diff -Nru node-ws-1.1.0+ds1.e6ddaae4/debian/changelog node-ws-1.1.0+ds1.e6ddaae4/debian/changelog --- node-ws-1.1.0+ds1.e6ddaae4/debian/changelog 2019-01-06 23:09:57.000000000 +0000 +++ node-ws-1.1.0+ds1.e6ddaae4/debian/changelog 2019-04-21 06:58:55.000000000 +0000 @@ -1,3 +1,12 @@ +node-ws (1.1.0+ds1.e6ddaae4-5) unstable; urgency=medium + + * Add upstream/metadata + * Declare compliance with policy 4.3.0 + * Add patch to fix upload size to a sane value + (Closes: #927671, CVE-2016-10542) + + -- Xavier Guimard Sun, 21 Apr 2019 08:58:55 +0200 + node-ws (1.1.0+ds1.e6ddaae4-4) unstable; urgency=medium * Priority: optional diff -Nru node-ws-1.1.0+ds1.e6ddaae4/debian/control node-ws-1.1.0+ds1.e6ddaae4/debian/control --- node-ws-1.1.0+ds1.e6ddaae4/debian/control 2019-01-02 00:23:34.000000000 +0000 +++ node-ws-1.1.0+ds1.e6ddaae4/debian/control 2019-04-21 06:48:34.000000000 +0000 @@ -16,7 +16,7 @@ node-gyp (>= 3.8.0-2), node-should, node-tinycolor -Standards-Version: 3.9.8 +Standards-Version: 4.3.0 Homepage: https://github.com/websockets/ws Vcs-Browser: https://salsa.debian.org/js-team/node-ws Vcs-Git: https://salsa.debian.org/js-team/node-ws.git diff -Nru node-ws-1.1.0+ds1.e6ddaae4/debian/patches/node-ads-120.diff node-ws-1.1.0+ds1.e6ddaae4/debian/patches/node-ads-120.diff --- node-ws-1.1.0+ds1.e6ddaae4/debian/patches/node-ads-120.diff 1970-01-01 00:00:00.000000000 +0000 +++ node-ws-1.1.0+ds1.e6ddaae4/debian/patches/node-ads-120.diff 2019-04-21 06:48:34.000000000 +0000 @@ -0,0 +1,19 @@ +Description: Fix upload default size to a sane value +Author: Arnout Kazemier +Origin: upstream, https://github.com/websockets/ws/commit/0328a8f49f004f98d2913016214e93b2fc2713bc +Bug: https://www.npmjs.com/advisories/120 +Bug-Debian: https://bugs.debian.org/927671 +Reviewed-By: Xavier Guimard +Last-Update: 2019-04-21 + +--- a/lib/WebSocketServer.js ++++ b/lib/WebSocketServer.js +@@ -37,7 +37,7 @@ + disableHixie: false, + clientTracking: true, + perMessageDeflate: true, +- maxPayload: null ++ maxPayload: 100 * 1024 * 1024 + }).merge(options); + + if (!options.isDefinedAndNonNull('port') && !options.isDefinedAndNonNull('server') && !options.value.noServer) { diff -Nru node-ws-1.1.0+ds1.e6ddaae4/debian/patches/series node-ws-1.1.0+ds1.e6ddaae4/debian/patches/series --- node-ws-1.1.0+ds1.e6ddaae4/debian/patches/series 2019-01-01 23:15:33.000000000 +0000 +++ node-ws-1.1.0+ds1.e6ddaae4/debian/patches/series 2019-04-21 06:48:34.000000000 +0000 @@ -4,3 +4,4 @@ disable-debian-failing-tests fix-failing-tests increase-test-timeout +node-ads-120.diff diff -Nru node-ws-1.1.0+ds1.e6ddaae4/debian/upstream/metadata node-ws-1.1.0+ds1.e6ddaae4/debian/upstream/metadata --- node-ws-1.1.0+ds1.e6ddaae4/debian/upstream/metadata 1970-01-01 00:00:00.000000000 +0000 +++ node-ws-1.1.0+ds1.e6ddaae4/debian/upstream/metadata 2019-04-21 06:35:28.000000000 +0000 @@ -0,0 +1,7 @@ +--- +Archive: GitHub +Bug-Database: https://github.com/websockets/ws/issues +Contact: https://github.com/websockets/ws/issues +Name: ws +Repository: https://github.com/websockets/ws.git +Repository-Browse: https://github.com/websockets/ws