Hello community, here is the log from the commit of package nodejs8 for openSUSE:Factory checked in at 2017-12-09 20:32:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs8 (Old) and /work/SRC/openSUSE:Factory/.nodejs8.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "nodejs8" Sat Dec 9 20:32:52 2017 rev:9 rq:555528 version:8.9.3 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs8/nodejs8.changes 2017-11-29 10:54:48.235983194 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs8.new/nodejs8.changes 2017-12-09 20:33:27.872469116 +0100 @@ -1,0 +2,22 @@ +Sat Dec 9 03:22:01 UTC 2017 - qantas94heavy@gmail.com + +- New upstream LTS release 8.9.3: + * buffer: buffers allocated with an invalid content will now be + zero filled + [ CVE-2017-15897, gh#nodejs/node#17428 ] + * deps/openssl: updated to 1.0.2n (only applies to SLE 12 SP1 + and lower) + [ CVE-2017-3738 CVE-2017-15896 ] + +- Changes in 8.9.2: + * console: avoid adding infinite error listeners + [ gh#nodejs/node#16770 ] + * http2: improve errors thrown in header validation + [ gh#nodejs/node#16718 ] + +- Remove unnecessary curl BuildRequires +- Enable gold linker on s390x (TW and SLE/Leap 15) +- Build with bundled ICU if system ICU not available (only applies + to SLE 11/12 and Leap 42.x) + +------------------------------------------------------------------- Old: ---- node-v8.9.1.tar.xz New: ---- node-v8.9.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs8.spec ++++++ --- /var/tmp/diff_new_pack.TZrgNA/_old 2017-12-09 20:33:29.964369478 +0100 +++ /var/tmp/diff_new_pack.TZrgNA/_new 2017-12-09 20:33:29.964369478 +0100 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs8 -Version: 8.9.1 +Version: 8.9.3 Release: 0 %define node_version_number 8 @@ -60,25 +60,27 @@ %bcond_without gdb %endif -# No binutils_gold on SLE12 (aarch64). +# No binutils_gold on SLE 12 GA (aarch64). %ifarch aarch64 - %if 0%{?sle_version} >= 120100 || 0%{?is_opensuse} %bcond_without binutils_gold %else %bcond_with binutils_gold %endif +%endif # aarch64 -%else # aarch64 - -# No binutils_gold on s390x. +# No binutils_gold on all versions of SLE 12 and Leap 42 (s390x). %ifarch s390x s390 -%bcond_with binutils_gold -%else +%if 0%{?suse_version} > 1320 %bcond_without binutils_gold +%else +%bcond_with binutils_gold +%endif %endif # s390x s390 -%endif # aarch64 +%ifnarch aarch64 s390x s390 +%bcond_without binutils_gold +%endif Summary: Evented I/O for V8 JavaScript License: MIT @@ -133,20 +135,24 @@ %endif # sles == 11 # SLE 12 and Leap 42 -%if 0%{?suse_version} == 1315 -%if %node_version_number >= 8 +# GCC 6 is only available with SLE 12 SP1 and Leap 42.2+ (ignore 42.1: EOL). +%if 8 >= 8 && 0%{?suse_version} == 1315 +%if 0%{?sle_version} < 120100 +BuildRequires: gcc5-c++ +%define cc_exec gcc-5 +%define cpp_exec g++-5 +%else BuildRequires: gcc6-c++ %define cc_exec gcc-6 %define cpp_exec g++-6 -%endif -%endif +%endif # SLE 12 < SP1 +%endif # node >= 8 and sle == 12 # No special version defined, use default. %if ! 