Univention Bugzilla – Bug 42361
LTS support for nodejs 0.10.29 (Debian jessie) until 2016-10-01!
Last modified: 2019-03-07 15:20:35 CET
The version of nodejs that ships with Debian jessie is officially long-term supported until 2016-10-01. We should at least use v4.* (LTS until 2018-04-01) or v6.* (LTS util 2019-04-01). https://github.com/nodejs/LTS#lts_schedule v6.* can be found in Debian experimental. https://packages.debian.org/source/experimental/nodejs v4.* can be found in Debian sid. https://packages.debian.org/source/sid/nodejs
Will the Debian project provide security support?
(In reply to Stefan Gohmann from comment #1) > Will the Debian project provide security support? I don't know. I would guess not.
I managed to build the package for UCS 4.2. For this, I just needed to first build the libuv1 package [1] which is the asynchronous library behind Node.js. AFAIS, there are no other packages depending on libuv1. Afterwards, the build went fine (ignoring one version dependency), I only needed to disable the test-ci target in the Makefile as there were 2 tests that were erroneous (on my docker container), cf. [2] which reported the same testing errors. Therefore I would vote for updating the package in UCS 4.2. [1] https://packages.debian.org/stretch/libuv1 [2] https://github.com/nodejs/node/issues/6193
Let's have a look at this after the UCS 4.2 release.
UCS 4.3 / 4.4 is based on Debian 9 stretch which has nodejs 4.8.2~dfsg-1 which is out of LTS since 2018-04-30. But as nodejs is only a build depdendeny of univention-web I think we can WONTFIX this? At least I don't see the benefit and security aspect here.