From 081a28b840383bed65ffc5f722df08d69097edad Mon Sep 17 00:00:00 2001 From: starlet-dx <15929766099@163.com> Date: Wed, 13 Apr 2022 15:11:01 +0800 Subject: [PATCH] Update minimist to 1.2.6 for fix CVE-2021-44906 (cherry picked from commit 6d1ae640663665cfa6fbf43f17bf4357b25c7106) --- CVE-2020-7598.patch | 40 ---------------------------------------- minimist-1.2.0.tgz | Bin 7724 -> 0 bytes minimist-1.2.6.tgz | Bin 0 -> 8363 bytes nodejs-minimist.spec | 13 ++++++++----- 4 files changed, 8 insertions(+), 45 deletions(-) delete mode 100644 CVE-2020-7598.patch delete mode 100644 minimist-1.2.0.tgz create mode 100644 minimist-1.2.6.tgz diff --git a/CVE-2020-7598.patch b/CVE-2020-7598.patch deleted file mode 100644 index 243b746..0000000 --- a/CVE-2020-7598.patch +++ /dev/null @@ -1,40 +0,0 @@ -From 38a4d1caead72ef99e824bb420a2528eec03d9ab Mon Sep 17 00:00:00 2001 -From: substack -Date: Tue, 10 Mar 2020 09:08:00 -1000 -Subject: [PATCH] even more aggressive checks for protocol pollution - ---- - index.js | 13 +++++++++++-- - 1 file changed, 11 insertions(+), 2 deletions(-) - -diff --git a/index.js b/index.js -index 6a0559d..cfdf0a5 100644 ---- a/index.js -+++ b/index.js -@@ -68,12 +68,21 @@ module.exports = function (args, opts) { - - function setKey (obj, keys, value) { - var o = obj; -- keys.slice(0,-1).forEach(function (key) { -+ for (var i = 0; i < keys.length-1; i++) { -+ var key = keys[i]; -+ if (key === '__proto__') return; - if (o[key] === undefined) o[key] = {}; -+ if (o[key] === Object.prototype || o[key] === Number.prototype -+ || o[key] === String.prototype) o[key] = {}; -+ if (o[key] === Array.prototype) o[key] = []; - o = o[key]; -- }); -+ } - - var key = keys[keys.length - 1]; -+ if (key === '__proto__') return; -+ if (o === Object.prototype || o === Number.prototype -+ || o === String.prototype) o = {}; -+ if (o === Array.prototype) o = []; - if (o[key] === undefined || flags.bools[key] || typeof o[key] === 'boolean') { - o[key] = value; - } --- -2.23.0 - diff --git a/minimist-1.2.0.tgz b/minimist-1.2.0.tgz deleted file mode 100644 index 49b822db3bcb94596eabd81e63ec34fbad6fe008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 7724 zcmV+{9@F6;iwFP!000001MNL&ciT9U{aL>P@$?R@wn!be>|STJ87FZjnn~P z2a~qd@kZrf(uU5|xhhLNvanJFeE?LCg|G)^%62VD>C+HY zPX1!b=*wTIiwq9@JZG@%NjUKQm^Z2Se}m6}ytRizr)$q-eG2-^7{$-ONb)R~CIx}a z054jJi0h%#p>Dv?yl0kA%~yvuIECLECGt!2?CtT#GXf<}4vx-#CC6{b!O^ee@6DsvC35)B4=0DGr{wsg(0u>l zUGosqnn$nReSFqAILw}+Ti0DK4V@6}oJ_z2l}b$oPo0zXT@<;hu8^_S-9 zVTl}^G*3|=Z%&Q@Jc<))K#}GVkacu)$f2O9iPj=e1b=@#J&b92eR%K=V4WhzYGLc! z8ok!feIGgg%Q^aE;Fvr9S9dG5y0ZSO;QFsttJK!x|5H3Lu1$v2qEocr0cpT65ECakvmEy4+V)9rX!ltLX?xx})NVhM4 zP24NjyK&#R`^25V7y~dO@VMN75d^`v3{lWHCyhpf7?LzY(t{5}Xhk3ab)qgO@HPhp zQc3Lyh5SkW{O4qW7%4{yL*YxtVuOVKgbFl-4q-hkOSaBoY2$Y6a5D+ag1Jmc{mqv= z1%7+}q1_p5#`1@ikIJaT%jDXE%ySJh;4Vs5wHC354$SA&#yVz`1`9w0j4q26A%FY< zC6*vW0F)%?JaSkpulPK(N(O?d&SzYH$`G(x0*4NX%P)A5EAogk~}xMHfjB^l8{s3p^|xB|p%pcZs#&z=lfpXI73 z5eFZYC@Y7^CuUrrG+falZ9q*+ORyl36T5+s)AuCSGXW zl-+kEHCLhHW|**KLl5aS&wFYky`02ePVy3gzaZC1`(+0b3TG9jgSPBF;0HbYmtOwbiEL)umPO+>6ANx9O_%-l+yiVVd(}&A29AE^oHII^K9GY zYGwE5?aI&P>UOQVtJOocN1SPEWQWk*kiku6>Whs{&caW{AIrt(sd~JRj9O}!ka^N9 zj#{-uZftYo&XF~3k`VakGd2N7i)Ig}(5Q3TG-g*96x7?a zwu|#6 zX+$zxAEaKuh@D|9_SxJrC5WVik-(&YBM!H==BbP#{Y}L62Osx;R9RmJJ-6ow!MG14 z^ATlCGF}kF5Ms*0d%Hm4TECg+i&Sn%Ls)Q#X{Q*Yt89!GGXx`nGzFpUdsh?}$4t0- z;mA^d=9c<1SZaYWGS;7UW37UY6!mDY;C*V6`e4!{0L@3}^$a@+{vT$fbSD5p4!zwM@L!B$*g8SN@MJ@@3;ssmv z>=Pv|1uS<;AsG_xNpE~;`@>8ps6wn|kHHa^A$?xE5oPEDsa@O?0J|@yMQ%hl71cmjsl5UchakNd8@>He4vWp16n*nF{%^EUX)XKsJs=T>o(vRrKrH!U)b8QN}t0t&DX7QIU^J_iNy ziSA94Y*ehDH{`c!CH`6yUmXu4rP~yYEWJQat34d@s_uA1L;^AU`13FSu39_R?%KS3 zLyzqLbZU>rLp%rK2lRpCfEM-tNCw|BSK@jp-UD4YF0{ny0tDa>E3vQgX|`(B3z zfyE|od_GmfwL!;o16T!HU5Bk!t|94bGqHZ|{K)cRr}L2=CQ|2w-F z>!0ZV^_|^y|9^_-PedNKDHO8La$)?q6A&IKh=J%B-QAyrEYe$^u`zMc3o_ zk6Wuf+wC~L$q-h?9nWXs_Ew?Lde#z0rsO{C`KCM^)ZuF!JbIOLzG&?Bi@f|Y#fu!> z#2I!8TP5Nnm!BWp8DL)r>9xWKat~ zvZ)(Mj^MMC^THV2)8D?R^#kF*aZYz8K(?Y!h=vc8KZL z0erhdOcMb$5CrLY9%ANt!{2Dd<`^(4@@BKH$+>8KM?d|D=YyMOBp8*T(O+(2ys>G2trRgCD)P z#JZPc?2RWwc4P(hp7jwMeKS${fb@KC#EJ)(p!k>EDRRknt8ADk%Z{Sd2nTjZx=t6P z6bAM+9@h}PQavMs2=Qde2%sK8P2cI5L(jWn$7~{4Hx56|!F>Z1PuURea0tl69fH!4 zOC`$jl6ZcBCx{T4OYHjr4cUGnqbw2yo}&Zg2d>Jl-3y^pU!r^Il4Ezh5Gi0%?y{pN zESbWW$rzm`QYHXP7$4FBmfLvj=%)mECb30WF`h)>vIc`BBaJoM*r6JGcw^7t8;o>7 zdQcE0Bft@x2wD6n%|np^Q&bBq^w?aY&I;B=3Ha9aCT*~zgV}gMUDkeT8*!5f+G-C; z;Pk=zLNf`dWRqHb3*_1Zy@S>=P3T>hB_`HOvxhAv5*yIpE{hRo%)!a{a;4Ue?C}`+ z66{4nlDtWNgP7q$TBI0AV+S&VD8eUPpK~#$fr(l?Y$QGB*ca=MSY_Ky; z7A_CwL6j*%pN#imLUj{Ior7(*j1iwXn&!ZBukc&PyD?z$8gJVOklak9chN!^hv@ha zhf=XY7gt4?@tl%BXksK*hHE}Zv30}72n1JBVu_!N(lE2Zy}8?Y^77o_EE?0b$wA)4 zAmB5D`$-ZLZ~pT;dE?&^+dtUcZrOeR41fC&^lVMI@uRm2=eCEj^n37hU(E z$AAU)f2UeY+W(z;WxfCNB+on>KW}Uh_Dq^GY4k9}j zIXTn}1N8F95LvQhiHB+B+vFqgV!1kWJ zjO1YvF_E1yOqnJ}^w?BnX#)uHKXg>k?Y|d>wEN(<04%Wo)oObF zzr9^q+yAF{?m7SG8pAz6OHW8)RbaJoYFDeV-X3>l12gtXwR&6PFyl1ChR?Qfo7uG? zt3+zG%q*;?XQu3?;6fgWUXBmLcsSCl)j6cAnF~ngP7T*vsX=lXS&rWIy!v~7H2Z&b zeGv>iKYZHwkNRFkz5k_(_J6Osw*OD^+|&Lubs^?e5T!w=vlqPceieuwD*%IC|{H&A<-PiO>8a?S}8Qy)c+hA?~ay z)o^!JR7+C*wcA}jTK^w1~-o>ON!9nvIL$OKd}Gaqrs9)}a3 zl3=_l?#9C)rvF+A@xTjkLJKfD_E7#ndi;=kf9pwtunIgpe-f6|McmrzW%p^!PDFSy;?f{e{XMlZU3L*x##@P%(MG!mQ~L%0ddcFSzl*e z9J)68_)Kk@lwVWU;ZXr5+uomBp%+!@Eku)HquP?vk{F-3OR{YM0Bz`shAoA#6>MRk z;^BcZ=u1wb33MJL0%bC6+8ATep4&Lvb0ubTL(HP~r0i^+z4l_ce+@9|ngH)SPDZ3* zqzeegarvdmj!!VE1w%P_$de+p+-1X}F%5&7kl4R@1E%FXVkl;UQ6kz|3w2SO8G-Ca zFa(zz5Y~)BUL>$Ptt~YB{}_iqepqz>Yh`b5H#Pr<0&DyK6wf{Fe-tu)#|41vnYhiL znC3we*_XFAWz6YZZ7YP_@b1U1{B0DpZAx~xzoTzd_ zX~NvFwiRNi1n?{|->XGjdV`V57{<(_m4h5Ft!R=!Q!_Mi8~^;|{&Rzft9=pz3QEz1 z#UtP(Gipm_re+=t>UA&L4%OqO0Os|-tNL5wBzH9RIH zq)=fJA`ATly3n74kY#3|jPFNO7O;NEu|}3qVsDArU?|7N=$;pePu_lLXV4<^{A47N zmK%zi87-#iDu3TmVzXXvwP{+KB_exh4vU65QIOFH%x}OYpUw8v;u031b9$ncY=#7g zB>-f%;w)vh7IKNQ$lx>dg*s>RIa`L$*<3zni}{>cX)~E=w1zMOy~GQ)@|Fn94rDBB zn&qD7m0|K%=95ZoCDX)dqgEhZ%INdJJn+-mmw5=L(d=y&efzRB(zF~_iXlRu9`@mC zmCt*>c-}}vv+KGNDa99{jFp-fB8UY_q+ZX=E0L&7R(@|mqz+pP96UOcQ0ogT#hE>S zEOw*(I|&0Of&BGuEP9EbLt9!d@j{%PcC^Il;%zP^o`RZZ>?qbjmRH*UcOh;$f4Df%1@S-I^_2gwUa773|DWV}5dR;G zI+T~=M}0VNiL!i15Ho&q_)l)U%#9O@cLt#Tw-avA~5eY`wgzTJ?(75V97 z-@M}A4d(IR_r1wVAwzPz1D)cl)4{9FX$eLTyPkd(q6T`DRWfiX8MTy)U4$y#1GRFr zHyuEgik_MiI;9a5EZ*-LIa8R-$Lh?S8hp z>il=DwvPXJlIOnXKiG{p^3EKO-!+uHZi(Nn6kX&b?h#w%xS-7(_U$%X5q3Hq?zHK4 z6L(caC=$0-7iGE^ZWnKUOj#PZ+&-t z|L>DL_w4^Nydv7hlJ|ni*Kg-`a(SH?e{nCHx5$Etm$1a$RO%;tk%azE82M_-`1NMD zu{~k;({>~D9eG=lb~RGQ?MeB!B`t1G-FL5vJrC)*UT4{xtb_qxc-7+vt?~9S3FtJ(t~nS*=w5i*)c!#xOxtm4m+#xaWZY zZ_s4mX^L-MJIuD-jn7|5vkK7Wt3Z4>W2IJ|*POXs6DeF^-Nl&?jeaG#)VMGdQ@_+A zMVtRW!rh>0`Xgsal4l)oH#y$yX)}>|pR1>a>J5Et(J~TI0i49@3XoA3H;Rz7>@cU^Eu*sCg5% zwF6a$PRChz!*7nOb!o@y1G!SaAIlQ8|050??95x=r$GQMRw4nVM82J(4;E$8*58+f z$J|W$X0Ngn1QQyR_o^8hVw%%NLLqd05byd?{i;x3o*(u?kW^#NNlJqkj>c_G01ULn zN+izWsQC^B%NuR7>Ne_Do$b$Hf z+Ft7Yk2|&MdjI!Ho_qR#VvWJLzsazRFL;X+mpcKFb8h$(i=xarCJZ^>dcXQ!9;C^F&;8^7?