Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor

To: 1021364-submitter@bugs.debian.org
Subject: Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor
From: Bastian Germann <bage@debian.org>
Date: Fri, 7 Oct 2022 11:19:38 +0200
Message-id: <[🔎] 40710850-7cbe-7086-8ee0-6e24ac1cd217@debian.org>
Reply-to: Bastian Germann <bage@debian.org>, 1021364-quiet@bugs.debian.org
In-reply-to: <[🔎] CANxOp7BDkfMYt6JMn-E09FC0SpeQz1xwbi4Ka3Ec+Gz1y-Ea1A@mail.gmail.com>
References: <[🔎] CANxOp7BDkfMYt6JMn-E09FC0SpeQz1xwbi4Ka3Ec+Gz1y-Ea1A@mail.gmail.com> <[🔎] CANxOp7BDkfMYt6JMn-E09FC0SpeQz1xwbi4Ka3Ec+Gz1y-Ea1A@mail.gmail.com> <[🔎] CANxOp7BDkfMYt6JMn-E09FC0SpeQz1xwbi4Ka3Ec+Gz1y-Ea1A@mail.gmail.com>

CVE-2022-39209 is not fixed. Please replace the vendored cmark-gfm library with the Debian package and help itsmaintainer to import the new upstream version.

Also, the homepage should be relaced with https://kde.github.io/ghostwriter and the watch file should scan GitHub's tagspage instead of releases (does not work anymore).


I do not see the corresponding source for a lot of minified JavaScript files in 3rdparty/MathJax/bin.
You try to override the lintian msg in debian/source/lintian-overrides but do not give a reason for it.

Reply to:

Follow-Ups:
- Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor
  - From: Sebastien CHAVAUX <seb95.scou@gmail.com>

References:
- Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor
  - From: Sebastien Chavaux <seb95.scou@gmail.com>

Prev by Date: Re: autopkgtest : s390x is considered regression but never built
Next by Date: Bug#1021353: RFS: zvbi/0.2.37-1 -- Vertical Blanking Interval (VBI) utilities
Previous by thread: Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor
Next by thread: Bug#1021364: RFS: ghostwriter/2.2.0-1 [RC] -- Distraction-free, themeable Markdown editor
Index(es):
- Date
- Thread