Explicitly remove the http_parser from its bundled dependencies, forcing use of the http-parser shared library from CentOS. This should fix issues with installing Mocha and accepting POST data due to updates that fixed CVE-2019-15605.
Upgrade NPM to 6.4.14.
Remove debug compilation flags and update CircleCI images.
The updated RPM has been uploaded to our release dependency repository, and Docker images have been updated to include it.
Creates a new release of NodeJS:
http_parser
from its bundled dependencies, forcing use of thehttp-parser
shared library from CentOS. This should fix issues with installing Mocha and accepting POST data due to updates that fixed CVE-2019-15605.The updated RPM has been uploaded to our release dependency repository, and Docker images have been updated to include it.