Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1035959

Bug#976607: [Pkg-javascript-devel] Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3

Show all headers | View raw

Control: tags -1 + pending

Le 05/12/2020 à 19:19, Jonas Smedegaard a écrit :
> Package: node-cheerio
> Version: 0.22.0-2
> Severity: normal
>
> Hi,
> 
> Thanks for packaging Cheerio.
> 
> Currently packaged release is the latest upstream stable release,
> but was released 4 years ago . 1.0rc1 was released 3.5 years ago
> and 1.0rc3 was released 1.5 years ago.
> 
> Please consider updating to 1.0rc3 (in preparation for 1.0rc4
> which might soon be released, judging from issue tracker chatter).
> 
> Concretely, 1.0rc3 is needed for matrix-hydrogen that I am preparing,
> but I notice that it is also preferred for node-dom-serializer
> (even for the outdated 0.2.2 that we carry in Debian),
> and some issue tracker chatter seems to indicate that there are also
> security bugs fixed along the way of those 4 years of progress.
> 
> Raising severity from wishlist to normal due to possible security risk.
> 
>  - Jonas

You're absolutely right, built and pushed ;-)

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Jonas Smedegaard <dr@jones.dk> - 2020-12-05 19:40 +0100
  Bug#976607: [Pkg-javascript-devel] Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Xavier <yadd@debian.org> - 2020-12-05 20:50 +0100
    Bug#976607: [Pkg-javascript-devel] Bug#976607: Bug#976607: node-cheerio: please package (much!) newer release 1.0rc3 Jonas Smedegaard <jonas@jones.dk> - 2020-12-05 21:20 +0100

csiph-web