ --- /var/tmp/diff_new_pack.vTUnfI/_old 2022-07-21 11:33:29.286953354 +0200 +++ /var/tmp/diff_new_pack.vTUnfI/_new 2022-07-21 11:33:29.294953362 +0200 @@ -21,7 +21,7 @@ %endif Name: nodejs16 -Version: 16.15.1 +Version: 16.16.0 Release: 0 # Double DWZ memory limits @@ -273,7 +273,7 @@ %else %if %node_version_number <= 12 && 0%{?suse_version} == 1315 && 0%{?sle_version} < 120400 -Provides: bundled(openssl) = 1.1.1o +Provides: bundled(openssl) = 1.1.1q %else BuildRequires: bundled_openssl_should_not_be_required %endif @@ -352,7 +352,7 @@ BuildRequires: pkgconfig(libbrotlidec) %endif -Provides: bundled(llhttp) = 6.0.4 +Provides: bundled(llhttp) = 6.0.7 Provides: bundled(ngtcp2) = 0.1.0-DEV Provides: bundled(node-acorn) = 8.6.0 @@ -640,7 +640,7 @@ %endif %patch200 -p1 -%if %{node_version_number} <= 14 +%if %{node_version_number} <= 12 # minimist security update - patch50 rm -r deps/npm/node_modules/mkdirp/node_modules/minimist rmdir ./deps/npm/node_modules/mkdirp/node_modules ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.vTUnfI/_old 2022-07-21 11:33:29.334953401 +0200 +++ /var/tmp/diff_new_pack.vTUnfI/_new 2022-07-21 11:33:29.334953401 +0200 @@ -1,35 +1,35 @@ -31dec4d81fb154120055132bf21b0664c34ca6e1f66def9438bd19e2c5aff0ca node-v16.15.1-aix-ppc64.tar.gz -7f492d01bed05c982fd55d6ba68711fe29bd7a1bb97b528909ac5aa9e3ab951d node-v16.15.1-darwin-arm64.tar.gz -efd7d2f6eab59d05955c8c4cbdd4d5612a894f3c6d9283f34340a4b93ccf9375 node-v16.15.1-darwin-arm64.tar.xz -965f4c44d53be8c7fd718ecb8ca3889c49e9877e68382851e8bf3b9b26eb3b69 node-v16.15.1-darwin-x64.tar.gz -bdad616d4d388364a7734cf61d078912c468809ee54c2869edcd813c472ebe3a node-v16.15.1-darwin-x64.tar.xz -535d0eddb5cde8445f198476aa240ccb7b59f1251f235408e84e940f84fb1c81 node-v16.15.1-headers.tar.gz -3553651e631ee52c717cc95cf045683eab807418cac7d55bb618d0a7f1cfe2e1 node-v16.15.1-headers.tar.xz -84db3f261a02c3d92558fb80a3b597b58175d713b8aa928f6b66e963340f1faf node-v16.15.1-linux-arm64.tar.gz -ddd18ba09cfa937f75123a9d69256d44386ff1b9c0d12fa4b3f9ce0b0d121d9d node-v16.15.1-linux-arm64.tar.xz -b868e7d757acca8a1df5394f2381365c006e491aac5e9979b4a933ca66698f8c node-v16.15.1-linux-armv7l.tar.gz -adb74fbb539c48f3fa6aca86c72fdcaa97f19f8f8a4db34cef5b2f3177c2958b node-v16.15.1-linux-armv7l.tar.xz -f0f088eac8423b4c27b41d73a21056c7152fe3c79004ebec28f27bf2a2abac14 node-v16.15.1-linux-ppc64le.tar.gz -bf30678aa2170ac6894ba1c58184c1301ed62fe22057426db9482a2df6cd7d8b node-v16.15.1-linux-ppc64le.tar.xz -0c9fac94a37ff9f59bad86c86a8660309978a0106785b5e99440e97caef44fd4 