Commit Graph

25 Commits

Author SHA1 Message Date
Honza Horak
01b87f3d40 Revert -mbranch-protection=standard compilation option on aarch64
gcc available in RHEL-8 does not know -mbranch-protection option and since
it was introduced for cross-compilation purposes in nodejs upstream, it seems
to be save to revert the upstream patch.

Revert "build: fix arm64 cross-compilation bug on non-arm machines"
This reverts upstream commit 6826bbf26755b144a478e51fd0a7dc83aa0c65b8.

Revert "build: fix arm64 cross-compilation"
This reverts upstream commit 297368a1edc48d2bedc58c75f1857276bdcdd578.

Resolves: RHEL-43645 RHEL-46706 RHEL-46882 RHEL-50109
2024-08-08 09:21:23 +02:00
Honza Horak
199601c94d Update attached undici version and rebase FIPS patch
Resolves: RHEL-43645 RHEL-46706 RHEL-46882 RHEL-50109
2024-08-07 16:34:46 +02:00
Honza Horak
2b5525a082 Update to 20.16.0
Resolves: RHEL-43645 RHEL-46706 RHEL-46882 RHEL-50109
Also fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 CVE-2024-28863
2024-08-05 14:43:26 +02:00
Jan Staněk
4d3fa5c165
Backport nghttp2 patch for CVE-2024-28182
Resolves: RHEL-32312
2024-06-28 13:52:18 +02:00
Jan Staněk
77f080bba3
Rebase to version 20.12.2
Resolves: RHEL-31265 RHEL-29878 RHEL-26528 RHEL-33014
2024-06-28 13:52:15 +02:00
Lukas Javorsky
e7020a5929 Specify openssl configuration section
By default, node does not use the common openssl configuration section,
relying instead on node-specific `nodejs_conf` section.
Since we want node to use the system configuration, the section name
should be changed (back) to `openssl_conf`.

See discussion in https://github.com/nodejs/node/pull/48950 for the reason this change is suggested.

Related: RHEL-25867 RHEL-26537 RHEL-26535 RHEL-25933 RHEL-26533 RHEL-26539 RHEL-25923
2024-03-05 11:56:08 +00:00
Lukas Javorsky
04364688f2 Fix FIPS disabling patch
This patch causes the option processing to end sooner than the problematic code gets executed.
Additionally, the JS-level options to mess with FIPS settings are similarly disabled.

Related: RHEL-25867 RHEL-26537 RHEL-26535 RHEL-25933 RHEL-26533 RHEL-26539 RHEL-25923
2024-03-05 11:23:01 +00:00
Lukas Javorsky
66c4fc39c4 Rebase to version 20.11.1
Resolves: RHEL-25867 RHEL-26537 RHEL-26535 RHEL-25933 RHEL-26533 RHEL-26539 RHEL-25923
2024-03-05 11:14:55 +00:00
Lukas Javorsky
9f90ba9fe0 Allign version grepping with Fedora script
Fedora script doesn't grep few bundled packages in RHEL, so it won't be
exactly the same script
2024-02-09 09:59:03 +00:00
Lukas Javorsky
50a8f1e949 Rebase to version 20.11.0
Resolves: RHEL-21434
2024-01-19 09:51:05 +00:00
Zuzana Svetlikova
9cb960e4ec Rebase to LTS
Resolves: RHEL-16159
2023-11-09 16:25:40 +01:00
Zuzana Svetlikova
09d5f2c0d8 Resolves: RHEL-12602
Update node and nghttp
Add FIPS patch
2023-10-19 17:23:18 +02:00
Zuzana Svetlikova
741d7d6dca Rebase to new security release
Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
Address CVE-2023-32006, CVE-2023-32559 (medium)
Address CVE-2023-32005, CVE-2023-32003 (low)
Resolves: #2186718
Resolves RHELPLAN-155624
2023-08-10 10:25:45 +02:00
Zuzana Svetlikova
1c141ecc44 Fix sources
Resolves: #2186718
Resolves RHELPLAN-155624
2023-07-28 17:09:15 +02:00
Zuzana Svetlikova
b6039f6e6b Update to v20.5.0
Remove dtrace support
bcond corepack, so we don't provide it by default
Decrease debuginfo verbosity for all arche
Resolves: #2186718
Resolves RHELPLAN-155624
2023-07-28 15:29:28 +02:00
Jan Staněk
6d2be7bed0
Replace /usr/etc/npmrc symlink with builtin configuration
We want to have the system-level npmrc located at /etc/npmrc.
By default, npm looks for it in /usr/etc/npmrc,
so we placed a symlink to /etc/npmrc there.
However, we are the only known package that has anything in /usr/etc,
which confuses and/or breaks various tooling (see related bug).

This gets rid of the symlink,
and instead uses "builtin"-level configuration of npm
to cause it to load the system-level configuration from /etc/npmrc.
2023-07-18 11:13:05 +02:00
Jan Staněk
1d46635e65
Rebase to version 18.16.1 2023-07-18 11:08:39 +02:00
Jan Staněk
5f06fe6080
Add metadata bits missing from last rebase
Related: rhbz#2178086
2023-06-20 16:02:40 +02:00
Jan Staněk
4b1ad7e810
Correct CVE-2022-4904 fix location in changelog 2023-06-20 16:02:39 +02:00
Jan Staněk
28e595cb38
deps(cares): update to 1.19.1 2023-06-20 16:02:39 +02:00
Honza Horak
1756e86eaa Replace whole repo with latest content from branch stream-nodejs-18-rhel-8.8.0
Content corresponds with RHEL dist-git commit df4b044
2023-05-16 21:21:40 +02:00
James Antill
303e365ac2 Import rpm: 465a72e724a3969530fd9f6c90fee326f31f1ad1 2023-02-23 20:27:00 -05:00
James Antill
4e5f9a0773 Import rpm: 465a72e724a3969530fd9f6c90fee326f31f1ad1 2023-02-23 13:02:39 -05:00
James Antill
dabd5cfcc7 Convert from sha1 to sha512. 2022-08-31 15:44:54 -04:00
James Antill
fb84d5a735 Import rpm: 465a72e724a3969530fd9f6c90fee326f31f1ad1 2022-08-08 12:43:47 -04:00