[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#927866: marked as done (ITP: node-re2 -- Node.js bindings for RE2, a fast and safe regular expression engine)

Your message dated Fri, 29 Nov 2019 11:00:12 +0000
with message-id <E1iae0S-0004sp-Ko@fasolo.debian.org>
and subject line Bug#927866: fixed in node-re2 1.10.0-1
has caused the Debian Bug report #927866,
regarding ITP: node-re2 -- Node.js bindings for RE2, a fast and safe regular expression engine
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
927866: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927866
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
Owner: Jérémy Lal <kapouer@melix.org>

* Package name    : node-re2
  Version         : 1.8.4
  Upstream Author : Eugene Lazutkin <eugene.lazutkin@gmail.com> (http://lazutkin.com/)
* URL             : http://github.com/uhop/node-re2
* License         : BSD-3-Clause
  Programming Lang: JavaScript
  Description     : Node.js bindings for RE2, a fast and safe regular expression engine

This package provides bindings to a safer alternative to the native
JavaScript regular expression engine, without supporting features
that are targets for Denial-Of-Service attacks, like backreferences
and lookahead assertions.

It is particularly of interest because Regular Expression Denial of Service
plagues v8, the JavaScript engine at the core of Node.js and Chromium:

https://snyk.io/vuln/SNYK-UPSTREAM-NODE-72328
https://bugs.chromium.org/p/v8/issues/detail?id=287
https://github.com/nodejs/node/issues/9337

--- End Message ---
--- Begin Message --- 
Source: node-re2
Source-Version: 1.10.0-1

