Your message dated Mon, 24 Jul 2017 18:12:32 +0530 with message-id <54f1fc41-5edf-0ce4-e025-ddf14c158...@onenetbeyond.org> and subject line Re: Get out of Debian for better alternatives? has caused the Debian Bug report #868298, regarding Get out of Debian for better alternatives? to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 868298: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868298 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: node-evp-bytestokey Version: 1.0.0-3 Severity: grave Hi, the upstream homepage says to avoid using it, so perhaps it should get out of Debian and the other packages depending on it should be ported to something actually working? Snark on #debian-js
--- End Message ---
--- Begin Message ---On Fri, 14 Jul 2017 12:21:36 +0200 Julien Puydt <julien.pu...@laposte.net> wrote:> the upstream homepage says to avoid using it, so perhaps it should get > out of Debian and the other packages depending on it should be ported to > something actually working? Upstream just responded with this answer, "this module is just a port of node.js's crypto library into the browser and EVP_BytesToKey in all it's non secure glory is what they use for deriving a key and and an IV from a plaintext password." Hence closing this bug. It seems as long as nodejs continue to be insecure, we'll need to provide this library, watching out for software which actually use this functionality.signature.asc
Description: OpenPGP digital signature
--- End Message ---
-- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel