rpms/nodejs24
7
0
Fork 0
Code Issues Pull Requests Releases Activity
23 Commits 2 Branches 16 Tags 376 KiB
Shell 57.9%
JavaScript 31%
Makefile 11.1%
c10s
Go to file
tjuhasz dc3a5abd2a Update to version 24.18.0 
Resolves: RHEL-183886
Resolves: RHEL-189398
Resolves: RHEL-189348
Resolves: RHEL-185997
Resolves: RHEL-185984
Resolves: RHEL-185978
Resolves: RHEL-183655

CVE fixes included in rebase:
CVE-2026-48618 - tls: normalize hostname for server identity checks
CVE-2026-48933 - crypto: guard WebCrypto cipher output length
CVE-2026-6734 -  undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
 Advisory: https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj
CVE-2026-9697 -  undici vulnerable to TLS certificate validation bypass via
dropped requestTls in SOCKS5 ProxyAgent
  Advisory: https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g
CVE-2026-12151 - undici WebSocket client vulnerable to denial of service via fragment count bypass
 Advisory: https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g
CVE-2026-42338 - ip-address: Cross-site scripting via improper HTML escaping of untrusted input

Also following CVEs with lower severity:
CVE-2026-48615, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48934
CVE-2026-48937, CVE-2026-48617, CVE-2026-48931, CVE-2026-48935

Drop downstream nghttp2 patch
2026-07-07 13:36:32 +02:00
.fmf test-plan: adjust variables and filter 2025-08-20 14:39:09 +00:00
packaging Update to version 24.14.1 2026-04-01 13:25:55 +02:00
plans test-plan: adjust variables and filter 2025-08-20 14:39:09 +00:00
.gitignore Update to version 24.14.1 2026-04-01 13:25:55 +02:00
0001-fips-disable-options.patch Update to version 24.6.0 2025-08-19 10:27:28 +02:00
0001-Remove-unused-OpenSSL-config.patch Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
gating.yaml Enable gating 2025-07-24 12:38:33 +02:00
i18n-btest402.js Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
Makefile Update to version 24.14.1 2026-04-01 13:25:55 +02:00
nodejs24.spec Update to version 24.18.0 2026-07-07 13:36:32 +02:00
nodejs.pc.in Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
nodejs.srpm.macros Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
npmrc.in Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
rpminspect.yaml Import rpminspect.yaml from Fedora 2025-07-22 16:42:53 +02:00
sources Update to version 24.18.0 2026-07-07 13:36:32 +02:00
test-runner.sh Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00
test-should-pass.txt Update bundled nghttp2 to 1.68.1 2026-04-01 13:47:24 +02:00
v8.pc.in Import SRPM from Fedora Rawhide 2025-07-22 14:36:42 +02:00