node-v16.15.1-linux-s390x.tar.gz -7bfb51543d06f04b60654e5034df4f1f7ca1d1aa2170f778d7020f37ae447a37 node-v16.15.1-linux-s390x.tar.xz -f78a49c0c9c2f546c3a44eb434c49a852125441422a1bcfc433dedc58d6a241c node-v16.15.1-linux-x64.tar.gz -b749f7a76e56dfd6dfb8a910b8a2a871159661557680aa95acf13c9514422c12 node-v16.15.1-linux-x64.tar.xz -359b618d6b8b3e3e2af1b1a6da9be464114616cac23f709d81a223d72eaf13dd node-v16.15.1.pkg -308aee7149c4092a53c87c28ef49e23a8d1606119e79ae68333062e2a1f94208 node-v16.15.1.tar.gz -d4e99d3c1f69711109a67525571058e6009cddbc228e7d723b8fb4a454169b7d node-v16.15.1.tar.xz -378a9202374ac65377e13966dc80d435538db5a5cb128d629fa69f638c157a83 node-v16.15.1-win-x64.7z -e160591f562b575eb18b9b234b738f21cb7fbec5a73df1bd8062f8d0c6cef431 node-v16.15.1-win-x64.zip -d03c7d1dbe397a6095d0119c2a48105949c12e212fb7cda5a8df986a1af69a9b node-v16.15.1-win-x86.7z -45eb18d8e4ba9b040dc43445ddaf16e51bc9af52aac863a4f734ecc0dfafbdc4 node-v16.15.1-win-x86.zip -ad2733ed364afbd9758690f1ca8f142b3cfa186c754af8b9f6fb6befae9941ff node-v16.15.1-x64.msi -729a3211d43966d196ed5359e38164a6962c2c4af9d1d7aeebe6842d1da74b33 node-v16.15.1-x86.msi -13751aebac5bd85d73a7e18c37b1c6d33e33e65b924552b65ecbb182db463c67 win-x64/node.exe +6050ce2c71ef0acca9bc09a0dbbc19b243d1915839b3a349f08ac92672c09ff7 node-v16.16.0-aix-ppc64.tar.gz +167721c2d72402e54adc0f8c87ca840796216c4d98946509d73221b771ad3e4c node-v16.16.0-darwin-arm64.tar.gz +e4468368bf25ee1c504f08ecfd0d9fec17a9e72ef27c4495406b958cd7b4bafd node-v16.16.0-darwin-arm64.tar.xz +982edd0fad364ad6e2d72161671544ab9399bd0ca8c726bde3cd07775c4c709a node-v16.16.0-darwin-x64.tar.gz +a65b2b92ede6be9004eae1ca9da26da2178bc696f35e8cca1840c33b777a5421 node-v16.16.0-darwin-x64.tar.xz +89373d20e381b7f1ddd773f7e9c5bd3795876c0eab09696f7fc233c5d8db2e85 node-v16.16.0-headers.tar.gz +d463bae761d7fde776564d25012190df1e2b85e2b93480eaf413126331973fbc node-v16.16.0-headers.tar.xz +378a3998e7c4dabd0cbd96b05a1b08e834c4b607f09c0745072de9423626fca4 node-v16.16.0-linux-arm64.tar.gz +6cb8f1353480646c1cd8ab9911995e5591e1a97811f43ea4ab3e946a57e7c80e node-v16.16.0-linux-arm64.tar.xz +cd061554c3a9f1bac0a0bcafbbf50e10c9e5f6efbf98ee3450bb0920194ec06d node-v16.16.0-linux-armv7l.tar.gz +b8f499e38792e7b24d38da4169ab999cbbdfbf597ef86447aeaa661679ef0604 node-v16.16.0-linux-armv7l.tar.xz +3f1c57af5994e4f524d33e0173e5b60a76ad2347bc4b838719bc06cc0a1ef1c3 node-v16.16.0-linux-ppc64le.tar.gz +32c665437a17cb5ad273ed7abe1a5711935f2b86d36dce315b5655d524fbc041 node-v16.16.0-linux-ppc64le.tar.xz +b71b5dd31f398c5467cc3b93a79d5757e7ad286e5ad2bd79d5fda6b775b481c7 