-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 Oct 2021 02:27:37 +0200 Source: nodejs Binary: libnode-dev libnode93 libnode93-dbgsym nodejs nodejs-dbgsym nodejs-doc Architecture: source ppc64el all Version: 16.11.1~dfsg-1 Distribution: experimental Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@alioth-lists.debian.net> Changed-By: Jérémy Lal <kapouer@melix.org> Description: libnode-dev - evented I/O for V8 javascript (development files) libnode93 - evented I/O for V8 javascript - runtime library nodejs - evented I/O for V8 javascript - runtime executable nodejs-doc - API documentation for Node.js, the javascript platform Closes: 996195 996416 Changes: nodejs (16.11.1~dfsg-1) experimental; urgency=medium . * New upstream version 16.11.1~dfsg + CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium) + CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium) * Depends icu >= 68, c-ares >= 1.17.1 * Patch to stop using private cares header * Drop ppc64 patch, hopefully fixed now * Refresh trivial patches * Replace tools/doc patch by copy in debian/doc-generator * source overrides: update expressions * copyright: + highlight.pack.js no longer in tarball + update deps/cares paths . [ Bastien Roucariès ] * Bug fix: "nodejs FTCBFS: uses build architecture build tools such as gcc or pkg-config", thanks to Helmut Grohne (Closes: #996195). * Document gyp target/host in debian/rules . [ Helmut Grohne ] * Add native build dependencies for cross compiling. (Closes: #996416) Checksums-Sha1: b2cc89ab1826f78c9fafe13205293820cc192674 3693 nodejs_16.11.1~dfsg-1.dsc 936f83f7fac414cc3c2aae1f0834555f5f2842e6 232092 nodejs_16.11.1~dfsg.orig-types-node.tar.xz 87c3ce14ed548b0c377cab5cdaaad904f70fb23a 21250900 nodejs_16.11.1~dfsg.orig.tar.xz 013b05a8030519c7247ee85c5587ae92314a7778 150500 nodejs_16.11.1~dfsg-1.debian.tar.xz bbcb262b0429903bab1ded10ae96dba5db901a30 457420 libnode-dev_16.11.1~dfsg-1_ppc64el.deb bb162422d439898fa5978274cf178d11a84ec7fe 808627824 libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb e2b6b8bf4b1075760cf376dcab82cdb3e55f887d 10129716 libnode93_16.11.1~dfsg-1_ppc64el.deb 22355ad767ba35e1f0e906cfaa76084c1824d65c 143024 nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb 3c225a0864e15222fc72a57c4a3a9b79e4621923 2148160 nodejs-doc_16.11.1~dfsg-1_all.deb 88908d9e5d12322a256476f8348f7b68190c5f3f 10346 nodejs_16.11.1~dfsg-1_ppc64el.buildinfo b8c60fbbee7d2cb037123577ddb57311b3c73379 293968 nodejs_16.11.1~dfsg-1_ppc64el.deb Checksums-Sha256: 4536d8e318d09eb54a39e93ff9a60c47651e21b0a6e2361f333007042d4371cb 3693 nodejs_16.11.1~dfsg-1.dsc b99c762ebe614d0644714b9f152de802610aae87569b781d521df720d705d8c4 232092 nodejs_16.11.1~dfsg.orig-types-node.tar.xz 99f2fa424781a592dda50d1df7caa05d3558fc7024d36970d872c2290791f6d3 21250900 nodejs_16.11.1~dfsg.orig.tar.xz 