debian packaging [meta]
rzr opened this issue · comments
Hi,
As debian maintainer of iotjs package,
Let me forward a bug that affect iotjs-1.0 and current master:
https://bugs.debian.org/957364
I am still committed to fix issues to keep this package in debian,
Please review linked PR:
https://github.com/jerryscript-project/iotjs/pulls/rzr
I need to be quick if not it will be removed in august.
Kind Regards
FYI 1.0 has been updated
https://tracker.debian.org/pkg/iotjs
Feel free to close this issue or keep it open ,
If there is no official release planned
I'd like to release a "final" snapshot version based on master.
FYI: The status of the iotjs source package
in Debian's testing distribution has changed.
Previous version: 1.0-1
Current version: 1.0-2
https://tracker.debian.org/pkg/iotjs
It's still outdated, I'll resume works once jerry 2.x is merged.
AFAIK the Jerry 2.3+ version was merged yesterday.
I am consider to release a snapshot package to fix CVE:
https://security-tracker.debian.org/tracker/source-package/iotjs
BTW please review pending PR starting with:
Update:
https://tracker.debian.org/news/1184873/accepted-iotjs-10715-1-source-into-unstable/
Once related changes are merged I am considering to add generic profiles for next snapshot release
Update:
https://tracker.debian.org/news/1186717/iotjs-10715-1-migrated-to-testing/
It would help to tag a new release once those pending patches are merged:
Is a new @JerryScript release planned soon?
one that ship:
jerryscript-project/jerryscript@edab196
to fix
https://bugs.debian.org/977736
Latest is 6 months old
https://github.com/jerryscript-project/jerryscript/tags
Ideally it should be then also updated in iotjs, then I will refresh this PR
- JerryScript release: summon @dbatyai @rerobika @ossy-szeged
- Debian bug: IMNSHO the bug report is invalid as iotjs does not build or use the command line tool of jerryscript, thus it cannot be affected by its vulnerability
Please can anyone ping @akosthekiss to merge:
It will help to fix:
https://security-tracker.debian.org/tracker/source-package/iotjs
For the record iotjs is no more part of debian stable branch:
https://tracker.debian.org/pkg/iotjs
[2022-08-13] Removed 1.0+715-1 from unstable (Debian FTP Masters)
[2022-06-17] iotjs REMOVED from testing (Debian testing watch)
[2020-10-26] iotjs 1.0+715-1 MIGRATED to testing (Debian testing watch)
[2020-10-26] iotjs 1.0+715-1 MIGRATED to testing (Debian testing watch)
[2020-10-20] Accepted iotjs 1.0+715-1 (source) into unstable (Philippe Coval) (signed by: Xavier Guimard)
[2020-08-04] iotjs 1.0-2 MIGRATED to testing (Debian testing watch)
[2020-07-29] Accepted iotjs 1.0-2 (source) into unstable (Philippe Coval) (signed by: Bart Martens)
[2018-03-25] iotjs 1.0-1 MIGRATED to testing (Debian testing watch)
Is this project still maintained ? if not may I suggest to transfer it to @abandonware org for community maintenance