node-v16.16.0-linux-s390x.tar.gz +bd779749163d3b26d2b54fc6f9731fd6dba903c7b54caa40afbbb9476637cdff node-v16.16.0-linux-s390x.tar.xz +c85b16d1a4c259d01be7111ecb0361260627e4fc245004a920521eacb28e50df node-v16.16.0-linux-x64.tar.gz +edcb6e9bb049ae365611aa209fc03c4bfc7e0295dbcc5b2f1e710ac70384a8ec node-v16.16.0-linux-x64.tar.xz +ee42133ad6de3cd61954c2abf4a03d123f9e596d2f658247c59b8ad43fd2f147 node-v16.16.0.pkg +e07c30b0498f143c08793e34bda1adeaad32f485a4f79f4d67a82879f4c0bbe3 node-v16.16.0.tar.gz +145151eff3b2aa5ebe73384009c52271a83740ae687a93c98c628cd7d52736eb node-v16.16.0.tar.xz +cfe9ba47f32dd2c667078ed175e76cad1d00bd4ea9f915219ead81d2cfca3c34 node-v16.16.0-win-x64.7z +c657acc98af55018c8fd6113c7e08d67c8083af75ba0306f9561b0117abc39d4 node-v16.16.0-win-x64.zip +a933c0f78bc653dfba11df49c476e90e7ed2492f34319d74bf7de2b21f8943d8 node-v16.16.0-win-x86.7z +957783527844fcd7da1d0b6dd311b64f92e2c5185112ada2d92e52c1a71fb373 node-v16.16.0-win-x86.zip +c94f794d56ab6b5ba817a7a2efcc3ea9e81893126f6a925963542aa8ad34f798 node-v16.16.0-x64.msi +1117bbde79025da055c87d35aa230f3c9a8855bf8e92bd126c30ec51b8dc8afd node-v16.16.0-x86.msi +a7da2a7db76991bbb6a058b034969d2464cbd1b4c9af35c39def8a79cbbb01cc win-x64/node.exe a676e936f019206ecfb19a878802c085841ac34f8f83080d4261e5ca138b011c win-x64/node.lib -cce83e7d5897bb385e58e028b07e17c4b303f2ef0f5d3ba74a77ac76e064b7c8 win-x64/node_pdb.7z -0362eb23d8459c97623db44df7c1a1834e6cf9be2e2b650df3b25ee91941910d win-x64/node_pdb.zip -9bc93f97eccf3ac6b94c4a7e170e5b2c62cbad8abf4af65566c989d151008f9e win-x86/node.exe +811b52184ff4c7e104ac752088c2dae6fcd91d22e4d0361809e6d66fa4d68575 win-x64/node_pdb.7z +595b784a4fdd1c682a020c2f5742ab302abb018ca28e25db46666e0061b2f7f5 win-x64/node_pdb.zip +b928c03c1985e8fa1664fc2e795daecac612b0a8a75491f72ccbc09f5a9c65e6 win-x86/node.exe 8574cc9643d304df424d038f37b2a78cc3c2a7dd58c2f1b9ff5d9a07da73d80d win-x86/node.lib -1f5b95582d6a091b145212263be8ba7da6c1677607f65aa28df4b844a1329050 win-x86/node_pdb.7z -4a99ae9b0d27d9402dc331fdcf8d22677af7a10eb309ac05ff2d6d1b24867334 win-x86/node_pdb.zip +bd79146dfe7984b82d32b69985bde595c30c86bbbd1c6fe7620381872c3006e1 win-x86/node_pdb.7z +a004a56c407d1f35e91141a5b86981a2d1cc1049a5f4092a6bde562076135d88 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.vTUnfI/_old and /var/tmp/diff_new_pack.vTUnfI/_new differ ++++++ node-v16.15.1.tar.xz -> node-v16.16.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs16/node-v16.15.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs16.new.1523/node-v16.16.0.tar.xz differ: char 27, line 1