Re: Please ignore 977311 for Bullseye
Le 21/02/2021 à 08:08, Paul Gevers a écrit :
> Hi Yadd,
>
> On 20-02-2021 08:43, Yadd wrote:
>> node-uglifyjs-webpack-plugin is RC-Buggy because upstream is dead since
>> July 2019 (#977311). The main problem to remove it is that it requires
>> to update webpack which has many reverse dependencies. I tried it in
>> experimental branch but it is not simple and requires many patches in
>> many packages.
>
> We came to the same conclusion some time ago and it's on our can-defer
> list already (which is less definite than ignore, and means we'll go
> over it in due time).
>
> https://udd.debian.org/dev/bugs.cgi?merged=ign&rc=1&format=html&release=bullseye_and_sid&done=ign&deferred=ign&rtbullseye-is-blocker=ign&rtbullseye-can-defer=only&keypackages=only&cpopcon=1&chints=1&ckeypackage=1&ctags=1&cdeferred=1&caffected=1&cmissingbuilds=1&clastupload=1&crttags=1&cautormtime=1&cwhykey=1&cbritney=1&sortby=last_modified&sorto=asc&#results
>
>> I think JS Team is able to maintain node-uglifyjs-webpack-plugin is case
>> of security problem. That's why I think we could ignore #977311 and
>> #982766 for Bullseye.
>
> Thanks for contacting us.
Perfect, thank you!
Reply to: