nodejs14-docs-14.21.3-150200.15.52.2 < > , ̉ e:N!p9|x SfZ7C1
O ^wϳ}*Zd"gqyJ'H^(ߓb> 3ǔ/.XwR@+vH4Il
)w 8KP}R^S
|_q}I685am~:}O1B1{U50.f&ȩ:OiqA ^4έˉ#TN Mq(i@-pcK}nl#l:NYD_Onf= > ; ? d ' A | b
7c
8 : > B BH E$ E4 ED E ( E 8 E 5 9 F 5 : J 5 F G H I X d Y h \ ] \ ^ b l c d e f l u v
z M ` d j C nodejs14-docs 14.21.3 150200.15.52.2 Node.js API documentation The API documentation for the Node.js JavaScript runtime. e:N!h03-ch2b j[SUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Documentation/Other https://nodejs.org linux noarch : b Q# L ? Mw 6| {
} X U t 0# : _ cT , ( B/ B" u Wa ' ; E
= S o? W .S Z ' J #U 5 i X9 < c (2 "
Lv c D Ȱ $ xw ǀ C w | Um [ m K H y 6 :S 1 6 g1 5 eJ 9 ) `~ 5,
î {U IU / ? s x P ] o 9 \ I 7 [ Y Pq #) X 2 p& ^p } T G }9 F 2 8 _ *2 a D@ Z 0 \ u Y= #! ` ` G J B6 v U . j X }@ AA큤A큤 e:N e:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:He:H 3bdddda465b853e26a70522e30e862451e187b62c7b125515f842cd81c9958d1 e193e3fee8052bb4a04c7aea10a6fa65a6ea8ac436e1051288465210bbe10d8a c8388cdcf09013f9e1f8acadbaf4a40a3f96ecbcc7b4dada881cf4eb582ce364 9f90bbe9ff772847371ffbf98a5c21e1aac37868cccd55e4011eb3c504df5ca6 851c9f6d5c50ccc1d6183f3f077e2ea60af88568a2397e1f1dcc3ee3fed41e36 c890219e4f19062c53cea872a248b1e038deb8090f985bcddfeff86366a89114 40d999bae655f3f91953d19c380862fb2cc72b877f6debd458a98fbf26670f15 5abc9d26abab9fe081e9740b4f0ba8b6d632ea8bbd73108c8b93f92e4802ac89 2863f53e2c12212917cd00e9a663d37d58a165bbe501bed4148cf447aba9c359 50aee985f42106f172c1b4f47173da3e9075795692af8b5e1963e33564215ef8 f96a007602b3ce0912a9387e14375fea308073c58fdd01656bb13a097eb0cba7 16f11a287a606bd88f5e7d01633f1ca66fdb46ae1893921a5f6a982952317d90 204855af2b1ca4256378a0854072ad5342628f3d1269cec2e6156635e9110dfd c508f09772472f4406fee68a6348ef89311da9b01d13880fc9608709945c89c8 1361011ffc88b556d5966d0b4cda8e6c17c4697010d07872ebe85d77769bdc73 6238ae460852e01cefef84ebc06815726a71754a9dac384591d5deba1ba056e2 1ccd244750032a930dbec1d105fba9aa148b7cd1515a076194cc8656a65b6afe 6bf549eddf8ec5d2d3c234469e70d0958b9a76a6c89d7a475f2906c9862bcdb9 12719e9232efbd08851d85682c100ce6d909b8f104fd888132ec6b392a67999a 531c7bb1e7513a85712f5fe6fd4d4cf650c1f9f8c15016a90263b71e37201af5 83b04ab0c80e2d9f065b0eca482e8d52e7f9f4b5b97d21447b8583e587055f44 83600abe7de889568471809c029210c717aafadb1968afe91826b8f45c57d7d9 c782ff51ae782959f79aa98c1152b3fecb219c6942deaaa703b81e9fa69b910e 8077842b84ad1aa8e94c99d55edbcc32b1748cea0fff431eda0e89fe6a06aa59 1bc92d8467e58e889cfeeb7a6a4939aa6079803eed515435f20424efb6e3750d aefef4624fd5b1dece7dd3ada04f782298cd5d72b423288c2014cf13fcc7de6f 7902d0170d2c1e4d0e06887ebec5d3ad2214642a603d9593c88ec1fd2cf7aaf3 38362d63141b182fbaa85e3e7f28e2b70df68973430b54edeadf2068efc1aa27 abdebd419af0eae6e5854b8010cd274809d35369f26d73016f6bd39db1b26f1e bd086ce4046d3158c119a274e7698600869bf44e8db18319ddc024fbe9ce3a24 b8a6a0930f62b0751e53c8d5f85c24093a6f090101610cb442c30d9ef5884fcb 7195e9049332039a6f96aa71fd8a43df303bce4d481aa1733440d8b1b0314ecf 40059f190f938d1b7a38a4689a96b88e64fee0bece1212e660105e6b3886ce21 a916b60a3c4d8ec56e7ff9d3b96d0346215156409cec18a4ac7268f7ca6f25ab 9659a2a1aef8092f5017a13cdd9c550f76552cb4e8fed9fcb80f8e1107a386db 1e0b903c6d7757b41b8620281029411aec6c1a7047261bcfb6b08d1ba2a3ded9 e83ff87ca255e231cee55dc4b11bd6178795368a8e1b498eccc4a16a487eee8d f374b98d9272cd5824bf3cedd9456545d31b1468df879cbc93f839579256c8da fbb73d72fc42fd1a859ba4078e67e61372787e13f3431cebddb2f6222243223d 326fcddf9b9c84f469f6f0da2ee4663511e9a77528f25f6bf9b52a37d27a04fa f8f1bbc2b274a8543bca87b0bb634f152e089d4d2b804efb9a3d4bde0114b17e 39516931eff7ee4e644da1d876d0cb07a5a792bdb50b859c356df728ef71ef71 