[Git][security-tracker-team/security-tracker][master] Track embedded copy of libsass in node-node-sass

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d85b123c by Salvatore Bonaccorso at 2020-06-26T20:57:30+02:00
Track embedded copy of libsass in node-node-sass

Since 4.13.1-2 upload of node-node-sass the embedded copy of libsass is
used instead of the system library:

  * Change --libsass_ext=auto to --libsass_ext=no temporarily
    to embed own copy of libsass 3.5.4 as a last resort to solve
    a FTBFS conundrum where all other libsass bindings and Debian
    have moved on to libsass 3.6.3, but unfortunately the node-sass
    upstream authors showed no interest in catching up any time soon,
    see https://github.com/sass/node-sass/issues/2685
    .
    Upstream author @xzyfer promises that libsass 3.6 support "will land
    in 5.0", so please remember to revert this commit when that happens.

Thanks: Jonas Smedegaard

- - - - -


1 changed file:

- data/embedded-code-copies


Changes:

=====================================
data/embedded-code-copies
=====================================
@@ -3537,3 +3537,6 @@ libdvdread
 
 libdvdnav
 	- kodi <unfixed> (modified-embed)
+
+libsass
+	- node-node-sass <unfixed> (embed; bug #963764)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d85b123cecfe16cc616dee4c198ef2ab797b1da2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d85b123cecfe16cc616dee4c198ef2ab797b1da2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200626/357592d5/attachment.html>