Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package nodejs-electron for openSUSE:Factory
checked in at 2024-02-01 18:05:48
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/nodejs-electron (Old)
and /work/SRC/openSUSE:Factory/.nodejs-electron.new.1815 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs-electron"
Thu Feb 1 18:05:48 2024 rev:98 rq:1143232 version:27.3.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/nodejs-electron/nodejs-electron.changes
2024-01-25 18:41:58.612308821 +0100
+++
/work/SRC/openSUSE:Factory/.nodejs-electron.new.1815/nodejs-electron.changes
2024-02-01 18:06:46.274097435 +0100
@@ -1,0 +2,7 @@
+Wed Jan 31 20:57:05 UTC 2024 - Bruno Pitrus <[email protected]>
+
+- New upstream release 27.3.1
+ * Apply module search paths restriction on worker and child process
+ * Fix use after free in Web Audio (CVE-2024-0807 bsc#1219118)
+
+-------------------------------------------------------------------
Old:
----
electron-27.3.0.tar.zst
New:
----
electron-27.3.1.tar.zst
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ nodejs-electron.spec ++++++
--- /var/tmp/diff_new_pack.3ljume/_old 2024-02-01 18:06:51.710295702 +0100
+++ /var/tmp/diff_new_pack.3ljume/_new 2024-02-01 18:06:51.710295702 +0100
@@ -236,7 +236,7 @@
Name: nodejs-electron
-Version: 27.3.0
+Version: 27.3.1
Release: 0
Summary: Build cross platform desktop apps with JavaScript, HTML, and
CSS
License: AFL-2.0 AND Apache-2.0 AND blessing AND BSD-2-Clause AND
BSD-3-Clause AND BSD-Protection AND BSD-Source-Code AND bzip2-1.0.6 AND IJG AND
ISC AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND MIT AND MIT-CMU AND
MIT-open-group AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND
MPL-2.0 AND OpenSSL AND SGI-B-2.0 AND SUSE-Public-Domain AND X11
@@ -880,9 +880,6 @@
#and relies on the linker eliminating unused sections.
#Re-add these parameters from build/config/compiler/BUILD.gn.
export LDFLAGS="%{?build_ldflags} -Wl,-O2 -Wl,--gc-sections "
-%if %{without lld} && %{without gold}
-export LDFLAGS="$LDFLAGS -Wl,--gc-keep-exported"
-%endif
%if %{with clang}
@@ -1171,6 +1168,8 @@
#this is also mistakenly set to is_clang with the (untrue) comment âmacros
for determining endian type are currently clang specificâ
#in fact, 1° clang copied those macros from gcc and 2° this should be
unbundled.
myconf_gn+=' v8_use_libm_trig_functions=true'
+#yet another is_clang
+myconf_gn+=' rtc_enable_avx2=true'