From eb2a82fd27c069cff8fdffa7c5b08921d68c6d13 Mon Sep 17 00:00:00 2001 From: houyingchao <1348375921@qq.com> Date: Thu, 1 Jul 2021 16:58:48 +0800 Subject: [PATCH] fix CVE-2021-23343 --- nodejs-path-parse.spec | 11 ++++++----- path-parse-97efc90.tar.gz | Bin 3371 -> 0 bytes v1.0.7.tar.gz | Bin 0 -> 3428 bytes 3 files changed, 6 insertions(+), 5 deletions(-) delete mode 100644 path-parse-97efc90.tar.gz create mode 100644 v1.0.7.tar.gz diff --git a/nodejs-path-parse.spec b/nodejs-path-parse.spec index 95c13a8..ccc27a8 100644 --- a/nodejs-path-parse.spec +++ b/nodejs-path-parse.spec @@ -1,15 +1,13 @@ %{?nodejs_find_provides_and_requires} -%global commit 97efc90ce24455d23ec6acedf47589df46e48ea0 -%global shortcommit %(c=%{commit}}; echo ${c:0:7}) %global packagename path-parse %global enable_tests 1 Name: nodejs-path-parse -Version: 1.0.6 +Version: 1.0.7 Release: 1 Summary: Node.js path.parse() ponyfill License: MIT URL: https://github.com/jbgutierrez/path-parse -Source0: https://github.com/jbgutierrez/path-parse/archive/%{commit}/path-parse-%{shortcommit}.tar.gz +Source0: https://github.com/jbgutierrez/path-parse/archive/refs/tags/v%{version}.tar.gz BuildArch: noarch ExclusiveArch: %{nodejs_arches} noarch BuildRequires: nodejs-packaging @@ -20,7 +18,7 @@ BuildRequires: nodejs-packaging Node.js path.parse() ponyfill %prep -%autosetup -n path-parse-%{commit} +%autosetup -n path-parse-%{version} -p1 %build @@ -45,5 +43,8 @@ NODE_ENV=test %{__nodejs} test.js %{nodejs_sitelib}/%{packagename} %changelog +* Thu Jul 1 2021 houyingchao - 1.0.7-1 +- upgrate to 1.0.7 + * Sat Aug 22 2020 wangyue - 1.0.6-1 - package init diff --git a/path-parse-97efc90.tar.gz b/path-parse-97efc90.tar.gz deleted file mode 100644 index 1376e11d5c4cd7eac31ab572cca1bdd9f87dabed..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3371 zcmV+`4b<`u zfO${;{IZT^YimpVVwwHL#*HWCYPDM4-rCsO-oX0u#%6W>$>=laGFJlb8y<@ET-U#i z?ymM(17^30t81tD2uQ6hnuA-bU zZ(?z7xeizy#>`{=YZ!TkVLn$7G~j3f=~;q_JFtfI%Y<3e zpl@4zT!Mi`(EY&2N=}ucH%nxP=6b-HZ7Yaiq29vQL_0x4s!ypy{jiHT)m)Cs>CTx-3bzC1+l`4<} zrioX>CO$T78~QBlFqDhkYoyHaNIXs=$F~d{rmiRC&6=sA{KGnQS_j=XwRRmE9XM&X zerfF2_aRs7;CrqFZyMdh)@c`zqFrlt-$LsEYR$Lsk4AI91oeNOwCkM?wAxDJ_~fWj z$GS#y@91>D(fk=+BVV(H1G#}C7(u%&Ab}xNquwE~<9d7V5MOJr8%K@q+mdq7=r#%S zpw)&NoYdOg#@^{stqmuq?UPogj^g(bw%KSNv{6d^xZdolC>86V{tLc9=dgBkM52`1 zDQe#){a~+k^0wXh`LGLzt)u-qR=%#IX0_Kxbtwvs+B>Q>j!Up#JFfj)7hEkwX)8n~ zwSzZ@b*dtHHT>J_Hd;+GW3Schw(+%uR<^q_>zhWWUV>V?