008218f60c2ad26b2e4a2a95479f843ef235f952ac0fd7631653342c1d56bdf0 150500 nodejs_16.11.1~dfsg-1.debian.tar.xz c1ebcca5a8096390cce896687513e2128b6a9d046e4e3b514f45d10a3ae41f3e 457420 libnode-dev_16.11.1~dfsg-1_ppc64el.deb 45dc8df2f6fb4da977510dd6de7d8f46edfbb37c93bcc231e742e544963c7140 808627824 libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb d1c455f3e92c6317ae3267877900d2f53981570fdd7b28c6c596db0c383c0c66 10129716 libnode93_16.11.1~dfsg-1_ppc64el.deb 1965b167d914ed23cc18a56c9ab19f6bae5efe767684598ef193cbc1e936ede4 143024 nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb d73980829ca82fd33b1237e6a9a87bd1dec77ae915b588fea19b2715dd603339 2148160 nodejs-doc_16.11.1~dfsg-1_all.deb a255ca319b23b92396b1c6bcb7e2f979e500443f46899a2e3c1f22eb5a572fc7 10346 nodejs_16.11.1~dfsg-1_ppc64el.buildinfo d9dc502a0ab21a96a0e6b2d32f70b56b7a5c8a1822f63ba6f381c16d70635449 293968 nodejs_16.11.1~dfsg-1_ppc64el.deb Files: d265b3ca1b647199427e59f74085d27a 3693 javascript optional nodejs_16.11.1~dfsg-1.dsc febe56ec6a5d065f20cd2dc291aa3882 232092 javascript optional nodejs_16.11.1~dfsg.orig-types-node.tar.xz eec340c0c37bd84d1c1af7be40d7ee2a 21250900 javascript optional nodejs_16.11.1~dfsg.orig.tar.xz ee0fbab30620b055a4092bf8a16e0380 150500 javascript optional nodejs_16.11.1~dfsg-1.debian.tar.xz 7bf4d68e17fb1dd3568810615d015db2 457420 libdevel optional libnode-dev_16.11.1~dfsg-1_ppc64el.deb 3a8e941bb9393bbc885fc293f53a2681 808627824 debug optional libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb d0147a7c65b29b0176202cbda3bad408 10129716 libs optional libnode93_16.11.1~dfsg-1_ppc64el.deb 340111bb7d5e5c3353f5e0017e97838c 143024 debug optional nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb c85740a966c02b897f523abf58c9e740 2148160 doc optional nodejs-doc_16.11.1~dfsg-1_all.deb ed7244ef290b298fce513cec22072822 10346 javascript optional nodejs_16.11.1~dfsg-1_ppc64el.buildinfo bc3ed7042d0cde439afe23a5963d0ed5 293968 javascript optional nodejs_16.11.1~dfsg-1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEA8Tnq7iA9SQwbkgVZhHAXt0583QFAmFwItQSHGthcG91ZXJA bWVsaXgub3JnAAoJEGYRwF7dOfN0fw0QAIZvg4d7aQRnTQCNdFo9ZULAq2SkP7ve LsSLcbjvHJEnwTvY9utXAw8TePCzmYB9gGZ4C05xmQVVCs69n4uQLyxy18CzLqab sH6hG2L5foxpjKv//bzARtcpc213+7RDb0qKmgGFX16J1TWy6ypKB9iq/XVeUrsr 8c6scUMOVOURzz4oiKTfFIHEwxV4PwdZNKKHsTquPUQKk0AwUePOYc1OtXm2QU4G 8SmXVk5B92qDATJAU5qu9nRO7XDS7fz8Chsk8ss6keO3XdpS8aklUJlGI4ap052/ zTdj/oXzSr07Z8RdoGCs+O9RxPcnRuoaDtgnAiedp3ePfRCcG9G7fJIOFzT4ypE5 TSKCNojum01ZltmtKNhVy67JN3/viSibp8zyhOJrIRtgU2eF0cHoTPV+Y3agl6NB b9/nZtKgz24Go34WO+fLuB+JgvYEcWAXxGwqiwoJDpqI04t+lQDHgZ0wvLINm3+E nq6BPQvintXqeS7mgXYrLBz4r/D1Q7BzjHAOaDtKgP6KKyfEaCwUjE0Jy/1F/+ge vCByexMlhP4Ur9j7EkUmL+qiAH+dU2a/QFiVT0K/S4xnoO92U0BzB0Er13CRxlFk SgOFxls9hsO+fbYWhb30Z+rbbLckGHKnenxT+6LbPTn5pMo/iyeBwMd/EpMVaWFJ OIIhpCfiSVxg =EjlH -----END PGP SIGNATURE-----