nodejs16-devel-16.20.2-150400.3.27.2 < > , T e0ڦp9|nM}]UKcZNFsM&GS `4Era1 k?в4){
IP,TWTm4)ABwDَ8qB9 ϋ G$4k8p,
rNisc nBEX,;RDd+eOtyøT&|~`(6@ru7ô% Z}2.ɟTM$>olmőb=!à]O{l}Z mF > ; K ? Kp d ' K - @ F P + + R +
+ T + +
+
+ o + F p + T l (
8 . 9 . : V . F C| G C + H D@ + I D + X E Y E$ \ EX + ] F + ^ G b H c I= d I e I f I l I u I + v J z K
K K$ K* Kl C nodejs16-devel 16.20.2 150400.3.27.2 Development headers for NodeJS 16.x This package provides development headers for Node.js needed for creation
of binary modules. e0ڦh01-armsrv3
SUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Development/Languages/NodeJS https://nodejs.org linux aarch64 S _ x> $ + 0 d ^ O = i ) F 0 Ι L0 ' K a s DY
A큤A큤A큤A큤AA큤 e0e0Re0Te0e0Oe0Se0Se0e0Oe0Oe0Oe0Se0Se0Se0Se0Se0Se0e0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Ie0Oe0Oe0Oe0Oe0Oe0Oe0e0e0S e994cec65a7fe9fe674cb936ee0196f47f938eeb4b433e3571513dabec2c0b16 39e2ed632530063c878702ab20b284687e859b86d4c16471d2ebdfa77c59109e aee0a1f62d58c3788d56cf37a2b9df548bbf5775c1ae02f9672c2617f5e83672 feb11488455617b62623879e1246ab34be7779094c78c94faa8c81393dcc869d ef558c666fa6d35c1fb601ef590d43e8b7c982f40ab9ba67635d1db37f9b1c32 4e9c163e7e549f6e973a6ad951056c2dae71e2eb8d1673cc5889e34ec40e43d0 f8914865c0524ed76a61cfa398aa3dae81ec16182872a9286cfc989a8d795cb4 e5f03fedb99a1b4ebfc246e0f5ff671bd5ba8482a65a2b856b6b83b9cfa50f7a 4aeafe16259d21aea21e4882fbcf0dfc999e2a939ccc92780024527b9cec4553 55ea2f328080fa36126f9ec48345f79b88cbd498b760c445d97bf71e2e95e275 cc4bc1c013be87f4c31d2d36ddfdad9cbf46880529b39f3da2140c0f1421592c 35c2bb163618ab4c6d2ce8f8ade7e28eaca3b5889b3a0acb51bd28052ab6549c c16090af77c11039e6982761b71ad555f08cceb9bf800791048d4311bd839e99 1b4a9f5a35111a5983416c2dceb6a33198be33536d130aad69ce81bd22f377d7 d0a0408259f3f21c5d7314fc88a1c55564bdc6134a2f79fd9e21485c4687d327 bed77e4cf6c06f1224e681cbe607eff04713ca0c1e1f4a102e6a6565ee3f02aa 02755f41724fce441fd1e344f9fafbdf5628469931ca4785f490c56c506bc770 963533ff4b16f72a204a8c760896a857c54d0ac50570f1793e3bef1f2ae8b35f dce8bcfc3988c0e1218a0b53d35e807585942bd270718c8e77bf55534b830737 daac7ecc5bb83cae71dfd29db3254c99ed9b776d8acef1b428d3844be95b9dc6 a5fff8961e8f3da165fabf55d70cfb1eb44562cc0b8bf3b93b53bc3c9d283c86 98388ae32ce2c4390b82c3529539d2a476c44f590e960ed30a79f72b807ecd02 e9d7218b34e6e89b7b412891b7e2aa8b3a561c5ce9714c1f4def6c8a8593a6a6 8da69f8b10c701d1ab71e6f08144c542b6a7fc2f43db2ad97a9fec12949479cf 29d4b4ef48dc3c3ab32d75e0a85bcb80e084d42b32aae40d67fc1d882b93298a 43cb2c06d4e30e08126d6aa92441ab18f360e38fe768211ce1bcde499bb2c103 7b3ff9923e5132683ba64d2018a3958a7f5d971df4b074ea65891fac2d99e5ae ced66d1733239e00492d7972cf74cae737e416305c71b40ac5513b4ea411a3d3 dd8cbc40734bdb85672d642f68f2c023f914d2cd9778d236ee8e1e05f1fd8a5a 57ea9e687b2ad49190a5c1abf9c8a331431918a9b8ed6bb079f255ac7b1d6348 5ac96dda1b2050fdad85dc9b5549c04a2b65990721d85039114d5396f5f384f9 48836db1d7674842dee50550f0ab43578d534149f639f37422375aa7e523838e ccc74451c37760f9250c090eef6fdc39dcd3649dbdec44a539091b7cf1925e76 1d33b24ca53b12c2d3a12275ce6f311257e4e15d7b59c087192eb3aac2a5ce63 8563792f7d849a05fe2f262730e844d34e5e19140712852cd5607c7afc6358f7 0861cdb13b7fe65232f72871660d2de1fa7a4d3df70948d0ca10db1cc158086f 37a1c3b05220f195720c7b794d47a32fc743a72847824ab302621fb819cb204a root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root nodejs16-16.20.2-150400.3.27.2.src.rpm nodejs-devel nodejs16-devel nodejs16-devel(aarch-64)
