• Files Changed
• Browse Source

  * Client DoS due to large DH parameter (CVE-2018-0732, bsc#1097158)

• Files Changed
• Browse Source

- openssl_1_0_2p.patch: deps: Upgrade to OpenSSL 1.0.2p, fixing:
  * Client DoS due to large DH parameter (CVE-2018-0732)
  * ECDSA key extraction via local side-channel

• Files Changed
• Browse Source

- CVE-2018-12115.patch: buffer: avoid overrun on UCS-2 string write
  (CVE-2018-12115, bsc#1105019)

• Files Changed
• Browse Source

- Ensure neutrality of description.
- Use %make_install.

• Files Changed
• Browse Source

- Recommend same major version npm package (bsc#1097748)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)

• Files Changed
• Browse Source

own %license directory

• Files Changed
• Browse Source

Use %license to install license

• Files Changed
• Browse Source

fix node-gyp permissions

• Files Changed
• Browse Source

security updates mostly,

+ Fix for inspector DNS rebinding vulnerability
  (bsc#1087463, CVE-2018-7160)
+ Fix for 'path' module regular expression
  denial of service (bsc#1087459, CVE-2018-7158)
+ Reject spaces in HTTP Content-Length header
  values (bsc#1087453, CVE-2018-7159)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

npx manpage install

• Files Changed
• Browse Source

- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.

• Files Changed
• Browse Source

Fix changelog

• Files Changed
• Browse Source

- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.

• Files Changed
• Browse Source

- Use gcc7 on Leap 42.3

• Files Changed
• Browse Source