[Pkg-javascript-devel] Bug#773671: Unfixed old CVEs should really be RC

Adrian Bunk bunk at debian.org
Tue Feb 28 12:28:28 UTC 2017


Control: severity -1 serious

Dozens of unfixed CVEs, the oldest unfixed CVEs will be more than
4 years old when stretch gets released.

In the current state the package is really too buggy for shipping
in a new stable release.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed



More information about the Pkg-javascript-devel mailing list