Raspbian automatic forward porter [Mon, 1 Jul 2024 11:34:30 +0000 (12:34 +0100)]
Merge version 18.19.0+dfsg-6~deb12u1+rpi1 and 18.19.0+dfsg-6~deb12u2 to produce 18.19.0+dfsg-6~deb12u2+rpi1
Adrian Bunk [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Merge nodejs (18.19.0+dfsg-6~deb12u2) import into refs/heads/workingbranch
Debian Javascript Maintainers [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
some tests fail on mips64el and mipsel
Forwarded: not-needed
That architecture support improves over time - node 20.x branch has better support for mips64el
Meanwhile, let those tests fail.
Gbp-Pq: Topic mips
Gbp-Pq: Name flaky_tests.patch
Brad House [Wed, 15 Nov 2023 14:33:47 +0000 (09:33 -0500)]
[PATCH] test: fix dns test case failures after c-ares update to 1.21.0+
c-ares has made intentional changes to the behavior of TXT records
to comply with RFC 7208, which concatenates multiple strings for
the same TXT record into a single string. Multiple TXT records
are not concatenated.
Also, response handling has changed, such that a response which is
completely invalid in formatting is thrown away as a malicious
forged/spoofed packet rather than returning EBADRESP. This is one
step toward RFC 9018 (EDNS COOKIES) which will require the message
to at least be structurally valid to validate against spoofed
records.
Fix By: Brad House (@bradh352)
PR-URL: https://github.com/nodejs/node/pull/50743
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Fixes: https://github.com/nodejs/node/issues/50741
Refs: https://github.com/nodejs/node/issues/50444
Gbp-Pq: Topic build
Gbp-Pq: Name test_dns_resolveany_bad_ancount.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
test runner output fails on some cwd - fix regexp
Last-Update: 2023-11-30
Forwarded: https://github.com/nodejs/node/pull/50980
Gbp-Pq: Topic build
Gbp-Pq: Name test_runner_escape_path.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
disable test because it depends on postject, which is dfsg-excluded
Last-Update: 2023-11-30
Forwarded: not-needed
HELP is welcome to solve this
Gbp-Pq: Topic build
Gbp-Pq: Name disable_sea_dfsg_postject.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
build using ada upstream tarball component
Last-Update: 2023-11-30
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name ada.patch
James Addison [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Harmonize V8 stack sizes on ARM architectures to match almost all other architectures
Last-Update: 2023-02-28
Forwarded: https://github.com/nodejs/node/issues/41163
Gbp-Pq: Topic arm64
Gbp-Pq: Name stacksize.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Use system paths for builtins
Last-Update: 2023-02-22
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name test_process_versions.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
fix link to home in html api
Forwarded: not needed, in conflict with the meaning of home page
Last-Update: 06-11-2022
Gbp-Pq: Topic build
Gbp-Pq: Name doc_template_home.html
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
allow vfp2 and allow setting arm_version option
Last-Update: 2022-08-29
Forwarded: https://github.com/nodejs/node/issues/44357
Gbp-Pq: Topic armel
Gbp-Pq: Name configure.patch
Jérémy Lal kapouer@melix.org, Bo YU [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
test does not pass on riscv64
Last-Update: 2022-12-14
Forwarded: not-yet
Gbp-Pq: Topic riscv
Gbp-Pq: Name flaky_tests.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
skip buffer NaN internal representation check this fails on whatever archs having other internal representations of NaN.
