[Pkg-javascript-devel] Bug#863481: Bug#863481: [node-concat-stream] Uninitialized Memory Exposure

[Ross Gammon]

Hi Bastien,

On 05/27/2017 09:47 PM, roucaries bastien wrote:
> I can do it but I do not know that is the best:
> - let 1.6 go to unstable
> - patch old version
>
> Could you ask release team.
>
> The debdiff between the two version is so small that I have doubt
>

I had almost finished the email to the release team, when I did some
final checks. And whilst I agree the unrelated changes upstream are very
small, I unfortunately enabled the testsuite in 1.6 (in experimental)
now that node-tape is available in unstable. As node-tape is not
available in testing (stretch), I would have to disable the tests when
moving to unstable.

All in all, I think it will be easier to create a stretch branch in git
& add a patch which will also make the unblocking process easier.

I will work on that today. But if I run out of time, please feel free to
take it forward.

Regards,

Ross