- 21257.diff: Revert an upstream revert that resulted that stdout
  remaining O_NONBLOCK during build process. This resulted in
  build failures.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Add constraints to build build errors due to lack of disk

• Files Changed
• Browse Source

- New upstream release 10.9.0:
  * buffer:
    + Fix out-of-bounds (OOB) write in Buffer.write() for
      UCS-2 encoding (CVE-2018-12115, bsc#1105019)
    + Fix unintentional exposure of uninitialized memory in
      Buffer.alloc() (bsc#1105018, CVE-2018-7166)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
      (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel
  * http: http.get() and http.request() (and https variants)
    now accept three arguments to allow for a URL and options object

• Files Changed
• Browse Source

delete ultra-sensitive patch handling of
"configure.js"

• Files Changed
• Browse Source

- New upstream release 10.8.0:
  * deps: upgrade npm to 6.2.0
- Changes in version 10.7.0:
  * console: The console.timeLog() method has been implemented.
  * http: Added support for passing both timeout and agent options
    to http.request.
  * inspector: Expose the original console API in
    require('inspector').console.
  * napi: Added experimental support for functions dealing with
    bigint numbers.
  * process:
    + The process.hrtime.bigint() method has been implemented.
    + Added the --title command line argument to set the process
      title on startup.
  * trace_events: Added process_name metadata.
- icu_small_grouping.patch: upstreamed
- versioned.patch, env_shebang.patch: refreshed
- update Jan's description changes for grammar and merge into git

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Ensure neutrality of description.
- Use %make_install.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- versioned.patch: refreshed

removed suse_version definition added accidentally
to spec file.

• Files Changed
• Browse Source

- New upstream release 10.6.0:
  * dns: An experimental promisified version of the dns module is
    now available. Give it a try with require('dns').promises.
  * fs: fs.lchown has been undeprecated now that libuv supports it.
  * lib: Atomics.wake is being renamed to Atomics.notify in the
    ECMAScript specification (reference). Since Node.js now has
    experimental support for worker threads, we are being proactive
    and added a notify alias, while emitting a warning if wake is used.
  * n-api: Add API for asynchronous functions.
  * util: util.inspect is now able to return a result instead of
    throwing when the maximum call stack size is exceeded during
    inspection.
  * vm: Add script.createCachedData(). This API replaces the
    produceCachedData option of the Script constructor that is
    now deprecated
  * worker: Support for relative paths has been added to the Worker
    constructor. Paths are interpreted relative to the current
    working directory.

• Files Changed
• Browse Source

initialized devel package after accepting 618506

• Files Changed
• Browse Source

Keyring update

• Files Changed
• Browse Source

- New upstream release 10.5.0:
  * crypto: Support for crypto.scrypt() has been added
  * fs:
    + APIs that take mode as arguments no longer throw on values
      larger than 0o777
    + BigInt support has been added to fs.stat and fs.watchFile
    + Fix crashes in closed event watchers.
  * worker_threads: multi-threading has been added behind the
    --experimental-worker flag in the worker_threads module.
    This feature is *experimental* and may receive breaking changes
    at any time.
- npm_search_paths.patch: Fix typo causing npm to not work

• Files Changed
• Browse Source

- Recommend same major version npm package (bsc#1097748)

• Files Changed
• Browse Source

  * Fixes memory exhaustion DoS: Fixes a bug that increases the
    memory consumed when reading from the network into JavaScript
    using the net.Socket object directly as a stream
    (CVE-2018-7164, bsc#1097537)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)
    (CVE-2018-7162, bsc#1097538)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- New upstream release 10.4.1:
  * Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug
    introduced in 9.7.0 that increases the memory consumed when
    reading from the network into JavaScript using the net.Socket
    object directly as a stream.
  * http2:
    + Fixes Denial of Service vulnerability by updating the
    http2 implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Fixes Denial of Service vulnerability by upgrading nghttp2
    to 1.32.0 (CVE-2018-1000168, bsc#1097401)
  * tls: Fixes Denial of Service vulnerability by updating the TLS
    implementation to not crash upon receiving
    (CVE-2018-7162)

• Files Changed
• Browse Source

- New upstream release 10.4.0:
  * deps: update V8 to 6.7.288.43
  * stream: ensure Stream.pipeline re-throws errors without callback
- Changes in version 10.3.0:
  * deps: upgrade npm to 6.1.0
  * fs: fix reads with pos > 4GB
  * net: new option to allow IPC servers to be readable and writable
    by all users
  * stream: fix removeAllListeners() for Stream.Readable to work as
    expected when no arguments are passed
npm_search_paths.patch: no longer override explicitly prefixed etc/
versioned.patch, env_shebang.patch: refreshed

• Files Changed
• Browse Source