Hello community, here is the log from the commit of package nodejs8 for openSUSE:Factory checked in at 2018-04-07 20:47:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs8 (Old) and /work/SRC/openSUSE:Factory/.nodejs8.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "nodejs8" Sat Apr 7 20:47:11 2018 rev:16 rq:593717 version:8.11.1 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs8/nodejs8.changes 2018-03-30 11:58:47.764450324 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs8.new/nodejs8.changes 2018-04-07 20:47:30.763116954 +0200 @@ -1,0 +2,23 @@ +Thu Apr 5 07:18:42 UTC 2018 - adam.majer@suse.de + +- Install license with %license, not %doc (bsc#1082318) + +------------------------------------------------------------------- +Wed Apr 4 13:29:24 UTC 2018 - adam.majer@suse.de + +- Fix some node-gyp permissions + +------------------------------------------------------------------- +Tue Apr 3 11:02:33 UTC 2018 - adam.majer@suse.de + +- New upstream LTS release 8.11.1: + * Security fixes: + + Fix for inspector DNS rebinding vulnerability + (bsc#1087463, CVE-2018-7160) + + Fix for 'path' module regular expression denial of service + (bsc#1087459, CVE-2018-7158) + + Reject spaces in HTTP Content-Length header values + (bsc#1087453, CVE-2018-7159) + * deps: upgrade http-parser to v2.8.0 + +------------------------------------------------------------------- Old: ---- node-v8.10.0.tar.xz New: ---- node-v8.11.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs8.spec ++++++ --- /var/tmp/diff_new_pack.zDxWSC/_old 2018-04-07 20:47:32.335060063 +0200 +++ /var/tmp/diff_new_pack.zDxWSC/_new 2018-04-07 20:47:32.339059919 +0200 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs8 -Version: 8.10.0 +Version: 8.11.1 Release: 0 %define node_version_number 8 @@ -390,6 +390,11 @@ find %{buildroot}%{_libdir}/node_modules -type f -exec chmod -x {} + chmod 0755 %{buildroot}%{_libdir}/node_modules/npm%{node_version_number}/bin/np*-cli.js chmod 0755 %{buildroot}%{_libdir}/node_modules/npm%{node_version_number}/bin/node-gyp-bin/node-gyp +chmod 0755 %{buildroot}%{_libdir}/node_modules/npm%{node_version_number}/node_modules/node-gyp/bin/node-gyp.js +%if %{node_version_number} >= 8 +chmod 0755 %{buildroot}%{_libdir}/node_modules/npm%{node_version_number}/node_modules/npm-lifecycle/node-gyp-bin/node-gyp +%endif + # browser.js is useless for npm cli find %{buildroot}%{_libdir}/node_modules/npm%{node_version_number} -name "browser.js" -delete @@ -430,7 +435,8 @@ %files %defattr(-, root, root) -%doc AUTHORS LICENSE *.md +%license LICENSE +%doc AUTHORS *.md %doc deps/v8/tools/gdbinit %dir %{_libdir}/node_modules %{_bindir}/node%{node_version_number} @@ -440,6 +446,10 @@ %ghost %{_sysconfdir}/alternatives/node-default %ghost %{_sysconfdir}/alternatives/node.1%{ext_man} %exclude %{_libdir}/node_modules/npm%{node_version_number} +# We need to own directory on old versions of SLE +%if 0%{?suse_version} < 1500 +%dir %_defaultlicensedir +%endif %files -n npm%{node_version_number} %defattr(-, root, root) ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.zDxWSC/_old 2018-04-07 20:47:32.371058761 +0200 +++ /var/tmp/diff_new_pack.zDxWSC/_new 2018-04-07 20:47:32.375058616 +0200 @@ -1,40 +1,40 @@ -0cf3170dfd8cf489a8e17dfa525927ba927fe3022a1ef2c924affffce7c82691 node-v8.10.0-aix-ppc64.tar.gz -7d77bd35bc781f02ba7383779da30bd529f21849b86f14d87e097497671b0271 node-v8.10.0-darwin-x64.tar.gz -03eac783c88ac5253942504658b02105b8acce5c07ff702f55c2fc47d7798664 node-v8.10.0-darwin-x64.tar.xz -283b3754d72cfee294c5fb69b684c6ab645e4ce2bccc1a931a9687d275f86c74 node-v8.10.0-headers.tar.gz -461b094359bb69ec9cbe1326cd4a9576403960167857a41f7c0599e28e3b6021 node-v8.10.0-headers.tar.xz -0776fd38fec6e739c9b4ae18dbdabd09a763b1b6fb7deb12ea2863046350d6a9 node-v8.10.0-linux-arm64.tar.gz -cbec410109664f75d3c988a43483576fc56f745e05e3884891df9c509fbb1b12 node-v8.10.0-linux-arm64.tar.xz -4b551327679b40065eed483e1dad0ba4626ed493cbc9fe4322d4c13a34754332 node-v8.10.0-linux-armv6l.tar.gz -0180c89e7987650009cbfb90fe238b0c5cf3c5ff50d9b4c60a40de2044bd3178 node-v8.10.0-linux-armv6l.tar.xz -806b735c9d082e12406737c9d4dac851c03f5b36feb6afebdc9c99164c66398b node-v8.10.0-linux-armv7l.tar.gz -0f0a675639180cd95077212d0993b45664524bba07359918230cfd7f1bf3d97d node-v8.10.0-linux-armv7l.tar.xz -f3daa7c32c5ea92176821b87e4f7653de6c181cca2d87904f6a1d3b25864d623 node-v8.10.0-linux-ppc64le.tar.gz -b0bd52b42580f2fdbe5eb705b8fe98324028cdb3b0fd625d1e118e4315657afa node-v8.10.0-linux-ppc64le.tar.xz -f225806b120564dadc9f1194d4360a311ffb374e3ffd0bcf6da0a9bfeeb670bc node-v8.10.0-linux-s390x.tar.gz -0744f2b519c3c7f4a73b1b66bc7532ed854eced6a6eab2510b00b8bd74b670f8 node-v8.10.0-linux-s390x.tar.xz -c1302439aee9791d70d3ab4194a612e6131d37fa0e3452072e847e212ed77867 node-v8.10.0-linux-x64.tar.gz -92220638d661a43bd0fee2bf478cb283ead6524f231aabccf14c549ebc2bc338 node-v8.10.0-linux-x64.tar.xz -5d663e19fad01095ce919765156894165d2850f2682de82139256be249c89641 node-v8.10.0-linux-x86.tar.gz -137d3ba8b4396e5ec432e354950e6cb908c2b5b87afcd43894349f30f9a4cc1a node-v8.10.0-linux-x86.tar.xz -6f664a1325dbe37e7804a6323ee09a7c381c4bd4b8d17e175b778c672efe002c node-v8.10.0.pkg -6726b89920e3ed6c7a528d47093a381b77b107706aa2edcabd5c681888d1aab9 node-v8.10.0-sunos-x64.tar.gz -c593c6dee58b04258af8a76b992d801aa3e732487b00cce0d674dac768015f86 node-v8.10.0-sunos-x64.tar.xz -5bd102bdaec55f4a31e0f9cc6b42964a1cbe5b4a504aff357f6f8d43e14b325f node-v8.10.0-sunos-x86.tar.gz -3596744bb6c4300624ed794976fc0bc8c4b4d17ec8159f8dcba76e7e959a1f7c node-v8.10.0-sunos-x86.tar.xz -57ddd302260f77fa6dfe774f97b196828ec7c08aafbbd8def5e527a388d18f2d node-v8.10.0.tar.gz -b72d4e71618d6bcbd039b487b51fa7543631a4ac3331d7caf69bdf55b5b2901a node-v8.10.0.tar.xz -8b197441215f5f00840baac1ac83c42f0ac80dd839b17deb8218e3788d188690 node-v8.10.0-win-x64.7z -936ada36cb6f09a5565571e15eb8006e45c5a513529c19e21d070acf0e50321b node-v8.10.0-win-x64.zip -38f32acdfdefa9e19d6cb1744b47bfb127eaad6b766b97787f493e3c21100e13 node-v8.10.0-win-x86.7z -51873acda1ce02d756a6849cbd630789c8f26e3405a7a8135132ade5c09cfa30 node-v8.10.0-win-x86.zip -da4cb03d664e50aa09dc7cd326414b07f945fcccdfad99dee690ebb0a7ebe506 node-v8.10.0-x64.msi -d0ce9aa5dbcbdfba11990f2ef2754df9d754f1f8e95eec34c3f1faeab363b431 node-v8.10.0-x86.msi -cfbc6069ce9c98faafa5433a26338d35b64e9571ee83e642ba2bae32438ed1e2 win-x64/node.exe -f69a63e2f727787acc48f3b2c16d05415825a0db2ad4a6ca2233ed47d1aa06da win-x64/node.lib -259e217ff5c1a946be0f73e79d131c8fc00faf67aadeebf245657a4f4800123a win-x64/node_pdb.7z -7b8b3682637f86053d85447f224b8323ffd572417612da20ddf8cfa433ca324a win-x64/node_pdb.zip -3fda1bb744fb052e17775fe23c0aa710da69383e43f58cc7e06eb3b46e675a1e win-x86/node.exe -12f9f0ce97ffe727acf2290960265d8d4452ddf4702e8d245a44c09a6b73ab29 win-x86/node.lib -1978238872b17b2a0bbe757d11584c575747403905f90bf872c978af34fe5ca5 win-x86/node_pdb.7z -bf2e65b5cc3af4768bde81c56994f681a8d888ca91fbe040a677cf80ed4ca66d win-x86/node_pdb.zip +0dabd62eaa3675dafb458da6206fe31a6edf3c368b428fe8d2f800b857070c44 node-v8.11.1-aix-ppc64.tar.gz +5c7b05899ff56910a2b8180f139d48612f349ac2c5d20f08dbbeffbed9e3a089 node-v8.11.1-darwin-x64.tar.gz +882fcca054d6100ca67f94e4cf50d8df141f106fafbcefc0b04facc4a9ab956c node-v8.11.1-darwin-x64.tar.xz +ea28109f7a3b3b21705f25fb0e181e984ece46e785dd9912b5c14df4c067fa07 node-v8.11.1-headers.tar.gz +0f1838be48063a0c419178b02eeffaffeb6d4b09b50b9b33b4234dc111ff64fa node-v8.11.1-headers.tar.xz +68546c94a730a8d546e37a9bbae919f4a0f864220ce3aa160461a4f3e779a6af node-v8.11.1-linux-arm64.tar.gz +ff518f33751baa8ea4f18853d446357c2edecd930a1526ac9b2eaa79baddc1bf node-v8.11.1-linux-arm64.tar.xz +10ccfd8631923cac8b0f41a83ef9316a5f19faf96de1eee66dedc20ebf9d61e7 node-v8.11.1-linux-armv6l.tar.gz +ae5d9b9804a441b786046e125380ea15755db40a99fb5551582bd6bd59ef71be node-v8.11.1-linux-armv6l.tar.xz +73abddb5e80a2926f1646b77bbb7093465b2abc43846c1b468dbccad4b72164d node-v8.11.1-linux-armv7l.tar.gz +7bb97e3b06d186cfff576096f75431eedcc0ecee16c47afe8aabd7a22cc31c47 node-v8.11.1-linux-armv7l.tar.xz +f894524124c19fcd2180a483b7a238b77a14fb81c3d4723620ec66be2635cb4f node-v8.11.1-linux-ppc64le.tar.gz +d05b8a61f253168fc228d0da270a88293d082696b179d057d8aaa5328b43fb9b node-v8.11.1-linux-ppc64le.tar.xz +179e296c0f61fda1a454cba8d24a92efdb3f0646c0efd5c1d78194acf6cfc4df node-v8.11.1-linux-s390x.tar.gz +d9e892c7222b8c93f4e57f476a031c047345db1ad6785a5c85f9db41c6f8db23 node-v8.11.1-linux-s390x.tar.xz +0e20787e2eda4cc31336d8327556ebc7417e8ee0a6ba0de96a09b0ec2b841f60 node-v8.11.1-linux-x64.tar.gz +6617e245fa0f7fbe0e373e71d543fea878315324ab31dc64b4eba10e42d04c11 node-v8.11.1-linux-x64.tar.xz +373e28cb9549fda7063b35eba84827fb0fda6c01856d0b310431eaea7d0c6d45 node-v8.11.1-linux-x86.tar.gz +cfe4f6115f9148b16e1b993a6fbbaf21aeecbb97849dd498b979d8511ff25e85 node-v8.11.1-linux-x86.tar.xz +3b6b18483e736e3d4690705559f31ead036a42396986f1e5bcb3daa776188bbc node-v8.11.1.pkg +bf9e9d404bdc7e383897e82bb834322181b440198313077e4de435a4a56fb837 node-v8.11.1-sunos-x64.tar.gz +531817fc242bd355f2438aee471bf8c31085e39927012a37eeb558b7d378d6c6 node-v8.11.1-sunos-x64.tar.xz +e2f2573a3984a155e3001ac09b78d559d506c1160fda0bba0f819021a1eeef6a node-v8.11.1-sunos-x86.tar.gz +1c7f0928a66ad986bbf7bd1fb40d45824d1fe2e2aa9fa802e6b25a76273ff674 node-v8.11.1-sunos-x86.tar.xz +86678028f13b26ceed08efc4b838921ca1bf514c0b7e8151bfec8ba15c5e66ad node-v8.11.1.tar.gz +40a6eb51ea37fafcf0cfb58786b15b99152bec672cccf861c14d1cca0ad4758a node-v8.11.1.tar.xz +c4eae881574da81c1617af754151bfbf2f6b558002b71b16d580261ab86bfa6b node-v8.11.1-win-x64.7z +7d49b59c2b5d73a14c138e8a215d558a64a5241cd5035d9824f608e7bba097b1 node-v8.11.1-win-x64.zip +1328604c885d849f3b3d2c93377578b655e74a5f630b4757dbe8b16b9320d888 node-v8.11.1-win-x86.7z +c07a5eb55268c0bf491e73efb225f42a7289fd92d2b768b955ba9a49d7b916b4 node-v8.11.1-win-x86.zip +42a2a4e7972c2266174f114f732c93d183d4df2ddaa31a9d543c96f96a7b1b97 node-v8.11.1-x64.msi +7662094918364fa33b317b7788413d36ef2eb517fc4a23cee1134bab346f6de5 node-v8.11.1-x86.msi +ed9507c4c44915c1183a3bb6747c7821fb5ba194d47ff9351fa153f2ab368ed1 win-x64/node.exe +45fd5c590a3a0ee9a310b506bdf9d2e530bcdd2200aaac1030b8de1e00183181 win-x64/node.lib +b7c499c164a800579ec11061dd9771b601fe6aaa86b183b0a865d064febd4348 win-x64/node_pdb.7z +99df175e6f7fdf1da9c8a8a6c8ffc18b32537e08170b0872657adb7a57f76ed0 win-x64/node_pdb.zip +eb41ebd07e309443703e57bf54deecd00b8b7aee8edaf8eab12421117d94b117 win-x86/node.exe +ffc5bd433e8156df0de1ffd0e4060fbd218f591b861325fc3f8bd8a406b22ea6 win-x86/node.lib +6923077d76c3897fa4abb1347fd19c7f8b79659c7b71cdb6ed26dd3c69f4c91a win-x86/node_pdb.7z +4cdc022ed6f67d1e23ebfa3dd3bc9a21e05356e9d19520ed2e42c9ee8bcda68f win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.zDxWSC/_old and /var/tmp/diff_new_pack.zDxWSC/_new differ ++++++ node-v8.10.0.tar.xz -> node-v8.11.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs8/node-v8.10.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs8.new/node-v8.11.1.tar.xz differ: char 26, line 1