-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 09 Oct 2016 22:05:40 +0200 Source: nodejs Binary: nodejs-dev nodejs nodejs-dbg nodejs-legacy Architecture: source Version: 4.6.0~dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Jérémy Lal <kapouer@melix.org> Description: nodejs - evented I/O for V8 javascript nodejs-dbg - evented I/O for V8 javascript (debug) nodejs-dev - evented I/O for V8 javascript (development files) nodejs-legacy - evented I/O for V8 javascript (legacy symlink) Closes: 830242 836415 839714 Changes: nodejs (4.6.0~dfsg-1) unstable; urgency=medium . * New upstream version 4.6.0~dfsg Fixes: CVE-2016-7099, CVE-2016-5325 Closes: #839714. * Hardening flags: +all, -pie because v8 doesn't support pie. * Disable DNS during tests, using RES_OPTIONS=attempts:0, and disable tests that fail to run when only a loopback interface is available. Closes: #830242. * Do not fail when node symlink exists in check target * Disable addons, pseudo-tty, doctool test suites * test_ci patch: allow overriding CI test options * Disable tests failing without DNS * doctool-yaml patch: avoid use of eslint deps and use node-yamlish package instead * Build-Depends node-marked, exclude it for convenience, * Stop building for powerpc architecture as some cpu are not actually supported by libv8. Closes: #836415. Checksums-Sha1: f40db234b4727482d3f9e49f3a91bcd07cebde9d 2470 nodejs_4.6.0~dfsg-1.dsc 9d25303739a479dc00d2f8b9eccd00ca6709e429 9720128 nodejs_4.6.0~dfsg.orig.tar.gz 64b91573eedb3b1c49832faa862f2904bfc38cf1 347096 nodejs_4.6.0~dfsg-1.debian.tar.xz Checksums-Sha256: aa6cdf768fd6e2c3e48eb91ffc31c50019bf8733fc00d3593f682e777708212c 2470 nodejs_4.6.0~dfsg-1.dsc 103c691006f4266a4ee2c6007c03646a93da7cf163414896d0cee4343259c1b5 9720128 nodejs_4.6.0~dfsg.orig.tar.gz 0b56a05093cb0453cbe0be7d4d34bf92d2e4bee718569a2fd6a3fd27aec2908c 347096 nodejs_4.6.0~dfsg-1.debian.tar.xz Files: 9dad21f69e2e12a54e79a041eabc446c 2470 web - nodejs_4.6.0~dfsg-1.dsc d1d110e21be6ceed33b8ce8645ae2679 9720128 web - nodejs_4.6.0~dfsg.orig.tar.gz cccf12454aaa40bf5bb6305409893794 347096 web - nodejs_4.6.0~dfsg-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIvBAEBCAAZBQJX+qM1EhxrYXBvdWVyQG1lbGl4Lm9yZwAKCRBmEcBe3TnzdCAO D/0RKF2S694U45hjS6VGfhNzzjjH7a/GmQEyPQCMJvR94vV6bkGVYc3DpyVEw0JN 0MjUweC7eFmeqfXXTCkrwVmxwEoVCqKXWCqTQwCrMyHvHdHCtLYsPBExZjfRWI91 JndzZeeoAYtmwb5bQWpfUFyS0zD/6V7IHu9C5Ut2EsobQr+i0WFmxdTtYLneg/IP 6kqEmNAa34nZcMe7t3FAzrHdupzOt4tBamK31Od9ugvQUmowXK+6DhlmO6VhA02/ wxoOI1C8VmAUyNxWAVzlvTSm51bpXrZpkCAHG/hBmOLDPza2FvQxBVYuoNxYtCZH hSVXkrAHfRMUZgt0ci5WiuNZbOPsqC3+Ou/Y5n+ZJOJ7Zh7WhQ0MIhCS9hAv+e72 IIM/mt7CIIYN56llLY5AKLgKSUs7ZSLfzpEonvtK4s/qP5ZrMp1kF2hCwVQgJxHN plPx7mD4LGCiYaoMgGV5vT2YhuPL27vggtFjSnU1436cqrDRWC9BDx3M4enKi7iX 1XXtxumAS5D4ypZMrFoKpS72iQZc/5xm8KK6WzcbzPkB4gsHThVk8isUE7M12KB2 hcLM68PEA7Nrd7JGiS8R5akqqgKIAEdbTXO1Y1F8au+WTJsWonaIvzYPmzNcsLra dnHp33ByrbsqOGbHQkVNXDQ0P69NUXKaqBDsqWudV6wD+w== =SFM/ -----END PGP SIGNATURE-----
