Op wo 7 dec. 2016 om 21:46 schreef Piotr Popieluch piotr1212@gmail.com:
Op wo 7 dec. 2016 10:02 schreef Christopher ctubbsii@fedoraproject.org:
Is there an alternative or workaround for packages which require this fix? There's a potential XSS vulnerability in jquery I'd like to patch... but can't if I can't get a successful build. If the fix cannot be backported to F24, can grunt be downgraded to the last working version in F24?
I think the issue was that grunt was not compatible with the updated lodash. Updating grunt makes more sense than downgrading lodash.
Following packages need to be updated: nodejs-figures nodejs-maxmin nodejs-grunt nodejs-grunt-cli nodejs-grunt-legacy-log nodejs-grunt-legacy-log-utils nodejs-grunt-legacy-util
Some more packages needed updates. I think I got everything built and created all needed buildroot overrides.
js-jquery1 scratch build succeeds now, please check if you can build the update now: koji.fedoraproject.org/koji/taskinfo?taskID=16847838