(V-4GXt$0_3Uw!Pv;+w9 zHR}?Ex*9SbK@xgD?bKsH*ss@)5UWGXWMV|Du9ov}q&#N*Z`W)4$8~iwxTlOe)_+X( zx98UXYIT+We~I!Gk`VyC?|QET%N{@n*TI0F6~?|lSF?6j&~;p_nB9G7yzanKS2|BAL==W-g|0LMMHreJGj0&qvHDnlQt^n zTmTwVO8}{3e_}tSr+48$$SxkaWQX3=b*?diuoIl9Mm60@5!b1wPod%9sK7N&dH?>s z@(i5m1Xn##1#4^Ez$G+MThI{GDaU=3V8LC~h2aUB6Vb7|n0x#dSRO0n6UKb;rJ}?% zg}jE#J<~AR@U(&DX_V!t{*_N;nzs8Be8eA+g$5(+Ku*h*l1gL}bs3m6LEk`CkRn1( zx3Mb$I9u%)lb9tZt8Ze1YbOmw>0qMwxtxV*9~TaJn)Ic>FV0k|QQ0jpYp7OTL&h%90g@Qs)2s8+w_fSXzt5rpC8wIYYPj zzq?#MCjMg=u`8UU_my!+{NG%!R_5aWX1ThG|6icwF;IZq7UeMbWN4 zT%Fp6KXknb?C$PDUd$RI$AHjgBX&hQ4?eYV`(ogBN;1>P!l)_sB(xjELFV%v=sm~X z61%{Og!>lTz|9k(;C|3Pi&)oO$G#S-2+Vy!-Nq=YP)O2#E%c1F-)n3CI@|fw({)`t z`&hZ@{VJYb^unL;wfL$aYs3TBJ7>>d6`yGfRj2I==^-?Y_Ahe7B+L++TV6@TQ3{MD zikfGMqFrRps2K??6khG<>c?`aa`P$D?A51YL05afs=B7@XU{(si%2AOeJ(X5T+!3$ zhmSW><%7U6af4zZu0lL`?)5tkTLT!Rk7F2Id<=%^RM zPq?S2?I_xaM5G&TrvuwZWtQvNNwpesWibP3gc=TNv@!_QGE=aG*;q9 zT1Auk>KSS3F(0?=(2EBB0?)iuZWKj0MXsTU5&0^;oC^0?Ln!#yQ--?cEJyukhFHpqm!T2g#nkB3=vl>KGs3t*_H5i{NUq^r7`8Q#VJ1%srn=(= ztGfEL) z-^`Sn>6))PrBZVPHA}z65jr)n(O34yPbLGV{1Yhi{&Y21pe6d$mGmf6#Q+;S=3Lm z^TQiT;yZ41WnDiQrM&Ubj?^s91D0|aokLDBPCN+ZsmF`~jz-MizV_7kOO(gN|8Q#F zTgDynf4fqi|Nf)8wTk~=qKG{P=gjldmlU#wZXTB2W2o{NSX^R+Csl%`i-UubQVO5F zk7351-`mmkd`Twi;)O7E9pCe%FdNUy)qySr@+Fyy=c6~7f=h}#hL;%(T~G0fuy~7P zgLb#fdndW~8*N=L>v~1ktJN7@Vl|d(a0^zb)2uqNDs!yjI~3g8;*{f$ROz0WOH@ns zldcb4Hxa$Jvp_CZ3Za5l*YS0ksR4lXw>$%4U!dDEx|E(WDf``; zCNoODr1XVF`Yy!IA}-M1XUsNmRtzSV^K3@v`L<9`e$9P0sa6(rXWSHPH-i!rEKuf^ zuAesdX0(VZrIjfq$kIg`i27K3mObpC{F!o=1i=nn92)i>;vTr(#PG8LQL4f*HImVf zkmEO0HZ){DBog6#l%v{|d^+R1B?@bCUt}+dvx7!lI>+NhzRb<9WtY`6j#wzsfQ-yA zYQX_vEFY_BvN;_Dq&A0iZ*86}8MR7k_-|(e9}mWe{?monKpJOPpxXOLm&yJI-k7 zFeBXY2ZIcw)8a_dN6VQ8sJs){HhmV$x%kfn+C$F5HL+iekVxF)aKIIx!DiunFJO-b z?7Obb3@3|Nel(mDO!_z_GH3yI_t0|aqv=PY#s~yVPBO>L{2-PAIWh_}-@BBu$vS56 zw{VDaE^60wMj13rttv{hiyh9SQ0$iF+O=FYj&Stys42vrhNun{_gSl;g6e;@5e1L`_kbhH4BLo7R5|3|k_`WWDlP zF@f)`pQY6L+WX*DS(Q~;l~q}lRauo)S(Q~;l~q}lRauo)S(R_G{1;U4-);a<008@H Bnu`Dc diff --git a/v1.0.7.tar.gz b/v1.0.7.