1926fbc91face40fb13e8ca8df3a4e49cc0f65b1c6f3aa4594d66e2e02b80a6f 1c132c7624f2907c5e8bda2c1d5cbe5c46e7dd45b7cc4d0ba0f50fa0a73c0e0d 96beebc7bbfdafcafbb96647bff6cfda9ee6ac680eec7945f20afda14107f8c9 5ef1625ea38d124c4b51dd5f7283d99730bc360f2176ccf328f8415ff18a179e 2dbd52ce4b8b856654eee87d904009733d5eeb691da51376aaaa6e848b943c1e 8c5b7b1cb9a370caf6a75ef0eea8a0a9144df8a0e44404200bcce7c46a3c79cf 15d4dc184a6b05b2e68939911941e2f9762240008aab736eb3ee06fe456d78f7 d49dc029e0bb1b723122867b94a643f5de1721a825cfc43c3cfe32b792fd0056 3add9a1a9a279a03206575010eb5b468871c50809a1de572b6e41cbe13ed91ac 7c70cfa956cd2e509d830a446a3f67d9fd22b75914371b85dbd64838cd52d131 5e735e8900e1519c90a051e6c3d8ede71c53daf933ea9c888a262d5cad4f5c10 3427b54f83985f9d16ba8b1dffacfdc0ecb5cbfdb9c0ff8acea0ef85a47b535c 1acc652f649d5afa4b7a4c342bb8905b9d27b79e95095365a58e9c2483fe1abe ca2b04eddfc22126112a6bb7ba37f87b8c23af2ae2c5eb216d84288666191304 47a2bb5f1fdd8d41f27e5c3c15589dfda0d013180ac86e2dad7ade6f86e38a7b 6f01636551ef4cb3b3c42b6c72d40858b357a94027dd4a20a9cb27dc4c26cd35 c9bd2205bef268f0a8b20a2bd0db67df681ee62ff0a4dee635f0c88f637c00f5 cf0f55c3ce5ea3aa16f74089fcad5dcbdac010bd6c7bce59ee30a8d114c87c55 9629ec27a8f8a0dc8235d919d7fee833c3a46fbffdd0e3f9680dc84f3a1bf9d6 991738cac4c7c54726eda276bf1d4292ec22c506281aa02ceb747feb27c07298 06d89ffc0200304913b8d9deaf314148fd3d95a81bc3e625eb67764039843598 6a1db5bc9fcd7cf8f2479f8351e833ff7dd773aae12d7250ffcdff625e2a2385 2dd6fac8a3a30683dc2031f551a9301acf7695fc521b4a828c022738e8e35665 8d70694a83b41bfc549021fb8e5f07e362552a12a563b2ccc652b9417ee403e7 0d959107a2ee8cf1cc7d3395aa3b322749dcc89792b6e6f4e7c4aef17b3528ac a4933982f091ac3e31bd0f3e898151228571cf208ef0881d99ee3a65614b99f4 d87cbcfbb8c00279a935cd3ace8edbfb228b21bec7d4f999fb6b41f990b3dc2c 72d6332210c3796c607dd87f587817865b75058a0ea64713c06bd8c0e76f1c05 189da860141bf559788750de4def9595ca62fcaa70502e06385f28393d48f5ac 91ab95d9d32bf957ac76a68ac22723f3f3ceb679a4fa0aae53fde57537d84793 8f3f71f5c53c9012e0f523d4ea63e3cfd8557b5d55d56d92a50c82f510a567fb 98f00456cbb8eaaffd36f3ab85c07affb36ec5854439782c9b3acdae5f8ea953 d5a30cafa37e00bfb0a443637b361f09737f4fc48e7aedfc4b34d202615bae07 b35920ee69a0c4ced4c634bb68d3d128e1a7d57bef94064998729893de5d2cd7 937dd059d07d7d11be939ecf1c563800828a41fb3282ff3b26109eebc4c63df4 030b26a67682e6f5a5d5bd7bcac9b5028f88c0996f16d70df722c8953ef21f7b 5eb6fa26ac630f297ba514deb02b00929768252bb61978b25224144e7e56d652 9d09bbcd3986d86c30e0a12a34442f696adbe9d0edbd15fc3005afe50841204b 2fe0f2781e6ce71318b945715ca6447721313df537ba954552cf3cf78d4c0dc0 baf7d4e8ba73d3bf9d5abf75b5ff8e5c591be68df571c9f965119cff118168e2 b6b01df3dcd495719410f4f7472dac02f2df962ee72a842554a2cc45ec0038ca 529a7fe2e6275eb34ca9e241a63b081e5627974341c8c2666c539262de590ee4 0388cbbe2b5b8a869fddd1647e8bb2f932369c90cfcb80dded6da2da8bf9bfcc 1742f53038b12fbcd3c6687b17a9017d13f840a201675704c90e9c0a99ada348 33beeba54af13bb5bab296b41f04c0146bc2fdf287f196ba3f5210f8aed1b666 32199da787b6e41429fdc7a07b6bda4c5401293be75b11333fe542519a9cfd0a 096980e7cea02dcf5cbad3d166ff9acb02f616532897663fe6fcca96342ed33b 21085449c051212733f40fcc848aa956ad70ea5eb979d72de9144c94858171e1 f3f233f6ae8bbf129b7d0bd62dc3e577f2acc1ac02d0ca9447d8b0d06b8f8b10 6486c22269840c039a9ddf7e481b8d57aeff0796abb4d0de76ece173d792c01c 751b882456d751bb06fb2702c8f0220625038a968e3a9acf6358269d98d57d6a a1e925db743bd9a78ebedeee59a482325d2e822be82ca3d1a1d5643bee3723cb fdf8a2fdc44e16bb12b3e83d7fb24c6608fab71fd246aa909fd351dc75d7558e b9aa2d1751ea4043b94c36b94b275da5ae526f2990c1752bdb066cd680e76b40 8019d3615b8f3f1394a9cce4f755f8f107b36a3343e3af810bb17af959ae555f 2c942365023cb69c5b8804471dd3b5594ceaccea911675ce4fef0e85f1477859 