0%{?cc_exec:1} BuildRequires: gcc-c++ %endif -BuildRequires: curl BuildRequires: fdupes BuildRequires: pkg-config BuildRequires: procps @@ -282,6 +288,9 @@ export CXX=%{?cpp_exec} %endif +# Node.js 4.x does not include the ICU database in the source tarball. +%define has_small_icu %(test -d "deps/icu-small" && echo 1 || echo 0) + ./configure \ --prefix=%{_prefix} \ %if ! %{with intree_openssl} @@ -293,6 +302,11 @@ %endif %if ! %{with intree_icu} --with-intl=system-icu \ +%else +%if %{has_small_icu} + --with-intl=small-icu \ + --with-icu-source=deps/icu-small \ +%endif %endif %if %{with gdb} --gdb \ ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.TZrgNA/_old 2017-12-09 20:33:29.996367954 +0100 +++ /var/tmp/diff_new_pack.TZrgNA/_new 2017-12-09 20:33:29.996367954 +0100 @@ -1,40 +1,40 @@ -70c9bbb0b7e9125ba2d1e83826cd7ab981d21bf59f58b53809bb1922e59211a9 node-v8.9.1-aix-ppc64.tar.gz -05c992a6621d28d564b92bf3051a5dc0adf83839237c0d4653a8cdb8a1c73b94 node-v8.9.1-darwin-x64.tar.gz -ed71abc42e00f9d1f55f0977ff55cad2f68f3e8693211d33922d9286e6f6540b node-v8.9.1-darwin-x64.tar.xz -20bba14a649ac39210a74720e399bde117ed38f95bde3548c16b36b8a1702cfc node-v8.9.1-headers.tar.gz -2f5e2d2bd3b5242d20a65be645b55f41e62550dfacc35d8b445f8613aec117e3 node-v8.9.1-headers.tar.xz -47521340ff82617c1e6ba63ce300685e1b8b7cf5c0ec2e71628bcdb398085b29 node-v8.9.1-linux-arm64.tar.gz -f774660980dcf931bf29847a5f26317823a063fa4a56f85f37c3222d77cce7c1 node-v8.9.1-linux-arm64.tar.xz -54efdd6a22d03294e4b6dc00338fa2d37e9740040d85638a62a3603cf31d3b26 node-v8.9.1-linux-armv7l.tar.gz -39564e969b4098794b07e5cabf4af9efe93d1c77e0f03412bca57131bf29d671 node-v8.9.1-linux-armv7l.tar.xz -d3e11a9ef301afdecb10ed26470492fd03402b86bf9efc3f89a9aef541bf9a2c node-v8.9.1-linux-ppc64le.tar.gz -bfde0cc192859fafdcbc5f04913e4eb8cd092bb689a74f8a1fd09f9b0eeb9659 node-v8.9.1-linux-ppc64le.tar.xz -7ab8c4bf36364624b6bc7610319f1e2c32a7c882aa6392ce285faaee39597dce node-v8.9.1-linux-ppc64.tar.gz -e440170091d1f64d8730c59a58ea43a8fbd37bdab299e20090b319d4f6568a83 node-v8.9.1-linux-ppc64.tar.xz -48160ddaa7397cf85ca0cf333cc87dc3485956c75a3cdf98f04735bb81b37da6 node-v8.9.1-linux-s390x.tar.gz -bf9c37cc33b524724c2e474c2745c2ba34843a8b8bf8051c8e40ab0d934965cd node-v8.9.1-linux-s390x.tar.xz -0e49da19cdf4c89b52656e858346775af21f1953c308efbc803b665d6069c15c node-v8.9.1-linux-x64.tar.gz -8be82805f7c1ab3e64d4569fb9a90ded2de78dd27cadbb91bad1bf975dae1e2d node-v8.9.1-linux-x64.tar.xz -830f5f4ff29c2b30089a19e1b71d52d02e965b4e1f08282a09616d99aae1a42b node-v8.9.1-linux-x86.tar.gz -74a6e140716b2d8a240ab0760fb8edc403d06edace42659bdf8fa6de15992cf0 node-v8.9.1-linux-x86.tar.xz -faa6397688c11458ad220c363898bd5028f1dbcf626dbe9be1c9d1d16f695e0d node-v8.9.1.pkg -b40ff46aa99640235cc1d3e27abd8749425ed8ad17936dde3ebb06d0d74fed82 node-v8.9.1-sunos-x64.tar.gz -2447d5b4cd787605d21f82159072764649910658d2f9d4f6dd2847c7380eff7c node-v8.9.1-sunos-x64.tar.xz -a5a31c9c211fccfa54068270ab95aab0c73d05d789d9cbc16fc521e1e4698c2c node-v8.9.1-sunos-x86.tar.gz -813dc3cdbfe061dd39efac2cf55679a2c03d1923c6f7e61ab8db2fc158f41cf1 node-v8.9.1-sunos-x86.tar.xz -32491b7fcc4696b2cdead45c47e52ad16bbed8f78885d32e873952fee0f971e1 node-v8.9.1.tar.gz -ef160c21f60f8aca64145985e01b4044435e381dc16e8f0640ed0223e84f17e0 node-v8.9.1.tar.xz -ff28dd5ff5a09a904e364742b58011af33d0a3fe148831e55b2c60f1bc251569 node-v8.9.1-win-x64.7z -db89c6e041da359561fbe7da075bb4f9881a0f7d3e98c203e83732cfb283fa4a node-v8.9.1-win-x64.zip -a30b6a56d424f8a34e65fe8f197a6db17dee6fa10ed50ffdf8490ca0787d995a node-v8.9.1-win-x86.7z -e3c38a7802acf1b2e89ff172f460dd1476ffc119bbcc88aa8d5364acd9714aa2 node-v8.9.1-win-x86.zip -5b747214518d62891e48ca58483df84bc3b0cea8b34176f22f92364e07ffdfc3 node-v8.9.1-x64.msi -2269b89726b055a86e988adb39b35cdd23434302416d3be0d73697f51da3e339 node-v8.9.1-x86.msi -ef1a6f906a31d115f0a2c8abfdd1d34f62f0789abd539910838ee1b62bf22dce win-x64/node.exe -28c8b55b3cccfe2c2c64ba6178340ac997545f1e1e4652122724df0dbbf0380b win-x64/node.lib -d6a356265c7b020d72a52a3d1f7783237d2b951e2b74d81015c509d5359a06b9 win-x64/node_pdb.7z -b8c4d963ab23c3b3e8a106d150e33c713734e9a84844549a632e2bddf8fc698c win-x64/node_pdb.zip -e8697af447c53faea624f854f44219107adca2d78c78a122c3ce9793aef97e2a win-x86/node.exe -a7956a209e0e8699977399bbe71319873898a5a70b9162d6eab4f0bfc09791c9 win-x86/node.lib -6d0a2847d205f179e0e9b3debb264e3bb1eb89a5e2c01792e6533f581ea3ba75 win-x86/node_pdb.7z -18a8506287415596f27c71d8e3efde37fbc3b7addb0e669c2452491891ef1a85 win-x86/node_pdb.zip +92e662ae3e7fa84a304a4be2e547a38d4f4dc421201a44a5f833683278484198 node-v8.9.3-aix-ppc64.tar.gz +fa7962f25db420a374e9e60d8a410188bd690a2f0ce8d403aa9b09d9b7ae8c1f node-v8.9.3-darwin-x64.tar.gz +ff2a425e6c87cd51be6935fe7e3cf3979f9dd53fc7307b66b74358822780ab05 node-v8.9.3-darwin-x64.tar.xz +f8a5add5cc635ac6981a52ac777d9e7ff03c072078f2ec1f33e099e9f57e3fca node-v8.9.3-headers.tar.gz +c0aa9ccfc9445b912367e695285cab6d153904c75a67b9cf7ce1b5fc8620ba99 node-v8.9.3-headers.tar.xz +df32e87060f5426fc6c6b1af8e3e130ae08ee36f570ac3728442c7833e53d7c3 node-v8.9.3-linux-arm64.tar.gz +8860678ad0c24059380af254574e5a12371a2d5c92ca5e1ac7267314af7df04f node-v8.9.3-linux-arm64.tar.xz +c1303857ab808dfd72de748e359ef767df6411404f57d05805ca9bfffd0ab3a8 node-v8.9.3-linux-armv6l.tar.gz +b3b588de37e4a6e227b540b3f85eac37fe7fd6e78ee92be9556eb17077f734ed node-v8.9.3-linux-armv6l.tar.xz +4288690edfb0ec8f20f34cbcb24580fad227b9323589a3f437d8fc474b19677d node-v8.9.3-linux-armv7l.tar.gz +4ca2b9a5b46c22353233365944c2df7f1566a298bf25f57be8c863bf1bd4e0f8 node-v8.9.3-linux-armv7l.tar.xz +0ddb29995a279c3ce630aee38dc5a5745e99283d440a9381e8ca209ccb860352 