Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1035948 > unrolled thread
| Started by | Jonas Smedegaard <dr@jones.dk> |
|---|---|
| First post | 2020-12-05 19:40 +0100 |
| Last post | 2020-12-05 21:20 +0100 |
| Articles | 3 — 3 participants |
Back to article view | Back to linux.debian.bugs.dist
Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Jonas Smedegaard <dr@jones.dk> - 2020-12-05 19:40 +0100
Bug#976607: [Pkg-javascript-devel] Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Xavier <yadd@debian.org> - 2020-12-05 20:50 +0100
Bug#976607: [Pkg-javascript-devel] Bug#976607: Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Jonas Smedegaard <jonas@jones.dk> - 2020-12-05 21:20 +0100
| From | Jonas Smedegaard <dr@jones.dk> |
|---|---|
| Date | 2020-12-05 19:40 +0100 |
| Subject | Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 |
| Message-ID | <BiKDo-7NU-7@gated-at.bofh.it> |
Package: node-cheerio Version: 0.22.0-2 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, Thanks for packaging Cheerio. Currently packaged release is the latest upstream stable release, but was released 4 years ago . 1.0rc1 was released 3.5 years ago and 1.0rc3 was released 1.5 years ago. Please consider updating to 1.0rc3 (in preparation for 1.0rc4 which might soon be released, judging from issue tracker chatter). Concretely, 1.0rc3 is needed for matrix-hydrogen that I am preparing, but I notice that it is also preferred for node-dom-serializer (even for the outdated 0.2.2 that we carry in Debian), and some issue tracker chatter seems to indicate that there are also security bugs fixed along the way of those 4 years of progress. Raising severity from wishlist to normal due to possible security risk. - Jonas -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAl/Lz0wACgkQLHwxRsGg ASFYcA//eyAftLzxjjBZN8iROGB1nm5owqFd8xiCF+hyxUw3EHeo1zTeZHQWr1us dG31vykdtNp74w3nf7Z+HTrTiSLuYNrQIwCol57e61e3nfe11tVZb4pP/8auZWDK cwOSVWKUV8eWDCpMzkNvdeWmFqX3wtcEFVmd9UT3TCXUXG1+c3U8iTl2uLN1y3c/ sWgS34n7sdh/zYwFm5MR4d5iq+DrgpOlrquA3pPI3lf/lSC5BOH8KXSDyVPMCDD9 pc3CiXIqQlUu63xFPDJrhnqs5t7nAvTIv9YQXEygjU5gjKn1IhqA7+j8iZNtPOPW QMaWcOLVUNwq0wx2YenaqIgLMSv9OcYxHLFI5pTTPZGWqAOj8ZsJPjn35+pAhVWt 761V2nkFJZ/RocLzhEdV4ppiVOjSG4TBNdaXpq0/6tOtB7cu9TRsNKd/uT/0jXHc xlXEVyU5RjjdDRufOl9RYs1dwu6ZhTTD4+DzfY9N3/l/QfpKtxelnp57G2CYNS30 iRjQL4NqebJAVFs2DB8lIaiP9eY7y6Xwdmdn8T771ACwW0seZLKURHJg/BeUmfgc uAvqARVsA8VSKu6sjR2gaCbvYTn2/7x1AF+Q/udrXQ97viFTyRnHKGoXCSSvcmXN PcnWXwVYrCxvaIg4P1CBDe/MIU+4WP+g5tkD92sKsHkUCLlY4zQ= =22Bv -----END PGP SIGNATURE-----
[toc] | [next] | [standalone]
| From | Xavier <yadd@debian.org> |
|---|---|
| Date | 2020-12-05 20:50 +0100 |
| Subject | Bug#976607: [Pkg-javascript-devel] Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 |
| Message-ID | <BiLJ8-8sT-9@gated-at.bofh.it> |
| In reply to | #1035948 |
Control: tags -1 + pending Le 05/12/2020 à 19:19, Jonas Smedegaard a écrit : > Package: node-cheerio > Version: 0.22.0-2 > Severity: normal > > Hi, > > Thanks for packaging Cheerio. > > Currently packaged release is the latest upstream stable release, > but was released 4 years ago . 1.0rc1 was released 3.5 years ago > and 1.0rc3 was released 1.5 years ago. > > Please consider updating to 1.0rc3 (in preparation for 1.0rc4 > which might soon be released, judging from issue tracker chatter). > > Concretely, 1.0rc3 is needed for matrix-hydrogen that I am preparing, > but I notice that it is also preferred for node-dom-serializer > (even for the outdated 0.2.2 that we carry in Debian), > and some issue tracker chatter seems to indicate that there are also > security bugs fixed along the way of those 4 years of progress. > > Raising severity from wishlist to normal due to possible security risk. > > - Jonas You're absolutely right, built and pushed ;-)
[toc] | [prev] | [next] | [standalone]
| From | Jonas Smedegaard <jonas@jones.dk> |
|---|---|
| Date | 2020-12-05 21:20 +0100 |
| Subject | Bug#976607: [Pkg-javascript-devel] Bug#976607: Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 |
| Message-ID | <BiMcc-FA-39@gated-at.bofh.it> |
| In reply to | #1035959 |
[Multipart message — attachments visible in raw view] — view raw
Quoting Xavier (2020-12-05 20:42:23) > Control: tags -1 + pending > > Le 05/12/2020 à 19:19, Jonas Smedegaard a écrit : > > Please consider updating to 1.0rc3 (in preparation for 1.0rc4 which > > might soon be released, judging from issue tracker chatter). [...] > You're absolutely right, built and pushed ;-) You are fast. Great! - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.bugs.dist
csiph-web