[Pkg-javascript-devel] Bug#970173: Bug#970173: node-fetch: CVE-2020-15168

2020-09-13 Thread Salvatore Bonaccorso
Hi Xavier, On Sun, Sep 13, 2020 at 05:29:56PM +0200, Xavier wrote: > Le 12/09/2020 à 15:33, Salvatore Bonaccorso a écrit : > > Source: node-fetch > > Version: 1.7.3-2 > > Severity: important > > Tags: security upstream > > X-Debbugs-Cc: car...@debian.org, Debian Security Team > > > > Control: fo

[Pkg-javascript-devel] Processed: forwarded

2020-09-13 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 958691 https://github.com/mast/telegram-bot-api/issues/77 Bug #958691 [node-telegram-bot-api] node-telegram-bot-api: Remove dependency to node-request Set Bug forwarded-to-address to 'https://github.com/mast/telegram-bot-api/issues/77'

[Pkg-javascript-devel] Processed: Bug#970243 marked as pending in node-normalize-path

2020-09-13 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #970243 [node-normalize-path] node-normalize-path: Typo in package description Added tag(s) pending. -- 970243: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970243 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --

[Pkg-javascript-devel] Bug#970243: node-normalize-path: Typo in package description

2020-09-13 Thread Davide Prina
Package: node-normalize-path Version: 2.0.1-1, 2.0.1-2, 3.0.0-1, 3.0.0-2 Severity: minor Dear Maintainer, in the package description in DDTSS[¹] I see: Also condenses repeat slashes to a single slash and removes and trailing slashes. I think it must be: Also condenses repeat slashes to a sing

[Pkg-javascript-devel] Bug#970173: Bug#970173: node-fetch: CVE-2020-15168

2020-09-13 Thread Xavier
Le 12/09/2020 à 15:33, Salvatore Bonaccorso a écrit : > Source: node-fetch > Version: 1.7.3-2 > Severity: important > Tags: security upstream > X-Debbugs-Cc: car...@debian.org, Debian Security Team > > Control: found -1 1.7.3-1 > > Hi, > > The following vulnerability was published for node-fetc

[Pkg-javascript-devel] Help with ruby-uglifier patch to replace uglify-harmony with terser

2020-09-13 Thread Pirate Praveen
Hi, I have managed to replace uglify-harmony.js (embedded copy, generated file, not packaged in debian and unmaintained upstream) with terser in ruby-uglifier. Here is the initial rough patch. https://salsa.debian.org/ruby-team/ruby-uglifier/-/blob/master/debian/patches/005-use-terser.patch