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..7f28155ce4076366d085383c675eef7152030a8b GIT binary patch literal 3428 zcmV-q4V&^GiwFP!000001MOSucG^f1&TlP|L!ON z8=w}nVo41zi_v8vb{XgSF1*_EuT1APSJz47AG4+W|ERuSYqV?kspA&^FBP^^`QK(` zYkmHIj@FqlIIef#$Q&@6GsxmiPEq!q*_CUKCmv)6IVfR3hQH#mz+8BS5o6#e$_aC) zCg-MOgUMmST-LvWv1`~K8|Go;G6v2F1{1>_vpjeX81@y+n9EVX>3fE0oAwwCtUhN~ z3UYcAgyGJ}yD(ga%tJ6ZcLt_`crbJZbE;7dkMxa9i*d+$Xu8_=CDfcyGGvCOm^M&f z&;=K!H*w}3xR}cW?2d%m}s{cYh<0^A=76xp`JfQoG2F)XPO*| z$(7OEwNWJ#GD8QaOlW+~1|Cs}edJh{b3sEJIQGz_5n(u2XsM09^OlLR$knwS4^5RO z&;rb&RrS00#IP*rGk?NRFHWx!8;(or(TQx&G%T1ouF$tQObzuvuR*(c*m+TH)u7&n zlUDQR`a$gg)M^{=)jYhYcb+#-JAfRmYNPWKnukzryoA5i8wYu){r#j>Yqz1W%%Q(}Q~BCwPW(jV5m7I__Wu?KFWD`cU;+o4}51t^MbCTYXkPs&`)ImBV_c zL70cl7F6M++UnHzPmiiCI5};dG}|>)e}J%!dgHK#T589&Mn^-fNQ2tXcmwU{)uSU) zrBqMR`WD#-`^}S=t@=;TJMg@DbWlU$vl?1feRfons&G*IN7edq9uBI<)t_oYs);Bq zh1jHZ@Zx!mNTjcd|MoleW`l;Y-)wYRc$>#jwmPBci+a13hia?drU^N0HIMTOO(#k; z1qjMDY7&K}8WJmlEOdX`u7!YbP^%sxR-1%rhyk;HYpN?D3 z|6*lxJC*+zHrM(8=V%Wh+5yo0ru%GeT0>~#IXLHM*@@@P_>Qj2ns8%aYK}YBU-!pz z4|4&R{ia9K8h<<9>tg~inCwms?lCv_VE~wR{0I%KKD5^yy05516CGK)Y~%TAk8`gg zOe$1fa{*|~OaY`#ys7n&uFm~GC@wC!6o>B2v9B`EqF-ilw%zwM6il_Yq)~vL`>{1<{rP!O_yaekzgkG zR8c~nY(~f9p6Qruxcbm^b;@!y@6sbSUElo?-r*0(Mw=0KK-JZJL_{G$OTfe#`UaYU z9078?k6jADMY3&7LlISyufqXXPwI-&#zgN^Ef%JITr9}LXf6eQZh@%H9By6)U6kmY z5CQm%4a|`_fVY@cVOp{XreT&;F2&_unD)@Q;L9b0ELl+~W&Y2%Y&@G8ia8mPHv1M-;Y99yq}+%v@){ zIM-&D;f)-33cI_zkP%)(>=+PQY|JjH^58QI%NGO7DJe`l3!^6Xh(BEnMtKpq@*)sX zWXXg4i^1nis1_K$_7;Xsg<_EYOE#O`+vyq`zg0K>aklfm+w1l8vv;NI?l0o%N!S1J zZ*zN+u$Ln-Nqj6xxyQL|wx_)-=1bS_1OC1DIiz)e(RzBXclP*wE+?5EKhpgv5d+5Q zcz2D2(cBg_q@=dV>!89aIc}XagS8 zkcn_IFhz%;a?b#XmZw4xRCod@r2-3Wr!xV7<_Ql-g!O3WEKE*p6i@v@d=qlNe;-O} zI5lJ3I5eKhO#@Nu_FKa;hjO1~$iUciJOMSMhNk&zA;D-1?u7cf#k0KPpPn&l;Y{rG z7#Hj%dK0|n2rsj*f&_{aFy?aJJ<{C5u;bE1-j;S-8 zTeL;!DO4DQV8lHFRcgA+^(Ji$qk(EOzj`5Rg)|C+S=6_p-&GI_``wWe|StT!1vC4}!gGzp;`bP(KiOnIYL&gWL zIrIFUpkj}efH??iYAG=_Ou-t|7LqDaICjX8qS9vv#74Cu_}?JVJH%_j?lST_&vCC} z5*W)!Vr+V<3>fO%wTKebo!B#(_o=jB_1J=BLnUw6)rI2@$*8WxBhCO@)TY6WD2e@R zS!nw_!Svxxe{Ndd1`a+j&NHp}bqF?a+)yYncjDek-1CV!C5uHYRE@beaa>wfvXa)Hk7KLxp%bZ_oX=To!RR@}3`5BWp*(b%F~r@7$N86bjjy7m z;(zcF&^_w7CH@z-x6|K$l{O3O`2QK&%IB1tcsv=V=@iL^=Z5EDdXTk)tdgWLEkrq0 z6@(F%5?S#O0cnM&`11qU`19mRAR>}S6nU~sk1qx3TJedLUWz_Y|NF0hsv@UH#1OD3 z05PkTbDY2x$sqg%iqwO}8x-Oi3Bfa`G{OVJW18(;WJPWpb<44xW6F+9iQ$^Lka6*e zV`QPVgV&`+tTrckYl0p$+b$pOdiba(0ACU>3 z4(=bSq$qvrzVqwE%>GWVm&wcWP}~q^uZQ=Uyk8M!WOhg|1u}VA4rYQoSq4gu45k+g z7`lJ&wQmog16Vh+f_r2fGB5P0wu@-OkAzP(LMl3L$iD= z1k-iEgKS~6y&i6IEOGF6Vz?|Z{AGPH)nbNM=$C!|)TD4Cj@0Z2yx?6pKL3!uC17@+f%|vlo`xyA(T#xWs;sG0Q-&7*0+5(SptCKHpA$#XUAHmzGRt z*cDp0fD$q+F=nsVJ8kSQSP>BAC}T#@NS9e4=%Mw3l0fm^K7HKeHgE!(B zkUJy0P>|-6$vS56H%N#&H@|SQ1R~-+5?{n$*(