node-v8.9.3-linux-ppc64le.tar.gz +a5568b0098096db65c50c7968206c6cab4ea67f069e1a8627e18f33cec188095 node-v8.9.3-linux-ppc64le.tar.xz +020839f4dfd462ce7cc97e01c228e751511bc503387a094f580df1ef85cbf680 node-v8.9.3-linux-s390x.tar.gz +ca854e0f21bfbc86182134a1dc6197cf09ad4a5e0f640923d51674cc36aad9e2 node-v8.9.3-linux-s390x.tar.xz +df3f1480dddb27ba5ca72bcaae48cb1a4446f341648c87338979fff35eb9fb27 node-v8.9.3-linux-x64.tar.gz +86f3aa593315f0503d069e3f4805019583ab8d86c0244a83c795d1942e3f99b7 node-v8.9.3-linux-x64.tar.xz +2414b66425fb79d60f2ec6ba054de17b5253c1ee00fc25e491f8f02dbaae03a8 node-v8.9.3-linux-x86.tar.gz +04dbc27bfd4ef06a0b364f4c15ab28268f90bf1310d8035481106397c108f600 node-v8.9.3-linux-x86.tar.xz +05b95b18cd170cbf397b83f9cf098c7132a816354b45a9db8454347215df91fb node-v8.9.3.pkg +2159b641ed66fa9a20fa0092575d14f7175898704b66d4406583da6b52db7cae node-v8.9.3-sunos-x64.tar.gz +67bb2c6231fe621812caac11ee7c0b08be7260f8f00572a4a24f1d8f89f345aa node-v8.9.3-sunos-x64.tar.xz +19fbec782aad6524f6417e44d2ddc176b1aaa16f5a9ccd6586b543f2428c8ae3 node-v8.9.3-sunos-x86.tar.gz +0a300d8875e7fcbefb082e3ff79b62a39b63ed348a632d074315a18f1108ad4e node-v8.9.3-sunos-x86.tar.xz +9efec12ae408f4e92738d9e5ab3c3fe68a407b7830228b0548ce9eef54cf63f9 node-v8.9.3.tar.gz +748ddb3baa6b85e6a56e38aacd066586e7581952f84a92bc8152248a9be6b2da node-v8.9.3.tar.xz +d67bea0d8e27e66b55bdc32de600a11611e73b3a2322401a487513e56304559c node-v8.9.3-win-x64.7z +17dee0c06d088269123a27db3905a39a17a51cc0ea65435ae942c718f0f94403 node-v8.9.3-win-x64.zip +e23102d8555eace48b9976a490f3a5b702a74eff7184cdd99b7dc2e1b8d22fcb node-v8.9.3-win-x86.7z +c85bfc5443b9e9265493b286029ad0edda5b2aeed2abd6d314703fd21d5fd82a node-v8.9.3-win-x86.zip +68cdd5a021101a208d830da016eebb3a9de5ba75e76d8d8d6e9332038f10f56a node-v8.9.3-x64.msi +5f8e0e01879f273751dd1d0da7de44b4f32e65f62b5d3c373f54abd8c6db3f5a node-v8.9.3-x86.msi +c8231cd0fa8be30891fabf53092c2916d1cac024a7ae425b9082d3d13251d3b2 win-x64/node.exe +1cefa86f4992cd65af19c86113fe9fcd034f67ddcb85dc17fe8a10720b76480e win-x64/node.lib +a4bf203e3f1516020a913b560a468ad77796f8d2c2ae3e9f1884ca4312ee0d39 win-x64/node_pdb.7z +af14e1458134a9d4b37e66b0fea635b827e603694368f1feed4ff35a1f010867 win-x64/node_pdb.zip +2cd11403c9976e45be4f7f4785b96b0cb8126d7dd87dee8b1f1fe9fa680126f1 win-x86/node.exe +f2f21617e46cbb2e899d012774fdeed5cba4057b6829f231f429b28f07f1a86a win-x86/node.lib +f9a60e58680f720e4ca63833aa500586d4cc6366763a727b80f3f3153eeb1e7f win-x86/node_pdb.7z +834f09cc6c78ebf8b0d210aa55a4fdbecaab0f30a12f8b467a2de04b5db0d78b win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.TZrgNA/_old and /var/tmp/diff_new_pack.TZrgNA/_new differ ++++++ node-v8.9.1.tar.xz -> node-v8.9.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs8/node-v8.9.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs8.new/node-v8.9.3.tar.xz differ: char 26, line 1