39afd92eedfd50298b1de522ce3bb59f35ed6cdf943c9caf94a868d42de120c9 052b1c95b104c81c28e75ad76686a7e5da49383b5bd2cd75e42d218b20af066e 9b0d3d05781a012e4e9858a17d4bbe1626e40b025b6479c200ab1e4f6046217c 76aff29b24d2a180d004823bea9d14cc04dfb90b26be37a067c461608b514a95 82b9e0653b2999e77db5bf373ac59c8400ac87ef36d2152bf91e6e67948c6459 ef19c7c3753a7935ab933da16bb1b0b416e084ca27fe89cf5244a1082ff26d1b db67364d0c17bb236ff3a9f01c7a33004a902b50f6b0d462e4a69ab078f26476 c525a480abc3d7305ec8b1098ceaddf1921041a2d06a00e30cc9b951162af7b6 b833c49d8ceee8d489947fe0066a0bb45b6d1a10d60e62f5843290e33003f26b 1e008652f2dc341fb52c4fb618abe6c036cf1d9df98d949926e27cbcc1d2aef8 10240702013ab83fd686fee4f9678d5fb9e9cd1c1ca9a32a6bef9971bc23f5e9 006281923e321d675ca6f5e73cef460b966c400949e32e81d548d40b36ae75c6 99ee1bf4dc97273ae2a006a1e837e5b28f52bd7a8c504942205bd4f36f91f6c6 dc03eee8077dc38eab746e37b6f4d8d47d77993b964101c2de16c709de19b6ec b916a91e3be7bc5a36c13813c381734d74dae8382b35fdecc28cf9fa62f0c3d4 5b6c5a58145375e0db5645b563fac8e67d43ac774df79d58539de068eb1f0c60 1cb3bfefe49becf2011f8e4721c9c9a6d8658abcbda77f89355f5f8dd7553f9e 23100ebcd9995376c90edfcfa71ca2f1f4e42ffd166b4172051bedbad47df2c2 ef3dd1be7c8c54ad91e842d8ac78ac32bf5f7fde649d588837081fdd16176101 09180fafea1cfdd6426ba1684cf79d6fb685f86f58a289ec8e64e79a08c2aca3 6b33732052bee97435e6f220b3f520b77121d62a34a916bb6f8829bb18b8960d c622f174ea044c979c94058d5d91ec60758b38c1b203cd6fc041cd2bd81691e4 f252d243f25a51dfd5986f15848ac810379d9710fa79e92b9004441047ecd38f c158fa1e1202843dc1dae7648c1d2156509f0ba239c43f32f98df1c698be2bed 0f0e2aa4509913299ac5117ffb63a826cac42d21930f516bd442799709e9da92 16eb7c0ed5310f2f553baa69a9b8464382249514fac6c88325b202a46da2888d bcc9bb48196801f34ad1dc51608f307949fdd29e9bb0cbd70417b07d5a08e8c3 c8a0a6263dac97fe291d437c80233776cc3911abef2b14cc2083f2d0a83fc620 0743445b1b6f271b3e1178da21f8f87843f8901ee9056d7e179c7d98d8ab6ee6 18de34131b90f0cd116d8c74200e7d70c54c0c5a87e83dd36f9754eceb4ad91a 78623e8a56d97952799deb6734b1c0a02cea2f8490fa93b1edd9e2326bf44dd2 b2f165d0721ccfefd206125a1e6c2443155a0c4b2cee4449aac60b2dff5e6eee bd89a964aeb8c5844a855c48a0e04660dcf30492b0505700ed8b84bbfd0776bd f8b1d8194bf657adb9b8b0f82520be970b36e4eef5fa3c7f5763d050941ff8da e27196116a2c44efb924e6c0a6c06ae5cf909a9b4ccb5b84129bc67e68f52d44 394a8bc1aa7a270c9b4a9370a2ac9175fa40f0ad2aa17db8a9dcafce0a0c1fc5 aabfbf704496ecec9abf480cecddc15a38532f07ec376fcb3a4472ae5de2c316 f4499297f7c25c24e47ddc5a3bd60be36d0ce4b3d803158c3b7c71aad86284b1 b32a48262af8f38c5e9ceae7275695c38534bbee27a31bd46e4aa78f5e223220 060e07ba75ded760a596ebfe0d497bd5d382523c8b8d4e90a01f2b4cf1c3090d 0ea6589c50ced28fa498e380adacde8bef95aa62dc3b917a6eb814932b708749 58620ffd6d31ef8967cc04947f389329b8606077f2c27570b1ef0dad28440dbd 5042919016a95e8f4072fa71119259835fd0014d225f5249345a40e09511722e 26d9975c8ecee68ee2f10bc5709139825c4e06732dd0b320535d70bbee358deb d9fc65e080974d3ec01fec291b69184d920ca1b088e6dc7d13af85ce9fb522e3 ba6d40c1d3d6e9c1dc5d6218ecc74963a975725e05a23ddf14d9f83a0145e70f 4437631a18fecec07848657575e09b6f457bae8d649828d6123587580eaaa9d3 4eb470aa274265ef5d8debb2b1cdd9fe81636fd0269a752b6480aede2cd9127a bd821d590ca3b1e117233cb3e0711ce30cd0d0885faa296d3b2f1e88b10208bf 6d1d3afa5f1b5619bef1e5174708e42c2a5d62fb1d589ce0de1e67424377b45a af499e625983b5d86003d1d6862a845fc6ec8232e9242c1dbb5e831220238ab5 ba49562f9f777bb5cce86ab360ca84561cc5f7ee1ba88ba91e189016881c5d03 324870b6fca5799b11d39ea10551ce03227c2f5b90696ad4c19e8e639fc57b1f 73df8a587a59ab66c236784f3f8d4e25e96b2e8e37299a0e23ee12c0b9b5a26d 9c669fa4500b942a72351a33731768a125fc426d2cb24c1e38c41829310ae2a0 e1be03e6bb5301f7086f8b98281fb165771786ea465cd3d1674cf5c09d7f8995 fb86c25f23cd5cf11a11100037d4f1cc6c0333dfb8644a5f8c573673bd54e0ba 687e8fae70cbb28a71c2ed0af86c054a9ba8f96cffba97b16364098cf59b4c9b 2244f1116e3f8bd6ea5b853469199a63d9baedd7b4ff0b0f7384add62c5bff6e 67e9e2657bb4f259e6b7043ef30116d4687cf412d37c4f89488d71f94303b98e 7b9ad407adcffc17b9438fed8398b51a286287006bea316f43d659ae7dc9ee17 a89159c23ed21254a6f2ded8a04ec22aa0c6a1be412b27d1113acb07822171a0 3687f958aac75d22941634ba58d3df8e168cebbd15e1ef8fd45871341be7dafb e050f4ebc2ffea298270f7f52211b940f90636b508c1684ae8a40fdcab8f21f0 6f3bb048c10a83c2f67c52d05d30b4b1cb745d319cf9ceded2b74275c4129fa0 5ec698d3e9c27cc0ed23efe4d883be4d3fbd91b599ba5b25af6de684f13da849 d42b58393a3b6f092bfab2d3a91762f5bc55a1f907a0c7ab3a63cad6c3298cdb 7b58219f5ef4f64ebb4ac2cb80a93dc542035020d10e6b4a6ce14fa5ad6379b8 21cc2f5be8206afca5b2b57518a583b21f2b2bcf5386c33c0387f2af1e70cbcb 63e4dfb0f11dfed9cffd5f58bdc08630b1203c3f3a88b257afb1a739e7ac930e 769857bdaf6d902e2c041af487f4d3deb5540209b5ec038ddb3cbb2cf423e37f eb60c20fab7217cc89e44d32cd5449ce862f54fcd2bf797f8ddec92c0e12ad8e dd0d694c9925fb101d40369a753aaa012aa2ac0c89a02d23cc14db56314f5595 353013189d31bc07fb01bc2b31d1d43438fcbb844bff7886520b05fe781bf6f8 36dcd1d2b4a30aca45cb8976ff7346e05900e4cf44b76b65c1cbac099f612530 6e085b365c4d8d5526c25e2dd7fe14a8e2a7366f1552bd352cb19178ffe34386 95ae6fb248c0f60534c06712202c4ba0f55c33b5728b8ae30a4b3e4d8138260a b14d556f9bb5100e08d6fef3f8ddf7ce26e31ad5b60cb5106bfdd19229b3bc9b 8467294ac74d45695bdbd1fbf36e6ed8b256717017f522a8a40e92983668575a b1cd0796c2b7c577f23ae6bb82c9e08acb7f769e773fe7a1e6e7fe4ba61e734c 3ad9226ee895a171d8835b73b4b1d8fe24c34aa687f6cebefc7c0d15d90bc83c 6f8695cab67d28585a706757ded1bb81373928887bad16625ad6d05754907ad8 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root nodejs14-14.21.3-150200.15.52.2.src.rpm nodejs14-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 e7d"d@d7c@c$@c@ch@cb[c1@c%bb@b_b @aaq@a*@azaba
@aa@``9@```m`4@`-@_@_@__@_^@__@_@_~@_|\@_l@_O@_H_16_'@_ @_*@^@^y^@^@^^@adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de guillaume.gardet@opensuse.org adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de brunopitrus@hotmail.com adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de guillaume.gardet@opensuse.org adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de dmueller@suse.com adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de dmueller@suse.com adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de adam.majer@suse.de - CVE-2023-38552.patch: Integrity checks according to policies
can be circumvented (CVE-2023-38552, bsc#1216272)
- CVE-2023-44487.patch: nghttp2 Security Release (CVE-2023-44487, bsc#1216190)
- nodejs.keyring: include new releaser keys
- newicu_test_fixup.patch: workaround whitespaces funnies in
some icu versions * CVE-2023-32002.patch:
+ fixes policies can be bypassed via Module._load
+ fixes policies can be bypassed by module.constructor.createRequire
(CVE-2023-32002, CVE-2023-32006, bsc#1214150, bsc#1214156)
* CVE-2023-32559.patch: Policies can be bypassed via
process.binding (CVE-2023-32559, bsc#1214154) - CVE-2023-30581.patch: fixes mainModule.__proto__ Bypass
Experimental Policy Mechanism (CVE-2023-30581, bsc#1212574)
- CVE-2023-30589.patch: HTTP Request Smuggling via empty headers
separated by CR (CVE-2023-30589, bsc#1212582)
- CVE-2023-30590.patch: DiffieHellman does not generate keys
after setting a private key (CVE-2023-30590, bsc#1212583) - CVE-2022-25881.patch: http-cache-semantics(npm): Don't use regex
to trim whitespace (bsc#1208744, CVE-2022-25881) - Update to 14.21.3:
* fixes permissions policies can be bypassed via process.mainModule
(bsc#1208481, CVE-2023-23918)
* fixes insecure loading of ICU data through ICU_DATA environment
variable (bsc#1208487, CVE-2023-23920)
* deps: update npm to 6.14.18
+ CVE-2021-44907.patch: upstreamed and removed
- BR: python 3.6 - Update to 14.21.2:
* http2: fix memory leak when nghttp2 hd threshold is reached - Update _constraints:
* Less RAM for aarch64 and 32-bit arm
* Use 'asimdrdm' cpu flag to use aarch64 workers where tests
are more stable - Update to 14.21.1:
* inspector: DNS rebinding in --inspect via invalid octal IP
(bsc#1205119, CVE-2022-43548) - Update to 14.21.0:
* src: add --openssl-shared-config option - Update to 14.20.1:
* deps: update llhttp to 2.1.6:
+ CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
+ Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832) - Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl. - Update to 14.20.0:
* http: stricter Transfer-Encoding and header separator parsing
(bsc#1201325, bsc#1201326, bsc#1201327,
CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
* src: fix IPv4 validation in inspector_socket
(bsc#1201328, CVE-2022-32212) - Update to 14.19.3:
* Upgrade npm to v6.14.17
- obsoleted and removed: CVE-2021-3807.patch, CVE-2021-44906.patch
- refreshed: versioned.patch Update to 14.19.1:
* deps: upgrade openssl sources to 1.1.1n (bsc#1196877, CVE-2022-0778)
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
(bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
(bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235) - update to 14.19.0:
* crypto: make FIPS related options always available
* deps: deps: upgrade npm to 6.14.16
+ CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
splitPathRe (bsc#1192153)
+ CVE-2021-32803 - node-tar: Insufficient symlink protection
allowing arbitrary file creation and overwrite (bsc#1191963)
+ CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
allowing arbitrary file creation and overwrite (bsc#1191962)
+ CVE-2021-3918 - json-schema is vulnerable to Improperly
Controlled Modification of Object Prototype Attributes (bsc#1192696)
* module: support pattern trailers
* src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
denial of service (ReDoS) matching ANSI escape codes
(bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed - z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15 - update to 14.18.3:
Security update fixing the following issues:
* Improper handling of URI Subject Alternative Names (Medium)
(CVE-2021-44531, bsc#1194511)
* Certificate Verification Bypass via String Injection (Medium)
(CVE-2021-44532, bsc#1194512)
* Incorrect handling of certificate subject and issuer fields (Medium)
(CVE-2021-44533, bsc#1194513)
* Prototype pollution via console.table properties (Low)
(CVE-2022-21824, bsc#1194514) - update to 14.18.2:
* lib: fix regular expression to detect `/` and `\`
* worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed - Fix CXXFLAGS in Tumbleweed - boo#1192824 - update to 14.18.1:
* deps: update llhttp to 2.1.4
- HTTP Request Smuggling due to spaced in headers
(bsc#1191601, CVE-2021-22959)
- HTTP Request Smuggling when parsing the body
(bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
* buffer:
+ introduce Blob
+ add base64url encoding option
* child_process:
+ allow options.cwd receive a URL
+ add timeout to spawn and fork
+ allow promisified exec to be cancel
+ add 'overlapped' stdio flag
* dns: add "tries" option to Resolve options
* fs:
+ allow empty string for temp directory prefix
+ allow no-params fsPromises fileHandle read
+ add support for async iterators to fsPromises.writeFile
