From: Jan Palus Date: Fri, 30 Jul 2021 21:51:50 +0000 (+0200) Subject: up to 14.17.4 (fixes CVE-2021-22930) X-Git-Tag: auto/th/nodejs-14.17.4-1 X-Git-Url: http://git.pld-linux.org/?p=packages%2Fnodejs.git;a=commitdiff_plain;h=14fd0e53a52f4058c992774892ab876267de8f76;ds=sidebyside up to 14.17.4 (fixes CVE-2021-22930) --- diff --git a/nodejs-lib64path.patch b/nodejs-lib64path.patch index f2dbc57..1b348a4 100644 --- a/nodejs-lib64path.patch +++ b/nodejs-lib64path.patch @@ -8,4 +8,4 @@ + let paths = ["/usr/lib64/node", "/usr/lib/node", "/usr/lib/node_modules", path.resolve(prefixDir, 'lib', 'node')]; if (homeDir) { - paths.unshift(path.resolve(homeDir, '.node_libraries')); + ArrayPrototypeUnshift(paths, path.resolve(homeDir, '.node_libraries')); diff --git a/nodejs.spec b/nodejs.spec index 81b0b3b..5145ba7 100644 --- a/nodejs.spec +++ b/nodejs.spec @@ -25,12 +25,12 @@ Name: nodejs # Active start: 2020-10-27 # Maintenance start: October 2020 # Maintenance end: April 2023 -Version: 14.17.0 +Version: 14.17.4 Release: 1 License: BSD and MIT and Apache v2.0 and GPL v3 Group: Development/Languages Source0: https://nodejs.org/dist/v%{version}/node-v%{version}.tar.gz -# Source0-md5: f9c3d013c4c1bf1f917ae624343c36d4 +# Source0-md5: d46ffad24b7637bdd47995a799bcec7d # force node to use /usr/lib/node as the systemwide module directory Patch2: %{name}-libpath.patch