Last-Update: 2022-05-02
Forwarded: https://github.com/nodejs/node/issues/42945
Gbp-Pq: Topic build
Gbp-Pq: Name skip-buffer-nan-internal-check.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
fix double register usage on mipsel
Forwarded: not-yet
Last-Update: 2022-06-15
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_even_register_fix.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
mipsel in debian supports 32-bit processors
Forwarded: not-needed
Last-Update: 2021-11-03
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_is_32.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
mksnapshot uses too much memory on 32-bit mipsel
Last-Update: 2020-06-03
Forwarded: https://bugs.chromium.org/p/v8/issues/detail?id=10586
Gbp-Pq: Topic mips
Gbp-Pq: Name less_mem.patch
YunQiang Su [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
use configuration directive to set mips fpu mode
Forwarded: https://github.com/paul99/v8m-rb/issues/192
Last-Update: 2015-09-29
Gbp-Pq: Topic mips
Gbp-Pq: Name fpu.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
fix compilation error on mipsel target
Last-Update: 2021-10-28
Forwarded: https://github.com/nodejs/node/issues/40624
Gbp-Pq: Topic mips
Gbp-Pq: Name compilation_error.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
remove google font from template.html, and link to local
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic dfsg
Gbp-Pq: Name privacy_breach.patch
Bastien ROUCARIÈS [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Multiarch search path, arch triplet, DFHS path for modules
Last-Update: 2018-09-30
Last-Update: 2020-03-04
Forwarded: https://github.com/nodejs/node/issues/22745
Reviewed-By: Xavier Guimard <yadd@debian.org>
Gbp-Pq: Topic dfsg
Gbp-Pq: Name multilib_modules.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
a test uses a benchmark that read alice.html, dfsg excluded
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-03-04
Gbp-Pq: Topic dfsg
Gbp-Pq: Name benchmark_without_alice.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
use system-installed node-gyp for building test modules
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic deps
Gbp-Pq: Name node_gyp.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
do not use dns.ADDRCONFIG for localhost
Last-Update: 2020-06-11
Bug-Debian: https://bugs.debian.org/962318
Forwarded: https://github.com/nodejs/node/issues/33816
it fails on IPv6-only systems. Setting it with libc fails on linux.
https://github.com/nodejs/node/issues/33279
Gbp-Pq: Topic deps
Gbp-Pq: Name localhost-no-addrconfig.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
keep nodejs compatible with libc-ares public headers
Forwarded: not-needed
Last-Update: 2021-10-20
Gbp-Pq: Topic deps
Gbp-Pq: Name cares.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
adapt test-ci build target for buildd
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-02-09
* run tests with ./node
* remove addons from test-ci suite, because it creates a dependency loop
nodejs -> node-gyp -> nodejs which is painful to manage.
* disabled because it requires stdin:
+ test-stdout-close-unref
+ test-regress-GH-746
* test-tick-processor fails on ppc64 and s390x, currently investigated
https://github.com/nodejs/node/issues/2471
* test-cluster-disconnect sometimes fails on busy buildd, forwarded upstream
https://github.com/nodejs/node/issues/3383
* test-fs-watch is flaky, might be related to https://github.com/nodejs/node/issues/4082
* huge timeout value for all platforms, buildd could be busy
* test-npm-install and test-release-npm must fail, debian package dfsg-repacked npm out
* ability to override CI_NATIVE_SUITES, CI_JS_SUITES
* disable tests failing because DNS is disabled
* sequential/test-http2-session-timeout is flaky https://github.com/nodejs/node/issues/20628
Gbp-Pq: Topic build
Gbp-Pq: Name test_ci.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Link to -latomic by default
Last-Update: 2019-10-25
Forwarded: not-needed
Bug: https://github.com/nodejs/node/pull/28532
Bug: https://github.com/nodejs/node/issues/30093
This avoids surprises on mips*el/ppc*el
Gbp-Pq: Topic build
Gbp-Pq: Name flag_atomic.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
build doc using marked and js-yaml
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2021-03-03
While waiting for unified/remarked/rehyped modules to be available in debian
Gbp-Pq: Topic build
Gbp-Pq: Name doc.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
do not build cctest, build broken on debian
Last-Update: 2017-12-18
Forwarded: not yet !
Gbp-Pq: Topic build
Gbp-Pq: Name cctest_disable.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
add acorn, walk to shared builtins
Last-Update: 2022-09-28
Forwarded: https://github.com/nodejs/node/pull/44376
Gbp-Pq: Topic build
Gbp-Pq: Name more_shareable_builtins.patch
Jérémy Lal [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
debian openssl in testing or sid (3.0.11, 3.1.4) does not seem to have that different behavior
Last-Update: 2023-11-03
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_3011_without_new_error_message.patch
Sebastian Andrzej Siewior [Fri, 23 Sep 2022 20:39:50 +0000 (22:39 +0200)]
[PATCH] Add a CipherString for nodejs
If the default security level is overwritten at build time of openssl
then it is needed to lower it again for nodejs in order to pass the
testsuite because it is using smoil keys.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_config_explicit_lower.patch
Adrian Bunk [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
nodejs (18.19.0+dfsg-6~deb12u2) bookworm; urgency=medium
* Non-maintainer upload.