nodejs16 npm16 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 16.20.2 16.20.2 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 e.w@d@d@d6@cc$@c@c@c~ @ch@cGc1@c%cd@bbbUbV@b1@b0b8aaaq@aՈ@a6aLazaban@a(@aim@a
@a@`]` @``ݮ@`"@`@```O@``7@`Q@adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de guillaume.gardet@opensuse.org adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de brunopitrus@hotmail.com adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de rpm@fthiessen.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de guillaume.gardet@opensuse.org adam.majer@suse.de adam.majer@suse.de dimstar@opensuse.org mail@bernhard-voelker.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de asn@cryptomilk.org dmueller@suse.com adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de - CVE-2023-38552.patch: Integrity checks according to policies
can be circumvented (CVE-2023-38552, bsc#1216272)
- CVE-2023-39333.patch, wasm-fixture.tar.gz: Code injection via
WebAssembly export names (CVE-2023-39333, bsc#1216273)
- CVE-2023-44487.patch: nghttp2 Security Release (CVE-2023-44487, bsc#1216190)
- CVE-2023-45143.patch: undici Security Release (CVE-2023-45143, bsc#1216205)
- nodejs.keyring: include new releaser keys - Update to LTS version 16.20.2 (security fixes). The following CVE
were fixed:
* (CVE-2023-32002, bsc#1214150): Policies can be bypassed
via Module._load (High)
* (CVE-2023-32006, bsc#1214156): Policies can be bypassed by
module.constructor.createRequire (Medium)
* (CVE-2023-32559, bsc#1214154): Policies can be bypassed via
process.binding (Medium) - Update to version 16.20.1 (security fixes only). The following
CVEs are fixed in this release:
* (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
Experimental Policy Mechanism (High)
* (CVE-2023-30585, bsc#1212579): Privilege escalation via
Malicious Registry Key manipulation during Node.js
installer repair process (Medium)
* (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
Public Key information in x509 certificates (Medium)
* (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
Empty headers separated by CR (Medium)
* (CVE-2023-30590, bsc#1212583): DiffieHellman does not
generate keys after setting a private key (Medium)
* deps: update c-ares to 1.19.1: c-ares security issues fixed:
+ CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
(bsc#1211604)
+ CVE-2023-31147 Moderate. Insufficient randomness in generation
of DNS query IDs (bsc#1211605)
+ CVE-2023-31130. Moderate. Buffer Underwrite in
ares_inet_net_pton() (bsc#1211606)
+ CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
to 20min from 2min. This seems to have lead to build failures
on some platforms, like s390x in Factory. (bsc#1211407) - Update to LTS version 16.20.0
* deps:
+ update undici to 5.20.0
+ update c-ares to 1.19.0
