Your message dated Mon, 24 Jul 2017 18:12:32 +0530
with message-id <54f1fc41-5edf-0ce4-e025-ddf14c158...@onenetbeyond.org>
and subject line Re: Get out of Debian for better alternatives?
has caused the Debian Bug report #868298,
regarding Get out of Debian for better alternatives?
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
868298: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868298
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: node-evp-bytestokey
Version: 1.0.0-3
Severity: grave
Hi,
the upstream homepage says to avoid using it, so perhaps it should get
out of Debian and the other packages depending on it should be ported to
something actually working?
Snark on #debian-js
--- End Message ---
--- Begin Message ---
On Fri, 14 Jul 2017 12:21:36 +0200 Julien Puydt
<julien.pu...@laposte.net> wrote:> the upstream homepage says to avoid
using it, so perhaps it should get
> out of Debian and the other packages depending on it should be ported to
> something actually working?
Upstream just responded with this answer,
"this module is just a port of node.js's crypto library into the browser
and EVP_BytesToKey in all it's non secure glory is what they use for
deriving a key and and an IV from a plaintext password."
Hence closing this bug. It seems as long as nodejs continue to be
insecure, we'll need to provide this library, watching out for software
which actually use this functionality.
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
