Rebase to 16.5.0

nodejs.spec

@@ -9,7 +9,7 @@
 # This is used by both the nodejs package and the npm subpackage thar
 # has a separate version - the name is special so that rpmdev-bumpspec
 # will bump this rather than adding .1 to the end.
-%global baserelease 2
+%global baserelease 1
 
 %{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
@@ -20,7 +20,7 @@
 # than a Fedora release lifecycle.
 %global nodejs_epoch 1
 %global nodejs_major 16
-%global nodejs_minor 3
+%global nodejs_minor 5
 %global nodejs_patch 0
 %global nodejs_abi %{nodejs_major}.%{nodejs_minor}
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
@@ -35,9 +35,9 @@
 # Epoch is set to ensure clean upgrades from the old v8 package
 %global v8_epoch 2
 %global v8_major 9
-%global v8_minor 0
-%global v8_build 257
-%global v8_patch 25
+%global v8_minor 1
+%global v8_build 269
+%global v8_patch 38
 # V8 presently breaks ABI at least every x.y release while never bumping SONAME
 %global v8_abi %{v8_major}.%{v8_minor}
 %global v8_version %{v8_major}.%{v8_minor}.%{v8_build}.%{v8_patch}
@@ -113,7 +113,7 @@
 # npm - from deps/npm/package.json
 %global npm_epoch 1
 %global npm_major 7
-%global npm_minor 15
+%global npm_minor 19
 %global npm_patch 1
 %global npm_version %{npm_major}.%{npm_minor}.%{npm_patch}
 
@@ -437,7 +437,8 @@ export LDFLAGS="%{build_ldflags}"
            --shared-brotli \
            --with-dtrace \
            --with-intl=small-icu \
-           --openssl-use-def-ca-store
+           --openssl-use-def-ca-store \
+           --openssl-default-cipher-list=PROFILE=SYSTEM
 %else
 %{__python3} configure.py --prefix=%{_prefix} \
            --shared \
@@ -450,7 +451,8 @@ export LDFLAGS="%{build_ldflags}"
            --with-dtrace \
            --with-intl=small-icu \
            --with-icu-default-data-dir=%{icudatadir} \
-           --openssl-use-def-ca-store
+           --openssl-use-def-ca-store \
+           --openssl-default-cipher-list=PROFILE=SYSTEM
 %endif
 
 make BUILDTYPE=Release %{?_smp_mflags}
@@ -692,6 +694,11 @@ end
 
 
 %changelog
+* Tue Jul 20 2021 Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.5.0-1
+- Rebase to 16.5.0
+- Fixes CVE-2021-22918(libuv)
+- Resolves: RHBZ#1979926
+
 * Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 1:16.3.0-2
 - Rebuilt for RHEL 9 BETA for openssl 3.0
   Related: rhbz#1971065

sources

@@ -1,2 +1,2 @@
-SHA512 (node-v16.3.0-stripped.tar.gz) = bec34f292393544791f12a011a53972e7e5819c4ffbdc50f8136346e0b85be0388b5a891a7030f2af6601ab3ab0c574a8c596436ae118d8c5fe84ab83f58ce0a
+SHA512 (node-v16.5.0-stripped.tar.gz) = 6e3bada9d70df7f24621dfa1398c40950d22aaa5bee5668868ae78ce5e8c333c681dc78ed3099da3203c05339904b20aabaff4a87c2ae77a998113a3dbc39720
 SHA512 (icu4c-69_1-src.tgz) = d4aeb781715144ea6e3c6b98df5bbe0490bfa3175221a1d667f3e6851b7bd4a638fa4a37d4a921ccb31f02b5d15a6dded9464d98051964a86f7b1cde0ff0aab7