578586 – net-libs/nodejs-4.4.0: please mark stable

Bug 578586 - net-libs/nodejs-4.4.0: please mark stable

Summary: net-libs/nodejs-4.4.0: please mark stable

Status:	RESOLVED DUPLICATE of bug 568900

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Keywording and Stabilization (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Johan Bergström

URL:
Whiteboard:
Keywords:	STABLEREQ

Depends on:	CVE-2015-8027
Blocks:
	Show dependency tree

Reported:	2016-03-30 10:17 UTC by Marek Szuba
Modified:	2016-05-30 15:03 UTC (History)
CC List:	3 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marek Szuba archtester

2016-03-30 10:17:50 UTC

4.4.0 is the current LTS release of Node.js so IMHO it would make sense to stabilise it in Gentoo... Moreover, the current stable version of net-libs/nodejs (0.12.6) appears to contain a Denial of Service vulnerability - please see bug #568900.

In order to make net-libs/nodejs-4.4.0 stable it would also be necessary to stabilise dev-libs/libuv-1.8.0 and either net-libs/http-parser-2.6.1 or net-libs/http-parser-2.6.2.

Comment 1 Pacho Ramos gentoo-dev

2016-05-30 15:03:21 UTC

this is being done entirely at bug 568900

*** This bug has been marked as a duplicate of bug 568900 ***