* Skip failing tests on MIPS.
[dgit import unpatched nodejs 18.19.0+dfsg-6~deb12u2]
Adrian Bunk [Sat, 22 Jun 2024 12:21:29 +0000 (15:21 +0300)]
Import nodejs_18.19.0+dfsg-6~deb12u2.debian.tar.xz
[dgit import tarball nodejs 18.19.0+dfsg-6~deb12u2 nodejs_18.19.0+dfsg-6~deb12u2.debian.tar.xz]
Raspbian automatic forward porter [Sat, 6 Jan 2024 00:14:42 +0000 (00:14 +0000)]
Merge version 18.13.0+dfsg1-1+rpi1 and 18.19.0+dfsg-6~deb12u1 to produce 18.19.0+dfsg-6~deb12u1+rpi1
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Merge nodejs (18.19.0+dfsg-6~deb12u1) import into refs/heads/workingbranch
Brad House [Wed, 15 Nov 2023 14:33:47 +0000 (09:33 -0500)]
[PATCH] test: fix dns test case failures after c-ares update to 1.21.0+
c-ares has made intentional changes to the behavior of TXT records
to comply with RFC 7208, which concatenates multiple strings for
the same TXT record into a single string. Multiple TXT records
are not concatenated.
Also, response handling has changed, such that a response which is
completely invalid in formatting is thrown away as a malicious
forged/spoofed packet rather than returning EBADRESP. This is one
step toward RFC 9018 (EDNS COOKIES) which will require the message
to at least be structurally valid to validate against spoofed
records.
Fix By: Brad House (@bradh352)
PR-URL: https://github.com/nodejs/node/pull/50743
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Fixes: https://github.com/nodejs/node/issues/50741
Refs: https://github.com/nodejs/node/issues/50444
Gbp-Pq: Topic build
Gbp-Pq: Name test_dns_resolveany_bad_ancount.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
test runner output fails on some cwd - fix regexp
Last-Update: 2023-11-30
Forwarded: https://github.com/nodejs/node/pull/50980
Gbp-Pq: Topic build
Gbp-Pq: Name test_runner_escape_path.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
disable test because it depends on postject, which is dfsg-excluded
Last-Update: 2023-11-30
Forwarded: not-needed
HELP is welcome to solve this
Gbp-Pq: Topic build
Gbp-Pq: Name disable_sea_dfsg_postject.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
build using ada upstream tarball component
Last-Update: 2023-11-30
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name ada.patch
James Addison [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Harmonize V8 stack sizes on ARM architectures to match almost all other architectures
Last-Update: 2023-02-28
Forwarded: https://github.com/nodejs/node/issues/41163
Gbp-Pq: Topic arm64
Gbp-Pq: Name stacksize.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Use system paths for builtins
Last-Update: 2023-02-22
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name test_process_versions.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
fix link to home in html api
Forwarded: not needed, in conflict with the meaning of home page
Last-Update: 06-11-2022
Gbp-Pq: Topic build
Gbp-Pq: Name doc_template_home.html
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
allow vfp2 and allow setting arm_version option
Last-Update: 2022-08-29
Forwarded: https://github.com/nodejs/node/issues/44357
Gbp-Pq: Topic armel
Gbp-Pq: Name configure.patch
Jérémy Lal kapouer@melix.org, Bo YU [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
test does not pass on riscv64
Last-Update: 2022-12-14
Forwarded: not-yet
Gbp-Pq: Topic riscv
Gbp-Pq: Name flaky_tests.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
skip buffer NaN internal representation check this fails on whatever archs having other internal representations of NaN.
Last-Update: 2022-05-02
Forwarded: https://github.com/nodejs/node/issues/42945
Gbp-Pq: Topic build
Gbp-Pq: Name skip-buffer-nan-internal-check.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
fix double register usage on mipsel
Forwarded: not-yet
Last-Update: 2022-06-15
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_even_register_fix.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
mipsel in debian supports 32-bit processors
Forwarded: not-needed
Last-Update: 2021-11-03
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_is_32.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
mksnapshot uses too much memory on 32-bit mipsel
Last-Update: 2020-06-03
Forwarded: https://bugs.chromium.org/p/v8/issues/detail?id=10586
Gbp-Pq: Topic mips
Gbp-Pq: Name less_mem.patch
YunQiang Su [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
use configuration directive to set mips fpu mode
Forwarded: https://github.com/paul99/v8m-rb/issues/192
Last-Update: 2015-09-29
Gbp-Pq: Topic mips
Gbp-Pq: Name fpu.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
fix compilation error on mipsel target
Last-Update: 2021-10-28
Forwarded: https://github.com/nodejs/node/issues/40624
Gbp-Pq: Topic mips
Gbp-Pq: Name compilation_error.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
remove google font from template.html, and link to local
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic dfsg
Gbp-Pq: Name privacy_breach.patch
Bastien ROUCARIÈS [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Multiarch search path, arch triplet, DFHS path for modules
Last-Update: 2018-09-30
Last-Update: 2020-03-04
Forwarded: https://github.com/nodejs/node/issues/22745
Reviewed-By: Xavier Guimard <yadd@debian.org>
Gbp-Pq: Topic dfsg
Gbp-Pq: Name multilib_modules.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
a test uses a benchmark that read alice.html, dfsg excluded
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-03-04
Gbp-Pq: Topic dfsg
Gbp-Pq: Name benchmark_without_alice.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
use system-installed node-gyp for building test modules
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic deps
Gbp-Pq: Name node_gyp.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
do not use dns.ADDRCONFIG for localhost
Last-Update: 2020-06-11
Bug-Debian: https://bugs.debian.org/962318
Forwarded: https://github.com/nodejs/node/issues/33816
it fails on IPv6-only systems. Setting it with libc fails on linux.
https://github.com/nodejs/node/issues/33279
Gbp-Pq: Topic deps
Gbp-Pq: Name localhost-no-addrconfig.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
keep nodejs compatible with libc-ares public headers
Forwarded: not-needed
Last-Update: 2021-10-20
Gbp-Pq: Topic deps
Gbp-Pq: Name cares.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
adapt test-ci build target for buildd
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-02-09
* run tests with ./node
* remove addons from test-ci suite, because it creates a dependency loop
nodejs -> node-gyp -> nodejs which is painful to manage.
* disabled because it requires stdin:
+ test-stdout-close-unref
+ test-regress-GH-746
* test-tick-processor fails on ppc64 and s390x, currently investigated
https://github.com/nodejs/node/issues/2471
* test-cluster-disconnect sometimes fails on busy buildd, forwarded upstream
https://github.com/nodejs/node/issues/3383
* test-fs-watch is flaky, might be related to https://github.com/nodejs/node/issues/4082
* huge timeout value for all platforms, buildd could be busy
* test-npm-install and test-release-npm must fail, debian package dfsg-repacked npm out
* ability to override CI_NATIVE_SUITES, CI_JS_SUITES
* disable tests failing because DNS is disabled
* sequential/test-http2-session-timeout is flaky https://github.com/nodejs/node/issues/20628
Gbp-Pq: Topic build
Gbp-Pq: Name test_ci.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Link to -latomic by default
Last-Update: 2019-10-25
Forwarded: not-needed
Bug: https://github.com/nodejs/node/pull/28532
Bug: https://github.com/nodejs/node/issues/30093
This avoids surprises on mips*el/ppc*el
Gbp-Pq: Topic build
Gbp-Pq: Name flag_atomic.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
build doc using marked and js-yaml
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2021-03-03
While waiting for unified/remarked/rehyped modules to be available in debian
Gbp-Pq: Topic build
Gbp-Pq: Name doc.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
do not build cctest, build broken on debian
Last-Update: 2017-12-18
Forwarded: not yet !
