- nodejs (20.15.0+dfsg-1+rpi1) trixie-staging; urgency=medium
++nodejs (20.17.0+dfsg-2+rpi1) trixie-staging; urgency=medium
+
+ [changes brought forward from 18.10.0+dfsg-6+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Tue, 15 Nov 2022 03:51:54 +0000]
+ * Set --with-arm-version=6 on raspbian.
+ * Use armv6k CFLAGS on raspbian.
+ * Disable testsuite.
+
- -- Raspbian forward porter <root@raspbian.org> Sun, 14 Jul 2024 13:38:34 +0000
++ -- Raspbian forward porter <root@raspbian.org> Sat, 07 Sep 2024 19:30:00 +0000
++
+ nodejs (20.17.0+dfsg-2) unstable; urgency=medium
+
+ * Depend node-minimatch
+
+ -- Jérémy Lal <kapouer@melix.org> Thu, 29 Aug 2024 10:25:23 +0200
+
+ nodejs (20.17.0+dfsg-1) unstable; urgency=medium
+
+ * New upstream version 20.17.0+dfsg
+ * B-D node-minimatch, added to builtins.
+
+ -- Jérémy Lal <kapouer@melix.org> Wed, 28 Aug 2024 20:25:41 +0200
+
+ nodejs (20.16.0+dfsg-1) unstable; urgency=medium
+
+ * New upstream version 20.16.0+dfsg
+ * patches:
+ + improve openssl 3.2.2 tests fixes
+ + upstream fix for failing permissions tests in /tmp
+ Closes: #1076542.
+
+ -- Jérémy Lal <kapouer@melix.org> Sun, 18 Aug 2024 14:48:08 +0200
+
+ nodejs (20.15.1+dfsg-1) unstable; urgency=medium
+
+ * New upstream version 20.15.1+dfsg
+ * Fix watch file to ensure ada 2.7.8
+ * CVE-2024-36138: Bypass incomplete fix of CVE-2024-27980 (High)
+ * CVE-2024-22020: Bypass network import restriction via data URL (Medium)
+ * CVE-2024-22018: fs.lstat bypasses permission model (Low)
+ * CVE-2024-36137: fs.fchown/fchmod bypasses permission model (Low)
+ * CVE-2024-37372: Permission model improperly processes UNC paths (Low)
+ * Add another failing test to loong64/mips64el
+
+ -- Jérémy Lal <kapouer@melix.org> Tue, 09 Jul 2024 10:02:04 +0200
nodejs (20.15.0+dfsg-1) unstable; urgency=medium