* http2: add support for sensitive headers
* process: add 'worker' event
* tls: allow reading data into a static buffer
* worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
* deps: upgrade npm to 6.14.15 which fixes a number of
security issues
(bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed - update to 14.17.5:
* CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
characters in domain names (bsc#1189370, bsc#1188881)
* CVE-2021-22940: Use after free on close http2 on stream canceling
(bsc#1189368)
* CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
(bsc#1189369)
- cares_public_headers.patch: don't use private headers - z15-test-skip.patch: skip problematic test on s390x - update to 14.17.4:
http2: fixes use after free on close http2 on stream canceling
(bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test - update to 14.17.2:
deps: libuv upgrade - Out of bounds read (Medium)
(bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
https://github.com/nodejs/node/pull/39068
- specfile cleanup - update to 14.17.1:
* deps: update ICU to 69.1
* errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed - update to 14.17.0:
* Experimental support for AbortController and AbortSignal
* Diagnostics channel (experimental module)
* UUID support in the crypto module
* update ICU to 68.1
* upgrade to libuv 1.41.0
* deps: npm update to 6.14.13
ssri Regular Expression Denial of Service and hosted-git-info
Regular Expression Denial of Service
(bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69 - Use libalternatives instead of update-alternatives - New upstream LTS version 14.16.1:
* CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
This is a vulnerability in the y18n npm module which may be
exploited by prototype pollution. You can read more about it in
https://github.com/advisories/GHSA-c4w7-xm78-47vh
(bsc#1184450)
* deps: upgrade npm to 6.14.12
- versioned.patch: refreshed - New upstream LTS version 14.16.0:
* CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
by resource exhaustion (bsc#1182619)
* CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) - New upstream LTS version 14.15.5:
* deps:
+ upgrade npm to 6.14.11
+ V8: backport dfcf1e86fac0 #37245
Note: Node.js is not believed to be vulnerable to CVE-2021-21148
* stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests - New upstream LTS version 14.15.4:
* CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
implementation. When writing to a TLS enabled socket,
node::StreamBase::Write calls node::TLSWrap::DoWrite with
a freshly allocated WriteWrap object as first argument.
If the DoWrite method does not return an error, this object is
passed back to the caller as part of a StreamWriteResult structure.
This may be exploited to corrupt memory leading to a
Denial of Service or potentially other exploits (bsc#1180553)
* CVE-2020-8287: HTTP Request Smuggling allow two copies of a
header field in a http request. For example, two Transfer-Encoding
header fields. In this case Node.js identifies the first header
field and ignores the second. This can lead to HTTP Request
Smuggling (https://cwe.mitre.org/data/definitions/444.html).
(bsc#1180554) - New upstream LTS version 14.15.3:
* deps:
+ upgrade npm to 6.14.9
+ update acorn to v8.0.4
* http2: check write not scheduled in scope destructor
* stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed - openssl_binary_detection.patch: fixes unit tests on SLE12 - Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies - New upstream LTS version 14.15.1:
* deps: Denial of Service through DNS request (High).
A Node.js application that allows an attacker to trigger a DNS
request for a host of their choice could trigger a Denial of Service
by getting the application to resolve a DNS record with
a larger number of responses (bsc#1178882, CVE-2020-8277) - Update to LTS version 14.15.0: (jsc#SLE-15774)
* no major changes
* test: reverts marking test-webcrypto-encrypt-decrypt-aes flaky - Use SLE OpenSSL version with 12-SP4+, and not just 12-SP5+
- Bump mininum ICU version to 65 - Update to version 14.14.0:
* fs: add rm method
* http: allow passing array of key/val into writeHead
* src: expose v8::Isolate setup callbacks
- sle12_python3_compat.patch: refreshed - Update to version 14.13.1:
* fs: rmdir recursive is no longer considered experimental
- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
in SLE's openssl - Update to version 14.13.0:
* deps: upgrade to libuv 1.40.0 #35333
* module: named exports for CJS via static analysis #35249
* module: exports pattern support #34718
* src: allow N-API addon in AddLinkedBinding() - Update to version 14.12.0:
* n-api:
+ create N-API version 7
+ add more property defaults
- Changes since version 14.9.0
* deps:
+ update llhttp to 2.1.2 (bsc#1176605, CVE-2020-8201)
+ http: add requestTimeout. Fixes Denial of Service by
resource exhaustion due to unfinished HTTP/1.1 requests
(bsc#1176604, CVE-2020-8251)
+ buffer: also alias BigUInt methods
+ crypto: add randomInt function
+ perf_hooks: add idleTime and event loop util
+ stream: simpler and faster Readable async iterator
+ stream: save error in state - old_icu.patch: re-add support for ICU 65 from SLE15 SP2
- fix_ci_tests.patch: move debug symbol strip for testing to the Makefile - Update to version 14.9.0:
* build: set --v8-enable-object-print by default (Mary Marchini) #34705
* deps:
+ upgrade to libuv 1.39.0 (cjihrig) #34915
+ upgrade npm to 6.14.8 (Ruy Adorno) #34834
+ V8: cherry-pick e06ace6b5cdb (Anna Henningsen) #34673
* n-api: handle weak no-finalizer refs correctly (Gabriel Schulhof) #34839
* tools: add debug entitlements for macOS 10.15+ (Gabriele Greco) #34378
- Changes in version 14.8.0:
* async_hooks: add AsyncResource.bind utility (James M Snell) #34574
* deps: update to uvwasi 0.0.10 (Colin Ihrig) #34623
* module: unflag Top-Level Await (Myles Borins) #34558
* n-api: support type-tagging objects (Gabriel Schulhof) #28237
* n-api,src: provide asynchronous cleanup hooks (Anna Henningsen) #34572
- versioned.patch: refreshed
- linker_lto_jobs.patch: refreshed - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
on Aarch64 with gcc10 (bsc#1172686) - Update to version 14.7.0:
* deps: upgrade npm to 6.14.7
* dgram: add IPv6 scope id suffix to received udp6 dgrams
* src:
+ allow preventing SetPromiseRejectCallback #34387
+ allow setting a dir for all diagnostic output #33584
* worker: make MessagePort inherit from EventTarget #34057
* zlib: switch to lazy init for zlib streams (Andrey Pechkurov) #34048 - avoid rpmbuild warnings on if/else/endif constructs - Update to version 14.6.0:
* deps:
+ upgrade to libuv 1.38.1
+ upgrade npm to 6.14.6 fixing information leak through
log files (bsc#1173937, CVE-2020-15095)
+ update V8 to 8.4.371.19
* module:
+ doc only deprecation of module.parent
+ package "imports" field
* src: allow embedders to disable esm loader
* tls: make 'createSecureContext' honor more options
* vm: add run-after-evaluate microtask mode
* worker: add option to track unmanaged file descriptors
- versioned.patch - refreshed - Update to version 14.5.0:
* deps: V8 engine is updated to version 8.3. For details, see
https://v8.dev/blog/v8-release-83
* events: experimental implementation of EventTarget
For details, see
https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.5.0
- sle12_python3_compat.patch: refreshed
- fix_ci_tests.patch: refreshed - Add Require for nodejs14 when intalling npm14. (bsc#1172728) - Update to version 14.4.0:
* napi: fix various types of memory corruption in napi_get_value_string_*()
(CVE-2020-8174, bsc#1172443)
* http2: fix HTTP/2 Large Settings Frame DoS
(CVE-2020-11080, bsc#1172442)
* TLS session reuse can lead to host certificate verification bypass
(CVE-2020-8172, bsc#1172441) - Update to version 14.3.0:
* repl: previews improvements with autocompletion
* it's now possible to use the await keyword outside of async functions,
with the --experimental-top-level-await flag
- Changes in version 14.2.0:
* console: Support for console constructor groupIndentation options
- skip_no_console.patch: refreshed
- versioned.patch, fix_ci_tests.patch: refreshed - Update to version 14.1.0:
* deps: upgrade openssl sources to 1.1.1g (SLE-12 only)
* http: doc deprecate abort and improve docs
* module: do not warn when accessing __esModule of unfinished exports
