-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2023-4dfc0570b8 2023-03-02 02:25:43.345410 --------------------------------------------------------------------------------
Name : nodejs-epel Product : Fedora EPEL 9 Version : 16.18.1 Release : 4.el9 URL : http://nodejs.org/ Summary : JavaScript runtime Description : Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.
-------------------------------------------------------------------------------- Update Information:
Rename to nodejs-epel and convert to EPEL-only package -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 21 2023 Davide Cavalca dcavalca@fedoraproject.org - 1:16.18.1-4 - Rename to nodejs-epel and convert to EPEL-only package * Wed Dec 7 2022 Jan Stan��k jstanek@redhat.com - 1:16.18.1-3 - Update sources of undici WASM blobs Resolves: rhbz#2151617 * Mon Dec 5 2022 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.18.1-2 - Add back libs and v8-devel subpackages - Related: RHBZ#2121126 - Record previously fixed CVE - Resolves: CVE-2021-44906 * Wed Nov 16 2022 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.18.1-1 - Rebase + CVEs - Resolves: #2142808 - Resolves: #2142826, #2131745, #2142855 * Tue Sep 27 2022 Jan Stan��k jstanek@redhat.com - 16.17.1-1 - Rebase to version 16.17.1 Resolves: CVE-2022-35255 CVE-2022-35256 * Tue Aug 23 2022 Jan Stan��k jstanek@redhat.com - 16.16.0-1 - Rebase to version 16.16.0 Resolves: RHBZ#2106290 Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215 Resolves: CVE-2022-29244 * Thu Apr 21 2022 Jan Stan��k jstanek@redhat.com - 16.14.0-5 - Decouple dependency bundling from bootstrapping * Tue Apr 5 2022 Jan Stan��k jstanek@redhat.com - 16.14.0-4 - Apply lock file validation fixes Resolves: CVE-2021-43616 * Thu Mar 31 2022 Jan Stan��k jstanek@redhat.com - 16.14.0-3 - Refactor bootstap handling and configure script invocation Resolves: rhbz#2056969 * Sun Feb 13 2022 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.14.0-2 - Build with bootstrap by default due to old versions of dependencies available - Resolves: #2042995, #2042970, #2042981, #2042989 - Resolves: #2029936, #2024890, #2014499, #2014135 - Resolves: #2013834, #1945299 * Fri Feb 11 2022 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.14.0-1 - Update to latest version - Use jinja and jq - Don't fix python3 - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533 - Resolves CVE-2020-15095 - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960 - Resolves: CVE-2021-3807, CVE-2021-27290 * Wed Sep 29 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.10.0-1 - Rebase to 16.10.0, add corepack, fix PowerShell dependency - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177 * Thu Aug 12 2021 Jan Stan��k jstanek@redhat.com - 1:16.6.2-1 - Rebase to 16.6.2 Resolves: CVE-2021-22931 CVE-2021-22939 CVE-2021-22940 * Mon Aug 9 2021 Mohan Boddu mboddu@redhat.com - 1:16.5.0-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Thu Jul 22 2021 Zuzana Svetlikova <zsvetlik@redhat.com - 1:16.5.0-2 - Bump for gating - Resolves: RHBZ#1979926 * Tue Jul 20 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.5.0-1 - Rebase to 16.5.0 - Fixes CVE-2021-22918(libuv) - Resolves: RHBZ#1979926 * Wed Jun 16 2021 Mohan Boddu mboddu@redhat.com - 1:16.3.0-2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 * Tue Jun 1 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.3.0-1 - Resolves: RHBZ#1953491 - Rebase to 16.3.0 - includes https://github.com/nodejs/node/pull/38732 * Thu May 20 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.2.0-1 - Resolves: RHBZ#1953491 - Rebase to 16.2.0 - includes https://github.com/nodejs/node/pull/38633 (FIPS for OpenSSL 3.0) * Wed May 19 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.1.0-1 - Resolves: RHBZ#1953491 - Support for OpenSSL 3.0.0 - Rebase to v16.x - Update version of gcc and gcc-c++ needed - Bundle nghttp3 and ngtcp2 * Fri Apr 16 2021 Mohan Boddu mboddu@redhat.com - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Tue Mar 30 2021 Jonathan Wakely jwakely@redhat.com - 1:14.16.0-4 - Rebuilt for removed libstdc++ symbol (#1937698) * Tue Mar 9 2021 Zuzana Svetlikova zsvetlik@redhat.com - 1:14.16.0-3 - Only require nodejs-packaging on Fedora - remove --debug-nghttp2 (#1930775) - always build with systemtap -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2171960 - Review Request: nodejs-epel - JavaScript runtime https://bugzilla.redhat.com/show_bug.cgi?id=2171960 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update nodejs-epel' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org