{aK!Do*z32lUw0Gj(fsPfKMk$|}_p*=~5X z($mlC4JZR#nRcn&ZBwdc@BRGW`VqcG&Pt?DcUB^8x~~%GiWAsHo;p!L5hTV0CHufN-pL#}Y@ygN_{oJf2 mxvcZsK5lchZ62^)7IXWxjlud^KkMf|>iK^>wgAHbwg3QYGY$*@ diff --git a/minimist-1.2.6.tgz b/minimist-1.2.6.tgz new file mode 100644 index 0000000000000000000000000000000000000000..e5aef3fb30db96da4ab7276f72a9b997553f0424 GIT binary patch literal 8363 zcmV;cAXMKUiwFP!00002|Lr|{U)x5u{o9{nLVMSCW6KXPv}Czil8}ve6UYz9c6%Kc zWP6MiWXY9eu+y@i{ho7XM$$;~ivSH>`_~409_KY@&YU^(8kyZo^MY62HeVhbo*aC0 zAD?Qqy1li9=Eya^Bx;JJ?^n!z}dUzDYLCEcYMB^%f08`(DHrDb+Gt=d%QDc z7oO<^yjNmBPdd&2F zw`-XIkM-Q{c*vc=3=m)6vboO+NYloNtg%rfBt350%yM#=r?S|!6%5>Q06h7DXLS)q z2?}-XaSv%w*|s&bBnGVRSr>!A2cWsJ4;&z!B{p<>Rv-UzVrw++*p@#iv7UvXJL3Qn zeM}@Vm5`5$>oK3(HbSs~ZsIkfj>;hEBNS*LMTB_S^}ro6jS~=2f9yGcl2e_Y3nDA! z0OKd#4KM|Z_g&j|uaUK`>+~$-$cGj?g)Fn@Oz`gerle+Ir?zQpv3Y1;pxxp=r!9v{F(i;dHAZt4*vcA_~7J(9UbSI@7}*{ z9za_2@a5YNubPK{XD^`M;n693+XOuYpr=O+5lT?agA)Yy?%??48~C~ZqWQLY`g4iB zZk`?j%-rjvW46!U?;oEwUw(MIf6U&0IDUV0ascRG0ocRl;p=0-a`5ip@YDdTkj4)F z1wYuyoBg+M3Dy1wp#GTXdwKN!=i}zz-<+~HM{i#pK;nx7pltue+XF_ZfT@>n_nYrZ z?A89e{l6o1$Lt8898)n#-A`{0FewN4_Tj&mr_G~7WaH)0;ps8_ECH9tr(xBfnkNS( zwtw6_L4mwJJ_7J4PN)GznukEv;o*URf}&}o@KWjx z5Qcy0pTOvGK05eyY}y5c9j}ToMZHp(cDBnxtb}Vm$Y46+Fw`Mr1HnNpNl;!^2@LM^ z3h?7*p1fSgo-(uFhhf}@VI5ou&IZ%bfIA4AoF6~*R5+prZ^^oF{4bLvCXDdkMnhx< zX4m!iE?l>FuTmy7yDU$LqU6yoYcw9JE!I|lhW)<>+rQBM*Q&McYSRAK8ujh9{eNus zUs?V>*eJe|dCImpt$ct6;EH=47XY>+`yesxvfr4@-4$42E-1gTo7Id}0#0PGQYoQv zTEQww=vjs-yFxI>hQ$XICHo7{9gmhC6Tsk4$n1Z{e_aP#D<52wy$uF1h0n8DO#=1u zQ~3Y$BKDI4p0MOtFl8y(eohrSgOt`R8kcW?$?~F~E?@NXf{{jVBZ_UMx+Cx=_TpnSl)!F8 zSYTX6_}Y-K`q8r_LHluyl4+SblNaQK84}fRY@qTIeU)sI=Z?4+Of@W$&AY?GCnNB? zNVrLn=vp{PCgjiZq?b~{aT!T9@XcW;mwoCB3R|ctR3y%6ybPP^M9$DBXj=-v3`~D; zAL_J(Hibe5J&MF$n$=n>X%-?|T0s(p@1>o;yopz6Vbk->=^xe3rX7T3%-iWgE3cpv zg!T-rcsP{+p5AAbhx8@Y$IMWluSKOK7>&hSYTnq#fHG9It*#XiFDq#sRaj=QN)?=~ zQiBD?J3G*r-%c=pLu|eu?>?IUJ*9Q__FXru+%TV97Ma;nsKvDugw!4`Zg~M@M699oW zs6>fmn-Gx5Cmc!*6^LcX60?})=t>UzE7B%VEzv6_nS1j);VkYlBppqp!X(M4YfI-m z%*g6$Eh&lis!g<*#|5*tTVT9Hs?yr6s{2d+flMJb@n=o<^D&2iHTu|dtRbdG_xPb9Zet{%MqJq zEErU;9d=$WpNmO$rY|dHR$Hze%MOf&NbEn{0cm-M_g#-iOb{iqoiRy;+O%dyAiE(9 z$)x~U)%qOvj4Me{JgOt;n1q3p9RqY zZ4qL|)QY@f0+Y4eqjL4&bmVA;OAm%Bx%9;2R?Am&n2>O0aY5PHi&ZH;G8}3q>BY2$6cvGW-_uIz3Y8d ze+K(+IXynPhuF{J{a-t^ot@PApPj9>|NkJLq1zkV+~5;Dzk#9U$YS8uT^TKwro-y9 z!V{680@3k34`^9%Ls%4{_8AxyFo+_Sp?-~>O9$rMuN~#H$tW^{m%D2ad@C;t=G$y< zZ;#~_Y58KzLnMSo2og{y>IwpHW}r~JcO(k+ll|o{$pR5lfzq_?7sTQoxs(zOxd2w834j3x(u<<`}^-uVhKVdKt+Piqku(u#b=pSG7wCPiS;K{enJSSmc*e$ z5;BYcO_PA|;|O8H7J`@(PB){d1cxuVx^psx}*_?q$gRdCbb$tBvZ*4BmkZ%Rd|sJJ4I9Tv5aQoW*iL-{4P}|17Sz|KwA-nH7K< z{>Zk#?>6$qlE59)jqr=sl~LTSc5xZIr(v7S#dTAh*=zuU72M7zBG^||<9nTPB^fP2 z=Tig_$YTY}u^^}V4F3F;>Kit9E`mY121!q!CMm`WPztJG*_PFQmTF+jf9X2VF5_7P)PMt9p(%|TJo#x ztgM{`5OeCH!32#=)0cjTKH|!eM01xgl04h`$Qp6cPTFbTGB?Xs&=@FGGG!^GOCiTi z%}QwPjia3LbWa=Nbct0e>;r9{X?^rRp0t?-dd|%ro;o*Jhj+~}2>BD9q~pGm512n5 z;mihC`jT)kb^=3e9{0xai8$eJfs(Tm&UcfAalhPdr9vCz+$-+&ZTFgX&6$;2b^C|S z>JOFLX1%tZGLA#Rv@tXTu>HtjfyVLTUO}+%eet_W@!1TcI&9V2={z;&4O{gLdzJR8b7-bNdf6?6}aVbJ{dwR~Ho2D;Q6Um10T=aZ2Rc z$WoNtii{aFko(CeL8#R1DXV2P2bFoESuk{u0J5Y73+S#1<|kWmMgip`CbM-93Q@sZ31z1;q8caO%E`v%U;^VbA62;_WG!k0`@~e9rQD zbtEYR@67^*YyDDgFH$+12QZtIa|$`7sFh%*qTIiH0%;0D$8#?^Mm|Wmdg0Jge-f7Z z6Ig1AF*Men(r#T^!6jv%p4KyDpKc7L_|$IYd=~te_$5WHPwlw2W!8WRd0;tXo+jdE zIkGCP{qp~r<E;}|Rg>-I(O%5bR9e_nZKhA%^&;H7ybm^0<&o|3 z^N+o!g^$L^-uK1l1x`PU&%gTuVf>-&hr~Rs(L6BzTiN!HKUG%YN$&&?#oY|MHG@Xo zghe?EEm<1*&3vO1jg&$rV6a-%jN$Kz6b7^bR(Uep9;moY%aUydV`QQHd%0XhGa6Y@ zQ6N)`=Z~6qG&ClMjgX{yDv=tU=CpQ75ZQxgB#M=&Tw*9)mEgtLS07sEDdgNa6)9aZ zAQjFT6LF>|QJg8w1g&?TiD_LXhdNjJGZ9RE62_be#dDhZ?6O!|3RrQT=Ry-<5r1|^ z2c~CF7Z7WhqmeD5NXA(y9;zfCwU{C440Ciddj=X01FJCY5;0(EnStrg3aAz5hQpG< zx2*VZrnS0lFm6FWZXW)d)Ko-^T&otvtq^%_eujudDi~LXUyCqFAqGwbty3JN*Nfud zgcf6wtPo;GS6Ug5>M65uwcm9gX177LtmH9u}rB(mdlr$dENBPdp4tP>;M zs17Zas@PlSQ!M%xF4v;W!>VUz6!SYf%OfT04H#e3{=dtsGk@TE!GqraR&DI0?*FN8 zZLaVCc?|piNL^U@a_=h7<{dVv6|)zZV`pskYV}P#+wpAHO)_}A2Fk?G?!?b}z*uat zyQ9b4yB?SUzXE$*BJw=9;|BhG3e8=Xk5vPL^Ril!>aVi@+pcr*@aO-wYMbfvf18`@ z{{INhf1t+DhLTxF&E}tz!ihSa=ZYVqgS2p7sJ5TP4k8muwX(Ou;kxojTzfdNCKH<{ zu|g)GQkk<6cg+#FLY(=dRdMg#4PyT5N{9!pPnW3KZr8Nc52VKn#O;rbBtcjRDT>#i zB{aOEv9XXqe^t>SioFc-_U?nWl=S}Fw=ZkAq{q!(hjT4^ z=Z7Cf-=E{aX_pluefnjENSl6FA zN`79tAT-ZvGd+HKKm+ z*YS9gDqOzgGzq8O-Kkt5I1#ihsn!GX<6t}H=QLDRIw+fE+%to}Ils(@<+Mi7YIjo) z0?>Yg%+w$=6;B;!NM?Y^piL(Vx|efe_Pg zA^gs{uD;Nu>+`%p0 zT9U1^^bIBI(UI_WUdduf@jK_%;ug~%E@2B^F3Gsb>Pwz0nenXEAN5*EtVJAtZCeia zasLd6+8oZBBFZN5H8n#MxAE_f&c8R9-2IslkY5T9ESIR;%hDRpbQd=Gw!Lu|pSENj z(;w`roPX`V{cy0i0d%Sqq<2I8z>Bf*dhiP%9o!^VF8g~M-%%w|CPDKC7Wfj1vxF$O z8_tnjT5NfAv@qP7b+x47>({*avGR!wwJ0Y|a9ri>N&Bi#% zh(FE}&HhYpBqbaeol5j?g1|E(@Jze2TkQxdvATYlw-Sm7?`A>?RvDJkf(T3CX?V(zkV1t?h%E3D=mKvJLdwiQ86BaC?ceZ% z#3M!udrNwQLHq$B4WBw7V`k8z^1S3ta$0U6Yi6{VrmN9A3o~17l9ndEmLPiQ3>Nc# z)=M~kDEVx*Cx(!)1U;iC8p&ozfLH=Rb}LR(W@{mrD2og}15c`RHlNdF_?*t=bGn$% zso^hYv}_oGUf}-gSyKeE0~r&WW~J}C6>$D4!l~3|GEH^KT^#a012i?sR*dOXmr0vyfZ{T{A$}kl{@s zC6Pj_#`^Ly<=`|7{;@h8+HI3>M3pGZJv-7Xb--W414Sc!@mPDUg*bLyZ888<@3PI< zdlDvgj@W`SqGQR2HzZ}a)~wI;fG(DNtRm5{5iLlwoQaKCc(-)sf}c9L1J3I$q;ER$tjJ6YoMakgya~6$y2mtwLZIv4BOdhi#XeDBV z+)^T9|H7&w$rePdT3uQYBDb(rT+AhmX{*R*G0*bmw-tFdJKapKfq)gch8}6;m*Jam z-YxI3vp%Z`AXY89<;R%L?(5S9+)cln{*d@p7&()702(tnVj4>!