feat: update nodejs to 18.19.1+dfsg-3

Author: deepin-community-bot[bot]

CHANGELOG.md

@@ -32,7 +32,8 @@ release.
 </tr>
 <tr>
   <td valign="top">
-<b><a href="doc/changelogs/CHANGELOG_V18.md#18.19.0">18.19.0</a></b><br/>
+<b><a href="doc/changelogs/CHANGELOG_V18.md#18.19.1">18.19.1</a></b><br/>
+<a href="doc/changelogs/CHANGELOG_V18.md#18.19.0">18.19.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V18.md#18.18.2">18.18.2</a><br/>
 <a href="doc/changelogs/CHANGELOG_V18.md#18.18.1">18.18.1</a><br/>
 <a href="doc/changelogs/CHANGELOG_V18.md#18.18.0">18.18.0</a><br/>

debian/changelog

@@ -1,36 +1,48 @@
-nodejs (18.19.0+dfsg-7~deepin) unstable; urgency=medium
-  
-  [ Jérémy Lal ]
-  * new architecture: loong64, thanks to Shi Pujin
-  * patch:
-    + let loong64 have some failing tests
-    + more doc for localhost-no-addrconfig
-    + allow test-debugger-heap-profiler to fail
-  * fix boostrapping of nodejs package:
-    + update README.source
-    + nodoc: disable bash completion output
-    + patch: disable shared builtins when flag
-      node-builtin-modules-path is used
+nodejs (18.19.1+dfsg-3) unstable; urgency=medium
 
-  [ LiChengGang ]
-  * update UNRELEASED -> unstable
+  * mips64el: skip failing test
+    Some unusual v8 options make mips64el crash
 
- -- LiChengGang <lichenggang@uniontech.com>  Mon, 08 Jan 2024 10:26:41 +0800
+ -- Jérémy Lal <kapouer@melix.org>  Thu, 22 Feb 2024 11:36:42 +0100
 
-nodejs (18.19.0+dfsg-7) UNRELEASED; urgency=medium
+nodejs (18.19.1+dfsg-2) unstable; urgency=medium
 
+  [ Bo YU ]
+  * Allow more risc64 tests to fail. Closes: #1064331
+
+  [ Jérémy Lal ]
+  * Allow more mips64el tests to fail. Closes: #1064306
+    Upstream still supports those architectures but they
+    take more time to fix corner cases.
+
+ -- Jérémy Lal <kapouer@melix.org>  Tue, 20 Feb 2024 11:56:31 +0100
+
+nodejs (18.19.1+dfsg-1) unstable; urgency=medium
+
+  * New upstream version 18.19.1. Closes: 1064055.
+    + CVE-2024-21892 (High)
+      Code injection and privilege escalation through Linux capabilities
+    + CVE-2024-22019 (High)
+      Reading unprocessed HTTP request with unbounded chunk
+      extension allows DoS attacks
+    + CVE-2023-46809 (Medium)
+      Marvin Attack vulnerability against PKCS#1 v1.5 padding
   * new architecture: loong64, thanks to Shi Pujin  
   * patch:
     + let loong64 have some failing tests
     + more doc for localhost-no-addrconfig
-    + allow test-debugger-heap-profiler to fail
+    + allow test-debugger-heap-profiler to fail. Closes: #1059168
+    + disable zlib embedding in v8, disable snapshot compression
+  * override lintian source warning for zlib brotli test string
   * fix boostrapping of nodejs package:
     + update README.source
     + nodoc: disable bash completion output
     + patch: disable shared builtins when flag
       node-builtin-modules-path is used
+  * include permission headers in libnode-dev
+  * B-D pkg-config becomes pkgconf
 
- -- Jérémy Lal <kapouer@melix.org>  Wed, 20 Dec 2023 23:19:51 +0100
+ -- Jérémy Lal <kapouer@melix.org>  Sun, 18 Feb 2024 18:12:23 +0100
 
 nodejs (18.19.0+dfsg-6) unstable; urgency=medium
 

debian/control

@@ -32,7 +32,7 @@ Build-Depends:
  node-cjs-module-lexer (>= 1.2.2~) <!pkg.nodejs.nobuiltin>,
  node-undici (>= 5.0.0~) <!pkg.nodejs.nobuiltin>,
  openssl (>= 1.1.1~) <!nocheck>,
- pkg-config,
+ pkgconf,
  pkg-js-tools (>= 0.8.2~) <!nocheck>,
  python3:native,
  python3-distutils,

debian/copyright

@@ -64,7 +64,7 @@ License: CC0
 
 Files: ada/cmake/codecoverage.cmake
 Copyright: 2012-2017, Lars Bilke
-License: BSD-3-clause
+License: BSD-3-clause~holders
 
 Files: ada/cmake/CPM.cmake
 Copyright: 2019-2023, Lars Melchior and contributors
@@ -331,7 +331,7 @@ License: Expat
 Files: lib/internal/crypto/webidl.js
 Copyright: 2014, Domenic Denicola
  2018-2023, Deno authors
-License: BSD-2-clause and Expat
+License: BSD-2-clause~holders and Expat
 
 Files: lib/internal/freeze_intrinsics.js
 Copyright: 2011 Google Inc, 2018 Agoric

debian/libnode-dev.install

@@ -2,6 +2,7 @@ usr/include/node
 src/*.h usr/include/nodejs/src
 src/crypto/*.h usr/include/nodejs/src/crypto
 src/tracing/*.h usr/include/nodejs/src/tracing
+src/permission/*.h usr/include/nodejs/src/permission
 deps/v8/include/cppgc/*.h usr/include/nodejs/deps/v8/include/cppgc
 deps/v8/include/cppgc/internal/*.h usr/include/nodejs/deps/v8/include/cppgc/internal
 deps/v8/include/*.h usr/include/nodejs/deps/v8/include