+ upgrade npm to 8.19.4 (bsc#1208744, CVE-2022-25881)
- legacy_python.patch, versioned.patch: refreshed - Update to LTS version 16.19.1:
* fixes permissions policies can be bypassed via process.mainModule
(bsc#1208481, CVE-2023-23918)
* fixes insecure loading of ICU data through ICU_DATA environment
variable (bsc#1208487, CVE-2023-23920)
* fixes OpenSSL error handling issues in nodejs crypto library
(bsc#1208483, CVE-2023-23919)
* updates undici to v5.19.1
+ Fetch API in Node.js did not protect against CRLF injection in host headers
+ Regular Expression Denial of Service in Headers in Node.js fetch API
(bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936) - Update to LTS version 16.19.0:
* dgram: add dgram send queue info
* cli: add --watch
- systemtap.patch: upstreamed, removed
- versioned.patch: refreshed - Update _constraints:
* Less RAM for aarch64 and 32-bit arm
* Use 'asimdrdm' cpu flag to use aarch64 workers where tests
are more stable - sle12_python3_compat.patch: only apply for older SLE12 codestreams
where Python 3.6 is not available. Still worlaround for bsc#1205568 - Workaround bug on SLE12SP5 during source unpack (bsc#1205568) - Update to LTS versino 16.18.1:
* inspector: DNS rebinding in --inspect via invalid octal IP
(bsc#1205119, CVE-2022-43548)
- Replace node-gyp for SLE12 with python 3.4 compatible gyp - Update to LTS version 16.18.0:
* http: throw error on content-length mismatch
* stream: add ReadableByteStream.tee()
* deps: npm updated to 8.19.2
- nodejs-libpath.patch, fix_ci_tests.patch, versioned.patch: refreshed
- undici_5.8.1.patch, undici_5.8.2.patch: upstreamed and removed
- systemtap.patch: upstream regression - Update to Nodejs 16.17.1:
* deps: llhttp updated to 6.0.9
+ CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
+ Incorrect Parsing of Multi-line Transfer-Encoding
(CVE-2022-32215, bsc#1201327)
+ Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
* crypto: fix weak randomness in WebCrypto keygen
(CVE-2022-35255, bsc#1203831) - Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl. - undici_5.8.1.patch, undici_5.8.2.patch: update undici to 5.8.2
(bsc#1202382, CVE-2022-35949, bsc#1202383, CVE-2022-35948) - enable crypto-policies for SLE15 SP4+ and TW (bsc#1200303)
- Update to LTS version 16.17.0:
* deps: upgrade npm to 8.15.0
* Improved interoperability of the Web Crypto API
* Updated Undici to 5.8.0 (bsc#1201710, CVE-2022-31150)
For full list of changes, see
https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V16.md#16.17.0
- nodejs-libpath.patch, versioned.patch: refreshed patches - Update to LTS version 16.16.0:
* http: stricter Transfer-Encoding and header separator parsing
(bsc#1201325, bsc#1201326, bsc#1201327,
CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
* src: fix IPv4 validation in inspector_socket
(bsc#1201328, CVE-2022-32212) - Update to LTS version 16.15.1
* upgrade npm to 8.11.0 (bsc#1200517, CVE-2022-29244)
- Update to LTS version 16.15.0
* Add experimental support to the fetch API. This adds the
`--experimental-fetch` flag that installs the fetch, Request,
Response, Headers, and FormData globals.
* Broken x32 support is removed
* crypto: Add KeyObject.prototype.equals method
* esm: support https remotely and http locally under flag
* module: unflag esm jso
- rebased: nodejs-libpath.patch, npm_search_paths.patch, versioned.patch - update to LTS release 16.14.2:
* deps: upgrade openssl sources to OpenSSL_1_1_1n
- fix_ci_tests.patch: refreshed - update to LTS release 16.14.1:
* deps: upgrade npm to 8.5.0
* http2: fix memory leak on nghttp2 hd threshold
- 42342.patch: upstreamed, dropped
- versioned.patch: refreshed - 42342.patch: fix expired certificates in unit tests - update to LTS release 16.14.0:
* deps: upgrade npm to 8.1.4
* child_process: add support for URL to cp.fork
* fs: accept URL as argument for fs.rm and fs.rmSync
* lib:
+ make AbortSignal cloneable/transferable
+ add AbortSignal.timeout
+ add reason to AbortSignal
+ add unsubscribe method to non-active DC channels
* process: add getActiveResourcesInfo()
* src:
+ add x509.fingerprint512 to crypto module
+ add flags for controlling process behavior
* stream:
+ add map and filter methods to readable
+ deprecate thenable support
* timers: add experimental scheduler api
* util:
+ add numericSeparator to util.inspect
+ always visualize cause property in errors during inspection
+ pass through the inspect function to custom inspect functions
npm_search_paths.patch, versioned.patch: refreshed - Add buildtime version check to determine if we need patched
openssl Requires: or already in upstream. (bsc#1192489) - rsa-pss-revert.patch: dropped, since openssl updated with needed
functionality - update to 16.13.2:
Security update fixing the following issues:
* Improper handling of URI Subject Alternative Names (Medium)
(CVE-2021-44531, bsc#1194511)
* Certificate Verification Bypass via String Injection (Medium)
(CVE-2021-44532, bsc#1194512)
* Incorrect handling of certificate subject and issuer fields (Medium)
(CVE-2021-44533, bsc#1194513)
* Prototype pollution via console.table properties (Low)
(CVE-2022-21824, bsc#1194514) - fix_ci_tests.patch: fix tests on s390x - rsa-pss-revert.patch: temporarily revert functionality requiring
newer openssl - Update to 16.13.1:
* deps: upgrade npm to 8.1.2
* lib: fix regular expression to detect `/` and `\`
- 40670.patch: upstreamed
- fix_ci_tests.patch: refreshed - Fix CXXFLAGS in Tumbleweed - boo#1192824 - BR python 3.6+ - Update to 16.13.0:
* Experimental ESM Loader Hooks API
https://github.com/nodejs/node/pull/37468
* deps: upgrade npm to 8.1.0 (npm team)
* vm: add support for import assertions in dynamic imports
- Changes in 16.11.1:
* deps: update llhttp to 6.0.4
- HTTP Request Smuggling due to spaced in headers
(bsc#1191601, CVE-2021-22959)
- HTTP Request Smuggling when parsing the body
(bsc#1191602, CVE-2021-22960)
- Changes in 16.11.0:
* deps: update nghttp2 to v1.45.1
- Changes in 16.10.0:
* crypto: add rsa-pss keygen parameters
* fs: make open and close stream override optional when unused
* http: limit requests per connection
The maximum number of requests a socket can handle before closing
keep alive connection can be set with server.maxRequestsPerSocket.
* src: add --no-global-search-paths cli option
* stream: add signal support to pipeline generators
- Changes in 16.9.0:
* Added support for corepack
* crypto: add RSA-PSS params to asymmetricKeyDetails
* module: support pattern trailers
* stream: add stream.compose
- Changes in 16.8.0:
* doc: deprecate type coercion for dns.lookup options
* stream: add stream.Duplex.from utility and isDisturbed helper
* util: expose toUSVString
- Changes in 16.7.0:
* fs: experimental: add recursive cp method
- refreshed: fix_ci_tests.patch, flaky_test_rerun.patch,
nodejs-libpath.patch, sle12_python3_compat.patch,
versioned.patch, node_modules.tar.xz - Add 40670.patch: test: fix test-datetime-change-notify after
daylight change. - test-skip-y2038-on-32bit-time_t.patch: Add patch to skip the test
'test/parallel/test-fs-utimes-y2K38.js' which fails with a FP
on platforms with 32-bit time_t.