+`e<_zTl_i=@bCP zjmA?v_se;&RB$6P_rRIzOquUYFIhS3jkgXA_b}kWfFFI654_c2B;H&}h=ga^ONON& zLkVU}6TB#No$~6WB@1uT3k^UxOD>ArD%~%V-GBSqwdVib$KkKV{$F(`%l}*7|Ncn! z|8mdj%5zuq)`4lySAG72Q1S$rd=4sc)@zBCUaXJPK8iSN!HSxSP}J3zO_+=|w&y*f zL_FPUS-X=u(=zWsi;&&wCtCVqIZDocGa@u{RV}NWMgT1zuCSm^%gqT~-RLTZ@LROL z=g;Gxo~~aRe@QHgu1<%jHm4j${0J4_T zaYo0LT26fY=1}YZ@^Y-Zo&nD9|64najQ#)B_5T0I z(Eru;x^NoZVFR>7FV5$~bjmcuDvyisa z>%DOTkm{^0pvgnVvo_B?x}H4Xw(aU&8HLuFF4vo*>OHx|*ZGp}9Bxf|ssIm^c}i3yjHFL z59{J%2jC#al|wul(04(A*Jv{EHTADuJIWoi7rno(%ql>euL9BI>?^hEyyl$QHIc#v z)?L2&uF)SmT#!G@$4vcFlN8PWzaCid7n1lx&j0J__aEy!n`{67G5G(H#$eocZ1-4) zvnX-78vtgU8~8|3^sHk7kh6|L-tGKf{)K+;I(Lm@!TnE-?Tq{X*7tur%m+K<2A(q9 z*kv0-%dv)*A8g=|vH=6X5B(N1YDV4I7O6ch77AoecmP;T>_ouN7e$ArMP=06!V19E zD?Wlzi9213`x|Nt>;}0S0ao~>W>k&ph8Wm3z~o@!f2ziomPjQ3vS~CR6%xts+7QIW zprW0^f>42sS>=00i9!i#j|Bw!SeXzeCfVTVL_qtNO_Xn>Aa*?W+6TcwrrM{xVe!hg zVb~^-qDJeDe!tR){Q~RScPEu(sqVmYhrCj&rjn8+eY0HR<8ug~6?wr%yy zsjAOGe~D52`!_|N;qas&)Z1Y35+T=kafag)ns?39jj!#_Yi0lOeyt%lhNgGf1CR6p z?SG@XnY#a>Uf*8t|9Ozlw@h`nTrS&|=W?e5nBIwp!f~R9OFS22m?()yw5f95kLrnD zNS8vn;{fJiHod;rH^JWb$2Lr>yRK&jaHiuQFtuC^aKbiOdCIm}*=Ydy zPM3)jBztreL+)z_U;@s920qZWGWAhIPyq{8BIq!(bsM)70@MV{+9W?JNB$# zn#;ZS_?6|3eJ00upAF0&GgJK4qO4#HpM#v z4#S%iSl9Bp<014Z2Uh5s<3kmk(>+c z7?A=BNXk75Wl}P@o@_iqja4!MSkl;mii6g3(m0*GGIS9cB6mG0YjGwS&s^)Yfh1iJ z@3lFFZ!od~>3&X@3;~C1B4qiaG!I1vOj*r0@Bxu?v;dNISpvRkD=^f4@ir1Bnr7C_ zw=TfiLo=yWoB}s443KLd59hISIwf~rBC(#A``BVKaSyE5c`@XSB3{IoqqKHtjz-9r zWG@tw;!W}EM-1oEB1IEn`sz{J5TA_G&c&Dprb65l&GcjKE%y*0II>@IFO}?Yq0)$s zhd2FCg8`u+1*D-au>nE>7fYK zkY3aHM$p2WP-GkvN53(Rdwp?3QeI$?r&h^gGIr<&To?f2Qn5Ul8iVXW$UV08y*fGp?Ay;N4#1migz(hfh%;o=Gtj*y{CSC(8=2Nt&6enccg9_tl1YEWfVGLB%zN{Bpdn|lB#0m(gMp6yV>gj63|~U5ReOn zk03)|&*gqXDqGHI*e<9+4t{*{4HrY|J$F~QFOa6{MDCw-6y$s*mxI~LI=uE@6aO;; z&%CmHV>-0&9LJ*jKf%jN-~Ybe|Mwst+jK6*pa8oxqd5a#R{q61k;-hNYW%RFzSXMH z*Sh>_xfm%EBh;C+DWYoJ$doVe=imNQGq#NFwN+Vv)}Qrf{rL(${}1+dF;4)-008 - 1.2.6-1 +- Update minimist to 1.2.6 for fix CVE-2021-44906 + * Wed Oct 13 2021 houyingchao - 1.2.0-2 - Fix CVE-2020-7598