nodejs 18.19.1+dfsg-1 source package in Debian

Changelog

nodejs (18.19.1+dfsg-1) unstable; urgency=medium

  * New upstream version 18.19.1. Closes: 1064055.
    + CVE-2024-21892 (High)
      Code injection and privilege escalation through Linux capabilities
    + CVE-2024-22019 (High)
      Reading unprocessed HTTP request with unbounded chunk
      extension allows DoS attacks
    + CVE-2023-46809 (Medium)
      Marvin Attack vulnerability against PKCS#1 v1.5 padding
  * new architecture: loong64, thanks to Shi Pujin  
  * patch:
    + let loong64 have some failing tests
    + more doc for localhost-no-addrconfig
    + allow test-debugger-heap-profiler to fail. Closes: #1059168
    + disable zlib embedding in v8, disable snapshot compression
  * override lintian source warning for zlib brotli test string
  * fix boostrapping of nodejs package:
    + update README.source
    + nodoc: disable bash completion output
    + patch: disable shared builtins when flag
      node-builtin-modules-path is used
  * include permission headers in libnode-dev
  * B-D pkg-config becomes pkgconf

 -- Jérémy Lal <email address hidden>  Sun, 18 Feb 2024 18:12:23 +0100