We believe that the bug you reported is fixed in the latest version of
node-re2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 927866@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jérémy Lal <kapouer@melix.org> (supplier of updated node-re2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 10 Jul 2019 19:30:46 +0200
Source: node-re2
Binary: node-re2 node-re2-dbgsym
Architecture: source amd64
Version: 1.10.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Jérémy Lal <kapouer@melix.org>
Description:
 node-re2   - Node.js bindings for RE2, a fast and safe regular expression engi
Closes: 927866
Changes:
 node-re2 (1.10.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #927866)
Checksums-Sha1:
 424523fb33826e7eb2c130b95db19165451497a3 2841 node-re2_1.10.0-1.dsc
 a3a9e7696de741ad890523fed61e58d17b4c5542 10404 node-re2_1.10.0.orig-heya-ice.tar.gz
 142a49af08cd9cc42da4d5b05d61372731457cfb 23975 node-re2_1.10.0.orig-heya-unify.tar.gz
 178de012ea5215cd1b9e9c5fd6bf84cc3dd234e7 10453 node-re2_1.10.0.orig-heya-unit.tar.gz
 3c466545bc977d80db2f605e374b1841dbb9ba10 25840 node-re2_1.10.0.orig.tar.gz
 97f0919608fd763c533d6b14221a5aadabc392a8 3296 node-re2_1.10.0-1.debian.tar.xz
 8020ac6721fbe8e5d03c38880f25f810b7c2d6f6 1071640 node-re2-dbgsym_1.10.0-1_amd64.deb
 5382967ea9a5441270967b169d6e72e1a0eccd67 9569 node-re2_1.10.0-1_amd64.buildinfo
 04b0d78fc697ead96a0b97a1bfe731fa860af680 49956 node-re2_1.10.0-1_amd64.deb
Checksums-Sha256:
 3fa86dcaa8e54c8a791be936ec9fe939f6224f464d4518b93026b7514a89c316 2841 node-re2_1.10.0-1.dsc
 bdf786e8c2b9440559ac1c815e083a092f30a28593a3b03f2c8b226e90a60f0e 10404 node-re2_1.10.0.orig-heya-ice.tar.gz
 b5f1b367ff7a69cce6c7a96fa23a7d44dfd301d286be52af5a7e76e6c7a2b6a6 23975 node-re2_1.10.0.orig-heya-unify.tar.gz
 ca79367930fa60916e6289710661ad8497f4fb36727fc22df94c96cdf792cc7e 10453 node-re2_1.10.0.orig-heya-unit.tar.gz
 87b0d09a8ea6c746d015374311e7090095723179eff637e05b38ead52fb1ca15 25840 node-re2_1.10.0.orig.tar.gz
 47243885454885021e4d8d045585c7f4c139bdd58096e40b1c1248bc9d3bf281 3296 node-re2_1.10.0-1.debian.tar.xz
 5a25937a00d456d7ef4e776b157d1e733cdc8d15a2d6f99cebc3ab86f43ce836 1071640 node-re2-dbgsym_1.10.0-1_amd64.deb
 27ad8c13d287f6c123c9d3ff2e39305cfe881452072aa4ab7c45ce012aa02124 9569 node-re2_1.10.0-1_amd64.buildinfo
 5b9ad8aac141345c571bef330e25afeb6a46650e2e4ffc082443eaade7a78cb2 49956 node-re2_1.10.0-1_amd64.deb
Files:
 1b51ed5958cced0a2331281477564052 2841 javascript optional node-re2_1.10.0-1.dsc
 ea39583dfea8562ce8edcda87d559f9e 10404 javascript optional node-re2_1.10.0.orig-heya-ice.tar.gz
 e9bb0135e308a78c040fd44cf763ec94 23975 javascript optional node-re2_1.10.0.orig-heya-unify.tar.gz
 6cf9eccf2d18f05fc8d314b060bac25f 10453 javascript optional node-re2_1.10.0.orig-heya-unit.tar.gz
 5ba9943cc05fcba0b4262f5370cf72a3 25840 javascript optional node-re2_1.10.0.orig.tar.gz
 cdf92d711b774918b6b148a7b904782f 3296 javascript optional node-re2_1.10.0-1.debian.tar.xz
 ac44ec4e3643d52c1e45b2be232dc8a6 1071640 debug optional node-re2-dbgsym_1.10.0-1_amd64.deb
 57ee4c655b383df427b93d0ce5fa1841 9569 javascript optional node-re2_1.10.0-1_amd64.buildinfo
 0c13cc2734bccd3e1a88335cd15a50c3 49956 javascript optional node-re2_1.10.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEA8Tnq7iA9SQwbkgVZhHAXt0583QFAl0mIbMSHGthcG91ZXJA
bWVsaXgub3JnAAoJEGYRwF7dOfN0azsP/34QugRnzpw8+bmXGJlR+8zuTf0fD7BF
mu422igpPVs4QzvW/x9cvPUMv0CWTJNPmKxFckxMZ94XFRz/X/mS6oEHVYgUMsZo
NYoMpVffZhduwi8KLUQEjciH3oumbx35CIzW9/no1A1EDeEe9Vn0mIftM9UKa53W
MGKKLMsW6rPzETIstKCKMVj4OcELCmoDNjVXJmdrwz0o+u9tszDn1irz+4YSc1Mj
FPjoCqq9T6akY2g0LFiCcEgoP4ixm+WPtBxmBjAoLZpWzDiMlXh4UpZ00svPKu8j
gfXkQO1sZTAarkOSEPOF1zbYPpRyIZ+V32U54LkHtSrPLHgQWBLY2rjm8CzL5Z0r
LVj5OY4atysl87iL3DvvIbJ7SBzG6ciewCY7RQwmSv9FgLKzrmv3izufabroHeBf
pDzV4JSzeC9sNxRjaRkwC+lXeDQlHfluQNEqV0GoZztb8V8QBMAWy9bA1995ytA0
78efJl4z7ety4GJgbNaSU/fBBMXs/fxh6fOcomAuH9we38at22JSEJil+8eSffs5
C9ttpXzYyX7AfPXCe9jjGliwUi2deBIChyVrwurFi+1/7h/HN4rqKUj6a0Uklhxo
F2817UHKE847kHvJEkuMWQBOf/C1FLCi2rkqD0YUwk9i49qUArdcYBiggAcTwypH
DZ8LMUtVCBZa
=wWFd
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: