Node.js security update

[Zuzana Svetlikova]

Hi,

there's node.js security update coming tomorrow 
and since Stephen no longer has time for the package, 
I would like to take care of it.
If anyone has any intention to update the package, 
please make sure we don't clash with the updates.

Thank you

Zuzka

[Parag Nemade]

hi Zuzana,

On Thu, Jun 16, 2016 at 1:22 AM, Zuzana Svetlikova 
wrote:
> Hi,
>
> there's node.js security update coming tomorrow
> and since Stephen no longer has time for the package,
> I would like to take care of it.
> If anyone has any intention to update the package,
> please make sure we don't clash with the updates.

Thank you for stepping up and working on a new update for nodejs. Let us
know here if you need any help.

Regards,
Parag.

[Zuzana Svetlikova]

In case you missed the announcement, the update was postponed by a week.

https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI

----- Original Message -----
From: "Zuzana Svetlikova" 
To: "Node.js on Fedora" 
Sent: Wednesday, June 15, 2016 9:52:24 PM
Subject: Node.js security update

Hi,

there's node.js security update coming tomorrow 
and since Stephen no longer has time for the package, 
I would like to take care of it.
If anyone has any intention to update the package, 
please make sure we don't clash with the updates.

Thank you

Zuzka
_______________________________________________
nodejs mailing list
[e-mail]
https://lists.fedoraproject.org/admin/lists/[e-mail]

[Zuzana Svetlikova]

Hi,

the security update was released yesterday, Node.js in f23 and f24 is updated, 
the version available in Rawhide wasn't affected.

https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI

Let me know if you have any issues.

Zuzka

----- Original Message -----
From: "Zuzana Svetlikova" 
To: "Node.js on Fedora" 
Sent: Thursday, June 16, 2016 2:29:49 PM
Subject: Re: Node.js security update

In case you missed the announcement, the update was postponed by a week.

https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI

----- Original Message -----
From: "Zuzana Svetlikova" 
To: "Node.js on Fedora" 
Sent: Wednesday, June 15, 2016 9:52:24 PM
Subject: Node.js security update

Hi,

there's node.js security update coming tomorrow 
and since Stephen no longer has time for the package, 
I would like to take care of it.
If anyone has any intention to update the package, 
please make sure we don't clash with the updates.

Thank you

Zuzka
_______________________________________________
nodejs mailing list
[e-mail]
https://lists.fedoraproject.org/admin/lists/[e-mail]
_______________________________________________
nodejs mailing list
[e-mail]
https://lists.fedoraproject.org/admin/lists/[e-mail]

[Stephen Gallagher]

On 06/24/2016 10:21 AM, Zuzana Svetlikova wrote:
> Hi,
>
> the security update was released yesterday, Node.js in f23 and f24 is updated, 
> the version available in Rawhide wasn't affected.
>
> https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI
>
> Let me know if you have any issues.

I only see a build for F24 in Koji and no Bodhi updates for either F23 or F24.

[Piotr Popieluch]

On Fri, Jun 24, 2016 at 4:23 PM, Stephen Gallagher 
wrote:
> On 06/24/2016 10:21 AM, Zuzana Svetlikova wrote:
> > Hi,
> >
> > the security update was released yesterday, Node.js in f23 and f24 is
>
> updated,
> > the version available in Rawhide wasn't affected.
> >
> > https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI
> >
> > Let me know if you have any issues.
>
> I only see a build for F24 in Koji and no Bodhi updates for either F23 or
> F24.

I just noticed el6 and epel7 branches weren't updated. I've built them and
did a quick check.

It appears I cannot create updates in bodhi for packages which are owned by
group::nodejs-sig. Is this some kind of bug or am I doing it wrong?

Piotr

[Parag Nemade]

Hi,

On Sat, Jul 30, 2016 at 10:17 PM, Piotr Popieluch 
wrote:
> On Fri, Jun 24, 2016 at 4:23 PM, Stephen Gallagher 
> wrote:
> > On 06/24/2016 10:21 AM, Zuzana Svetlikova wrote:
> > > Hi,
> > >
> > > the security update was released yesterday, Node.js in f23 and f24 is
> >
> > updated,
> > > the version available in Rawhide wasn't affected.
> > >
> > > https://groups.google.com/forum/#!topic/nodejs-sec/pnACRfB7LBI
> > >
> > > Let me know if you have any issues.
> >
> > I only see a build for F24 in Koji and no Bodhi updates for either F23 or
> > F24.
>
> I just noticed el6 and epel7 branches weren't updated. I've built them and
> did a quick check.
>
> It appears I cannot create updates in bodhi for packages which are owned
> by group::nodejs-sig. Is this some kind of bug or am I doing it wrong?

Should be same issue like https://github.com/fedora-infra/bodhi/issues/872.
I suggest adding your problem to that issue on github. Let me see if I can
use my provenpackager status to submit it to bodhi.

Regards,
Parag.