Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP4:GA
nodejs16.22459
nodejs16.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File nodejs16.changes of Package nodejs16.22459
------------------------------------------------------------------- Tue Jan 18 08:29:18 UTC 2022 - Adam Majer <adam.majer@suse.de> - rsa-pss-revert.patch: dropped, since openssl updated with needed functionality ------------------------------------------------------------------- Tue Jan 11 18:48:04 UTC 2022 - Adam Majer <adam.majer@suse.de> - update to 16.13.2: Security update fixing the following issues: * Improper handling of URI Subject Alternative Names (Medium) (CVE-2021-44531, bsc#1194511) * Certificate Verification Bypass via String Injection (Medium) (CVE-2021-44532, bsc#1194512) * Incorrect handling of certificate subject and issuer fields (Medium) (CVE-2021-44533, bsc#1194513) * Prototype pollution via console.table properties (Low) (CVE-2022-21824, bsc#1194514) ------------------------------------------------------------------- Wed Jan 5 20:50:19 UTC 2022 - Adam Majer <adam.majer@suse.de> - fix_ci_tests.patch: fix tests on s390x ------------------------------------------------------------------- Tue Jan 4 12:17:19 UTC 2022 - Adam Majer <adam.majer@suse.de> - rsa-pss-revert.patch: temporarily revert functionality requiring newer openssl ------------------------------------------------------------------- Tue Dec 7 16:42:18 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.13.1: * deps: upgrade npm to 8.1.2 * lib: fix regular expression to detect `/` and `\` - 40670.patch: upstreamed - fix_ci_tests.patch: refreshed ------------------------------------------------------------------- Thu Nov 25 12:21:25 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org> - Fix CXXFLAGS in Tumbleweed - boo#1192824 ------------------------------------------------------------------- Tue Nov 9 10:43:16 UTC 2021 - Adam Majer <adam.majer@suse.de> - BR python 3.6+ ------------------------------------------------------------------- Sat Nov 6 14:13:02 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.13.0: * Experimental ESM Loader Hooks API https://github.com/nodejs/node/pull/37468 * deps: upgrade npm to 8.1.0 (npm team) * vm: add support for import assertions in dynamic imports - Changes in 16.11.1: * deps: update llhttp to 6.0.4 - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body (bsc#1191602, CVE-2021-22960) - Changes in 16.11.0: * deps: update nghttp2 to v1.45.1 - Changes in 16.10.0: * crypto: add rsa-pss keygen parameters * fs: make open and close stream override optional when unused * http: limit requests per connection The maximum number of requests a socket can handle before closing keep alive connection can be set with server.maxRequestsPerSocket. * src: add --no-global-search-paths cli option * stream: add signal support to pipeline generators - Changes in 16.9.0: * Added support for corepack * crypto: add RSA-PSS params to asymmetricKeyDetails * module: support pattern trailers * stream: add stream.compose - Changes in 16.8.0: * doc: deprecate type coercion for dns.lookup options * stream: add stream.Duplex.from utility and isDisturbed helper * util: expose toUSVString - Changes in 16.7.0: * fs: experimental: add recursive cp method - refreshed: fix_ci_tests.patch, flaky_test_rerun.patch, nodejs-libpath.patch, sle12_python3_compat.patch, versioned.patch, node_modules.tar.xz ------------------------------------------------------------------- Tue Nov 2 14:40:41 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org> - Add 40670.patch: test: fix test-datetime-change-notify after daylight change. ------------------------------------------------------------------- Fri Oct 15 19:57:42 UTC 2021 - Bernhard Voelker <mail@bernhard-voelker.de> - test-skip-y2038-on-32bit-time_t.patch: Add patch to skip the test 'test/parallel/test-fs-utimes-y2K38.js' which fails with a FP on platforms with 32-bit time_t. - nodejs16.spec: Reference it. ------------------------------------------------------------------- Thu Aug 12 13:51:48 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.6.2: * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names (bsc#1189370, bsc#1188881) * CVE-2021-22940: Use after free on close http2 on stream canceling (bsc#1189368) * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter (bsc#1189369) * deps: upgrade npm to 7.20.3 * deps: revert ABI-breaking change from V8 9.2 * module: fix ERR_REQUIRE_ESM error for null frames - cares_public_headers.patch: don't use private headers ------------------------------------------------------------------- Mon Aug 2 13:02:58 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.6.0: http2: fixes use after free on close http2 on stream canceling (bsc#1188917, CVE-2021-22930) ------------------------------------------------------------------- Thu Jul 22 12:18:32 UTC 2021 - Adam Majer <adam.majer@suse.de> - legacy_python.patch: fix building with python 3.4 in SLE-12 ------------------------------------------------------------------- Wed Jul 21 21:57:54 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.5.0: * deps: upgrade npm to 7.19.1 * fs: allow empty string for temp directory prefix * Node.js now exposes an experimental implementation of the Web Streams API ------------------------------------------------------------------- Fri Jul 2 15:17:09 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.4.1: deps: libuv upgrade - Out of bounds read (Medium) (bsc#1187973, CVE-2021-22918) ------------------------------------------------------------------- Thu Jul 1 13:34:05 UTC 2021 - Adam Majer <adam.majer@suse.de> - node-gyp_7.1.2.tar.xz: for SLE-12, use latest node-gyp that is compatible with python 3.4 ------------------------------------------------------------------- Wed Jun 23 12:57:04 UTC 2021 - Adam Majer <adam.majer@suse.de> - Update to 16.4.0: * async_hooks: stabilize part of AsyncLocalStorage * deps: + upgrade npm to 7.18.1 + update V8 to 9.1.269.36 * dns: allow --dns-result-order to change default dns verbatim ------------------------------------------------------------------- Mon Jun 21 05:01:32 UTC 2021 - Andreas Schneider <asn@cryptomilk.org> - Allow building for Fedora in the OBS ------------------------------------------------------------------- Fri Jun 4 20:59:13 UTC 2021 - Dirk Müller <dmueller@suse.com> - update to 16.3.0: * add -C alias for --conditions flag * add workspaces support to npm install commands ------------------------------------------------------------------- Mon May 31 16:27:44 UTC 2021 - Adam Majer <adam.majer@suse.de> - Use libalternatives instead of update-alternatives ------------------------------------------------------------------- Thu May 20 14:56:23 UTC 2021 - Adam Majer <adam.majer@suse.de> - New upstream version 16.2.0: * async_hooks: use new v8::Context PromiseHook API * deps: npm updated to 7.13.0 * lib: support setting process.env.TZ on windows * module: add support for URL to import.meta.resolve * process: add 'worker' event * util: add util.types.isKeyObject and util.types.isCryptoKey ------------------------------------------------------------------- Wed May 5 11:21:13 UTC 2021 - Adam Majer <adam.majer@suse.de> - New upstream version 16.1.0 fs: allow no-params fsPromises fileHandle read ------------------------------------------------------------------- Tue May 4 12:00:35 UTC 2021 - Adam Majer <adam.majer@suse.de> - New upstrean version 16.0.0: For complete list of changes since 15.x, please see https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V16.md#16.0.0 ------------------------------------------------------------------- Wed Mar 17 12:05:50 UTC 2021 - Adam Majer <adam.majer@suse.de> - Import staging 16.x
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