* n-api: detect deadlocks in thread-safe function
* src: deprecate embedder APIs with replacements
* stream:
+ don't emit end after close
+ don't wait for close on legacy streams
+ pipeline should only destroy un-finished streams
* vm: add importModuleDynamically option to compileFunction
skip_no_console.patch: add more unit tests that fail on dumb terminals - Initial version 14.0.0
Deprecations
* crypto: move pbkdf2 without digest to EOL
* fs: deprecate closing FileHandle on garbage collection
* http: move OutboundMessage.prototype.flush to EOL
* lib: move GLOBAL and root aliases to EOL
* os: move tmpDir() to EOL
* src: remove deprecated wasm type check
* stream: move _writableState.buffer to EOL
* doc: deprecate process.mainModule
* doc: deprecate process.umask() with no arguments
For a detailed list of changes, see
https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.0.0 h03-ch2b 1698319905
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ 14.21.3-150200.15.52.2 nodejs14-docs api addons.html addons.json addons.md all.html all.json assert.html assert.json assert.md assets hljs.css js-flavor-cjs.svg js-flavor-esm.svg style.css async_hooks.html async_hooks.json async_hooks.md buffer.html buffer.json buffer.md child_process.html child_process.json child_process.md cli.html cli.json cli.md cluster.html cluster.json cluster.md console.html console.json console.md corepack.html corepack.json corepack.md crypto.html crypto.json crypto.md debugger.html debugger.json debugger.md deprecations.html deprecations.json deprecations.md dgram.html dgram.json dgram.md diagnostics_channel.html diagnostics_channel.json diagnostics_channel.md dns.html dns.json dns.md documentation.html documentation.json documentation.md domain.html domain.json domain.md embedding.html embedding.json embedding.md errors.html errors.json errors.md esm.html esm.json esm.md events.html events.json events.md fs.html fs.json fs.md globals.html globals.json globals.md http.html http.json http.md http2.html http2.json http2.md https.html https.json https.md index.html index.json index.md inspector.html inspector.json inspector.md intl.html intl.json intl.md module.html module.json module.md modules.html modules.json modules.md n-api.html n-api.json n-api.md net.html net.json net.md os.html os.json os.md packages.html packages.json packages.md path.html path.json path.md perf_hooks.html perf_hooks.json perf_hooks.md policy.html policy.json policy.md process.html process.json process.md punycode.html punycode.json punycode.md querystring.html querystring.json querystring.md readline.html readline.json readline.md repl.html repl.json repl.md report.html report.json report.md stream.html stream.json stream.md string_decoder.html string_decoder.json string_decoder.md synopsis.html synopsis.json synopsis.md timers.html timers.json timers.md tls.html tls.json tls.md tracing.html tracing.json tracing.md tty.html tty.json tty.md url.html url.json url.md util.html util.json util.md v8.html v8.json v8.md vm.html vm.json vm.md wasi.html wasi.json wasi.md worker_threads.html worker_threads.json worker_threads.md zlib.html zlib.json zlib.md /usr/share/doc/packages/ /usr/share/doc/packages/nodejs14-docs/ /usr/share/doc/packages/nodejs14-docs/api/ /usr/share/doc/packages/nodejs14-docs/api/assets/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31273/SUSE_SLE-15-SP2_Update/d215e6fdfdd5ee3d03a6aa776e30a660-nodejs14.SUSE_SLE-15-SP2_Update drpm xz 5 x86_64-suse-linux
directory HTML document, UTF-8 Unicode text, with very long lines C++ source, UTF-8 Unicode text HTML document, ASCII text, with very long lines exported SGML document, ASCII text ASCII text exported SGML document, ASCII text, with very long lines exported SGML document, UTF-8 Unicode text C source, UTF-8 Unicode text Java source, UTF-8 Unicode text Java source, ASCII text ASCII text, with very long lines Algol 68 source, UTF-8 Unicode text 5$xxC~ utf-8 ab6764925a861847b5d76963dcd36d8c50e397402b778a09bda64f8e3f22a9e0 ? P 7zXZ
! t/] "k%jbka^!ַ0G[2P VͶ]i3Ns10KɮdcZ;ʊSSyCav ZH&([O^0*!6#*ȹ \K_y@] A هfJ/qۜO\] W66:0~F=2z @dMrA1[|U/B"'{|wG"ܚNQ* e)u 7|L?0p:ycg /U*]2h 2hRŖ tLΏ'e #_>.Н >o強[_Կ^x $ޝ/d$C̪MN*bvN \<|3U3 !cb8|J
ǬUyI; Uf7b S dԹgɫkgQN~GLgp,Ŏi,i'%>tJf xA\6BM1]m=Rk|D6PyI&$c8lE h4!n 4&NJkNk,\'w)3ҋ B̉Zj'naFMVA]ohLYcESV /trsQH*@ZHԵwD/pG]0$k %RU>N;G%1#r=4׃cf9c
*Y Q HǍzr3%W,B 5U|U iֻ#/0-"'3O3?wQ'{XS$V //eFreuucT1ܴj ?f.) .8 B {}ҜyZ &$ OG;4IZP fD2 ōV~aH&ꕨ@s%}C- ]5_(e ,3-Sp ^
'1
fT..95 ?9!lQP)`Ii˒LMuACMlwbI+'WN9 A`@Ɔ|(CŝjίK3"OK&xE0}FXw>abF ձw0x ϴ)fr"1KmŐf8ck'\.fT >=l~^rmv] D|7ho2h`)JdN^& ICd(7kȩ
Vޏd=F# @ 2e "^4<,9_i(4s@G,WiCNm
R
k:0Zfrmk!,a%a<$$DP
slO| =A58fYCKc>#{d(sY,@tɔnv6·9(,+6g䎔`R1_>QfSZA.V ۛ l7x@kD#>`t 1 ʚЖ
YZ