Gbp-Pq: Topic build
Gbp-Pq: Name cctest_disable.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
add acorn, walk to shared builtins
Last-Update: 2022-09-28
Forwarded: https://github.com/nodejs/node/pull/44376
Gbp-Pq: Topic build
Gbp-Pq: Name more_shareable_builtins.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
debian openssl in testing or sid (3.0.11, 3.1.4) does not seem to have that different behavior
Last-Update: 2023-11-03
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_3011_without_new_error_message.patch
Sebastian Andrzej Siewior [Fri, 23 Sep 2022 20:39:50 +0000 (22:39 +0200)]
[PATCH] Add a CipherString for nodejs
If the default security level is overwritten at build time of openssl
then it is needed to lower it again for nodejs in order to pass the
testsuite because it is using smoil keys.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_config_explicit_lower.patch
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
nodejs (18.19.0+dfsg-6~deb12u1) bookworm-security; urgency=medium
* Upstream update.
* CVE-2023-23918: Permissions policies can be bypassed via
process.mainModule. Closes #
1031834.
* CVE-2023-23919: OpenSSL error handling issues in nodejs crypto
library. Closes: #
1031834.
* CVE-2023-23920: Insecure loading of ICU data through ICU_DATA
environment variable. Closes: #
1031834.
* CVE-2023-30590: DiffieHellman do not generate keys after setting a
private key. Closes: #
1039990.
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR.
Closes: #1039990.
* CVE-2023-30588: Process interuption due to invalid Public Key information
in x509 certificates. Closes: #
1039990.
* CVE-2023-32559: Permissions policies can be bypassed via process.binding.
Closes: #1050739.
* CVE-2023-30581: mainModule.proto bypass experimental policy mechanism.
Closes: #1039990.
* CVE-2023-32002: Permissions policies can be bypassed via Module._load.
Closes: #1050739.
* CVE-2023-32006: Permissions policies can impersonate other modules in
using module.constructor.createRequire(). Closes: #
1050739.
* CVE-2023-38552: Integrity checks according to policies can be
circumvented. Closes: #
1054892.
* CVE-2023-39333: Code injection via WebAssembly export names.
Closes: #1054892.
[dgit import unpatched nodejs 18.19.0+dfsg-6~deb12u1]
Jérémy Lal [Wed, 20 Dec 2023 17:07:36 +0000 (18:07 +0100)]
Import nodejs_18.19.0+dfsg-6~deb12u1.debian.tar.xz
[dgit import tarball nodejs 18.19.0+dfsg-6~deb12u1 nodejs_18.19.0+dfsg-6~deb12u1.debian.tar.xz]
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Merge nodejs (18.19.0+dfsg-6) import into refs/heads/workingbranch
Brad House [Wed, 15 Nov 2023 14:33:47 +0000 (09:33 -0500)]
[PATCH] test: fix dns test case failures after c-ares update to 1.21.0+
c-ares has made intentional changes to the behavior of TXT records
to comply with RFC 7208, which concatenates multiple strings for
the same TXT record into a single string. Multiple TXT records
are not concatenated.
Also, response handling has changed, such that a response which is
completely invalid in formatting is thrown away as a malicious
forged/spoofed packet rather than returning EBADRESP. This is one
step toward RFC 9018 (EDNS COOKIES) which will require the message
to at least be structurally valid to validate against spoofed
records.
Fix By: Brad House (@bradh352)
PR-URL: https://github.com/nodejs/node/pull/50743
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Fixes: https://github.com/nodejs/node/issues/50741
Refs: https://github.com/nodejs/node/issues/50444
Gbp-Pq: Topic build
Gbp-Pq: Name test_dns_resolveany_bad_ancount.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
test runner output fails on some cwd - fix regexp
Last-Update: 2023-11-30
Forwarded: https://github.com/nodejs/node/pull/50980
Gbp-Pq: Topic build
Gbp-Pq: Name test_runner_escape_path.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
disable test because it depends on postject, which is dfsg-excluded
Last-Update: 2023-11-30
Forwarded: not-needed
HELP is welcome to solve this
Gbp-Pq: Topic build
Gbp-Pq: Name disable_sea_dfsg_postject.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
build using ada upstream tarball component
Last-Update: 2023-11-30
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name ada.patch
James Addison [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Harmonize V8 stack sizes on ARM architectures to match almost all other architectures
Last-Update: 2023-02-28
Forwarded: https://github.com/nodejs/node/issues/41163
Gbp-Pq: Topic arm64
Gbp-Pq: Name stacksize.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Use system paths for builtins
Last-Update: 2023-02-22
Forwarded: not-needed
Gbp-Pq: Topic build
Gbp-Pq: Name test_process_versions.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
fix link to home in html api
Forwarded: not needed, in conflict with the meaning of home page
Last-Update: 06-11-2022
Gbp-Pq: Topic build
Gbp-Pq: Name doc_template_home.html
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
allow vfp2 and allow setting arm_version option
Last-Update: 2022-08-29
Forwarded: https://github.com/nodejs/node/issues/44357
Gbp-Pq: Topic armel
Gbp-Pq: Name configure.patch
Jérémy Lal kapouer@melix.org, Bo YU [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
test does not pass on riscv64
Last-Update: 2022-12-14
Forwarded: not-yet
Gbp-Pq: Topic riscv
Gbp-Pq: Name flaky_tests.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
skip buffer NaN internal representation check this fails on whatever archs having other internal representations of NaN.
Last-Update: 2022-05-02
Forwarded: https://github.com/nodejs/node/issues/42945
Gbp-Pq: Topic build
Gbp-Pq: Name skip-buffer-nan-internal-check.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
fix double register usage on mipsel
Forwarded: not-yet
Last-Update: 2022-06-15
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_even_register_fix.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
mipsel in debian supports 32-bit processors
Forwarded: not-needed
Last-Update: 2021-11-03
Gbp-Pq: Topic mips
Gbp-Pq: Name mipsel_is_32.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
mksnapshot uses too much memory on 32-bit mipsel
Last-Update: 2020-06-03
Forwarded: https://bugs.chromium.org/p/v8/issues/detail?id=10586
Gbp-Pq: Topic mips
Gbp-Pq: Name less_mem.patch
YunQiang Su [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
use configuration directive to set mips fpu mode
Forwarded: https://github.com/paul99/v8m-rb/issues/192
Last-Update: 2015-09-29
Gbp-Pq: Topic mips
Gbp-Pq: Name fpu.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
fix compilation error on mipsel target
Last-Update: 2021-10-28
Forwarded: https://github.com/nodejs/node/issues/40624
Gbp-Pq: Topic mips
Gbp-Pq: Name compilation_error.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
remove google font from template.html, and link to local
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic dfsg
Gbp-Pq: Name privacy_breach.patch
Bastien ROUCARIÈS [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Multiarch search path, arch triplet, DFHS path for modules
Last-Update: 2018-09-30
Last-Update: 2020-03-04
Forwarded: https://github.com/nodejs/node/issues/22745
Reviewed-By: Xavier Guimard <yadd@debian.org>
Gbp-Pq: Topic dfsg
Gbp-Pq: Name multilib_modules.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
a test uses a benchmark that read alice.html, dfsg excluded
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-03-04
Gbp-Pq: Topic dfsg
Gbp-Pq: Name benchmark_without_alice.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
use system-installed node-gyp for building test modules
Last-Update: 2015-09-09
Forwarded: not-needed
Gbp-Pq: Topic deps
Gbp-Pq: Name node_gyp.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
do not use dns.ADDRCONFIG for localhost
Last-Update: 2020-06-11
Bug-Debian: https://bugs.debian.org/962318
Forwarded: https://github.com/nodejs/node/issues/33816
it fails on IPv6-only systems. Setting it with libc fails on linux.
https://github.com/nodejs/node/issues/33279
Gbp-Pq: Topic deps
Gbp-Pq: Name localhost-no-addrconfig.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
keep nodejs compatible with libc-ares public headers
Forwarded: not-needed
Last-Update: 2021-10-20
Gbp-Pq: Topic deps
Gbp-Pq: Name cares.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
adapt test-ci build target for buildd
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2020-02-09
* run tests with ./node
* remove addons from test-ci suite, because it creates a dependency loop
nodejs -> node-gyp -> nodejs which is painful to manage.