- nodejs16.spec: Reference it. - Update to 16.6.2:
* CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
characters in domain names (bsc#1189370, bsc#1188881)
* CVE-2021-22940: Use after free on close http2 on stream canceling
(bsc#1189368)
* CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
(bsc#1189369)
* deps: upgrade npm to 7.20.3
* deps: revert ABI-breaking change from V8 9.2
* module: fix ERR_REQUIRE_ESM error for null frames
- cares_public_headers.patch: don't use private headers - Update to 16.6.0:
http2: fixes use after free on close http2 on stream canceling
(bsc#1188917, CVE-2021-22930) - legacy_python.patch: fix building with python 3.4 in SLE-12 - Update to 16.5.0:
* deps: upgrade npm to 7.19.1
* fs: allow empty string for temp directory prefix
* Node.js now exposes an experimental implementation of the
Web Streams API - Update to 16.4.1:
deps: libuv upgrade - Out of bounds read (Medium)
(bsc#1187973, CVE-2021-22918) - node-gyp_7.1.2.tar.xz: for SLE-12, use latest node-gyp that
is compatible with python 3.4 - Update to 16.4.0:
* async_hooks: stabilize part of AsyncLocalStorage
* deps:
+ upgrade npm to 7.18.1
+ update V8 to 9.1.269.36
* dns: allow --dns-result-order to change default dns verbatim - Allow building for Fedora in the OBS - update to 16.3.0:
* add -C alias for --conditions flag
* add workspaces support to npm install commands - Use libalternatives instead of update-alternatives - New upstream version 16.2.0:
* async_hooks: use new v8::Context PromiseHook API
* deps: npm updated to 7.13.0
* lib: support setting process.env.TZ on windows
* module: add support for URL to import.meta.resolve
* process: add 'worker' event
* util: add util.types.isKeyObject and util.types.isCryptoKey - New upstream version 16.1.0
fs: allow no-params fsPromises fileHandle read - New upstrean version 16.0.0:
For complete list of changes since 15.x, please see
https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V16.md#16.0.0 - Import staging 16.x h01-armsrv3 1697700518
! " # $ % & ' ( ) * + 16.20.2 16.20.2-150400.3.27.2 16.20.2-150400.3.27.2 node16 common.gypi config.gypi cppgc common.h js_native_api.h js_native_api_types.h libplatform libplatform-export.h libplatform.h v8-tracing.h node.h node_api.h node_api_types.h node_buffer.h node_object_wrap.h node_version.h uv uv.h aix.h android-ifaddrs.h bsd.h darwin.h errno.h linux.h os390.h posix.h stdint-msvc2008.h sunos.h threadpool.h tree.h unix.h version.h win.h v8-internal.h v8-platform.h v8-profiler.h v8-version.h v8.h v8config.h systemtap tapset node16.stp /usr/include/ /usr/include/node16/ /usr/include/node16/cppgc/ /usr/include/node16/libplatform/ /usr/include/node16/uv/ /usr/share/ /usr/share/systemtap/ /usr/share/systemtap/tapset/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31118/SUSE_SLE-15-SP4_Update/bba5c3915c1a9a763e251e2ea9bd1aad-nodejs16.SUSE_SLE-15-SP4_Update drpm xz 5 aarch64-suse-linux directory ASCII text ASCII text, with very long lines C++ source, ASCII text C source, ASCII text C++ source, UTF-8 Unicode text b̞ŵ`5
Dˊ utf-8 38cc3c285ac54c94e85e846f3191c1cf5d5a93f06cd5444d785b348272e83d10 ? P 7zXZ
! t/] "k%jbka^,BF Z-63f/ې˙|'x\=?7hA˫0LO`\D ϘooQ+ ŋ5BhuU2x8O +{G
Ǟr ^$ "4Z'. Q]_. JK <&ȥN^צ"6HI4)oX#P1E]JӤ5 hiTyH҂DQ
/#0eFE]$ SyC %p}donoAׯ`ѬIg!jt
^4~짮 NJusWuש쥦ttCs{jfk51e0,v_|MA>#yۣLb'
NOlX- Fp\O0@c8'1)"TtL%%USSFaf
Ek:JbHMeX6en Zp`klYR.ra;,`^ѣ:,Nj֟.ʀydQu{;#mwtT2-( ԏbohfu
vg^l+Yċr>B6j6ڡROB;푇&.!E*o
BGeasWrc$[mRHV0 UV 6Bx" k,t/ՀflOz 9ZEk)frCiq..5a:iM!P47FQMbIH͝#B0چ{o(H+
BY?\&0;S-`=May
7z~wbz-0<r]*,JXn3 eUԱrn9_
5m[@1CWAQǶ~{_|\ƣ j7ZZN닔,ږ,݉}ϊRUwٙU"Cϱ b]{B$Ry
{QEfoKӍ=ꅥeo|Ssi. kdGK|qԤЪq~7*U>ѝ$Q&"/iVBd}gjh>ƖohSt ^nqe"# &z(0GlٰiX`@pӔr% $q7Vi")ᝧ # *f2ND3%d`h`*cOB0
+ X
YZ