Merge 4.8.4~dfsg-1 from Debian Sid

[Simon Quigley]

There has been a new upstream release and a security fix released to Debian Sid. We should merge their changes.

[Simon Quigley (tsimonq2)]

Attached is a debdiff for Artful applicable to 4.8.4~dfsg-1.

[Graham Inggs (ginggs)]

I re-tried a couple of the tests that failed, and now it seems the only failure [1] is with node-v8flags/2.0.11-1

I suspect this a regression that is already in artful, so I have triggered the node-v8flags tests with nodejs/4.8.3~dfsg-1ubuntu1. If the tests fail against that version, we should ask that the node-v8flags tests be ignored so that nodejs can migrate.

node-v8flags in Debian already picked up a FTBFS bug [2] and their tests started failing on 2017-06-27 [3].

[1] http://people.canonical.com/~ubuntu-archive/proposed-migration/update_excuses.html#nodejs
[2] https://bugs.debian.org/866065
[3] https://ci.debian.net/packages/n/node-v8flags/unstable/amd64/

[Launchpad Janitor (janitor)]

This bug was fixed in the package nodejs - 4.8.4~dfsg-1ubuntu1

---------------
nodejs (4.8.4~dfsg-1ubuntu1) artful; urgency=medium

  * Merge from Debian Sid (LP: #1705727). Remaining changes:
    - Revert upstream's fix for openssl 1.0.2h, since we still have
      1.0.2g in Ubuntu.

nodejs (4.8.4~dfsg-1) unstable; urgency=medium

  * New upstream version 4.8.4~dfsg

  [ Upstream ]
  * Security fix: Constant Hashtable Seeds (CVE pending)
    Closes: #868162.
  * http.get with numeric authorization options creates
    uninitialized buffers

 -- Simon Quigley <email address hidden> Fri, 21 Jul 2017 10:33:40 -0500