* disabled because it requires stdin:
+ test-stdout-close-unref
+ test-regress-GH-746
* test-tick-processor fails on ppc64 and s390x, currently investigated
https://github.com/nodejs/node/issues/2471
* test-cluster-disconnect sometimes fails on busy buildd, forwarded upstream
https://github.com/nodejs/node/issues/3383
* test-fs-watch is flaky, might be related to https://github.com/nodejs/node/issues/4082
* huge timeout value for all platforms, buildd could be busy
* test-npm-install and test-release-npm must fail, debian package dfsg-repacked npm out
* ability to override CI_NATIVE_SUITES, CI_JS_SUITES
* disable tests failing because DNS is disabled
* sequential/test-http2-session-timeout is flaky https://github.com/nodejs/node/issues/20628
Gbp-Pq: Topic build
Gbp-Pq: Name test_ci.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Link to -latomic by default
Last-Update: 2019-10-25
Forwarded: not-needed
Bug: https://github.com/nodejs/node/pull/28532
Bug: https://github.com/nodejs/node/issues/30093
This avoids surprises on mips*el/ppc*el
Gbp-Pq: Topic build
Gbp-Pq: Name flag_atomic.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
build doc using marked and js-yaml
Forwarded: not-needed
Reviewed-By: Xavier Guimard <yadd@debian.org>
Last-Update: 2021-03-03
While waiting for unified/remarked/rehyped modules to be available in debian
Gbp-Pq: Topic build
Gbp-Pq: Name doc.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
do not build cctest, build broken on debian
Last-Update: 2017-12-18
Forwarded: not yet !
Gbp-Pq: Topic build
Gbp-Pq: Name cctest_disable.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
add acorn, walk to shared builtins
Last-Update: 2022-09-28
Forwarded: https://github.com/nodejs/node/pull/44376
Gbp-Pq: Topic build
Gbp-Pq: Name more_shareable_builtins.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
debian openssl in testing or sid (3.0.11, 3.1.4) does not seem to have that different behavior
Last-Update: 2023-11-03
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_3011_without_new_error_message.patch
Sebastian Andrzej Siewior [Fri, 23 Sep 2022 20:39:50 +0000 (22:39 +0200)]
[PATCH] Add a CipherString for nodejs
If the default security level is overwritten at build time of openssl
then it is needed to lower it again for nodejs in order to pass the
testsuite because it is using smoil keys.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Gbp-Pq: Topic build
Gbp-Pq: Name openssl_config_explicit_lower.patch
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
nodejs (18.19.0+dfsg-6) unstable; urgency=medium
* patch: remove useless and badly done icu_74 patch
[dgit import unpatched nodejs 18.19.0+dfsg-6]
Jérémy Lal [Sun, 3 Dec 2023 21:41:14 +0000 (22:41 +0100)]
Import nodejs_18.19.0+dfsg-6.debian.tar.xz
[dgit import tarball nodejs 18.19.0+dfsg-6 nodejs_18.19.0+dfsg-6.debian.tar.xz]
Jérémy Lal [Fri, 1 Dec 2023 00:23:44 +0000 (01:23 +0100)]
Import nodejs_18.19.0+dfsg.orig.tar.xz
[dgit import orig nodejs_18.19.0+dfsg.orig.tar.xz]
Jérémy Lal [Fri, 1 Dec 2023 00:23:44 +0000 (01:23 +0100)]
Import nodejs_18.19.0+dfsg.orig-ada.tar.xz
[dgit import orig nodejs_18.19.0+dfsg.orig-ada.tar.xz]
Jérémy Lal [Fri, 1 Dec 2023 00:23:44 +0000 (01:23 +0100)]
Import nodejs_18.19.0+dfsg.orig-types-node.tar.xz
[dgit import orig nodejs_18.19.0+dfsg.orig-types-node.tar.xz]
Raspbian automatic forward porter [Tue, 17 Jan 2023 00:44:29 +0000 (00:44 +0000)]
Merge version 18.13.0+dfsg-1+rpi1 and 18.13.0+dfsg1-1 to produce 18.13.0+dfsg1-1+rpi1