[From nobody Fri Apr  3 20:35:08 2026
Received: (at 1129378-close) by bugs.debian.org; 3 Apr 2026 19:32:15 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,
 MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_NONE,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 78; hammy, 150; neutral, 149; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:52292)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFb-00Auso-2L for 1129378-close@bugs.debian.org;
 Fri, 03 Apr 2026 19:32:15 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFa-00Acri-0N for 1129378-close@bugs.debian.org;
 Fri, 03 Apr 2026 19:32:14 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=vSi4KxDOh8V0tWyEsoo7Mlv7HcT0c9qsamwPN+x9jt0=; b=RYuzYCnCayvkzvYSMKLBTJFOMi
 wRu7Qoa90YzXUZ+F+xF5eGlkNtnBsFTiCavZE1B7xwRZd14xoxoiqKbu9uLU2iaOF7r04yt/9TBQX
 +pT5PkJOEmONrjyG8PcIPlgeN5Yob7xMCaxaYdEOhMnuKtiV7AZuLmCLCjqOpL66RkGAB/f7V7nmM
 bpSXOKuKIsv/CMVAqcPGO9eYRSEtB6/aMUHkKTJOp/+3I7US8cQujWwPyLMS/8xGmCJX4zxxM65UJ
 fH/iZK6Rfj6vzxrO5p13H20xfm6QFXFHTdWDn+Ge0V8JSt2jTYfzq/5V/jz+fERIZJmnlHFppQ6Gc
 jbwAIlOQ==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1w8kFY-000000067Qh-41Lt; Fri, 03 Apr 2026 19:32:12 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Xavier Guimard &lt;yadd@debian.org&gt;
To: 1129378-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: node-tar
Debian: DAK
Debian-Changes: node-tar_6.2.1+~cs7.0.8-1+deb13u1_sourceonly.changes
Debian-Source: node-tar
Debian-Version: 6.2.1+~cs7.0.8-1+deb13u1
Debian-Architecture: source
Debian-Suite: proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1129378: fixed in node-tar 6.2.1+~cs7.0.8-1+deb13u1
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============5441118842390265841==&quot;
Message-Id: &lt;E1w8kFY-000000067Qh-41Lt@fasolo.debian.org&gt;
Date: Fri, 03 Apr 2026 19:32:12 +0000

--===============5441118842390265841==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: node-tar
Source-Version: 6.2.1+~cs7.0.8-1+deb13u1
Done: Xavier Guimard &lt;yadd@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
node-tar, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1129378@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Xavier Guimard &lt;yadd@debian.org&gt; (supplier of updated node-tar package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 12:34:05 +0100
Source: node-tar
Architecture: source
Version: 6.2.1+~cs7.0.8-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Javascript Maintainers &lt;pkg-javascript-devel@lists.alioth.=
debian.org&gt;
Changed-By: Xavier Guimard &lt;yadd@debian.org&gt;
Closes: 1129378
Changes:
 node-tar (6.2.1+~cs7.0.8-1+deb13u1) trixie; urgency=3Dmedium
 .
   * Team upload
   * Add patches for 6 CVEs: CVE-2026-23745, CVE-2026-23950, CVE-2026-24842,
     CVE-2026-26960, CVE-2026-29786, CVE-2026-31802 (Closes: #1129378)
Checksums-Sha1:=20
 0ac1fd689a43dc1b6631a2d83ac37dcbddaea229 2965 node-tar_6.2.1+~cs7.0.8-1+deb1=
3u1.dsc
 931e53434a959d4ea3c7821d50b1ebf1e73aad7e 15664 node-tar_6.2.1+~cs7.0.8-1+deb=
13u1.debian.tar.xz
Checksums-Sha256:=20
 ad80e7dc3304f173d956af544ea0f98d71922178bb0fc168f89a96eb4bf23953 2965 node-t=
ar_6.2.1+~cs7.0.8-1+deb13u1.dsc
 85010c3764b86369387ad87562090b8d9e4578289c130c30049a3bbb361f01d3 15664 node-=
tar_6.2.1+~cs7.0.8-1+deb13u1.debian.tar.xz
Files:=20
 60c92ffea8508b3e0763e4cdfdcc0b55 2965 javascript optional node-tar_6.2.1+~cs=
7.0.8-1+deb13u1.dsc
 c6d5e40563b756a0eb392b8fe6b2939d 15664 javascript optional node-tar_6.2.1+~c=
s7.0.8-1+deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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3D=3D
=3DvaSk
-----END PGP SIGNATURE-----


--===============5441118842390265841==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadAVvAAKCRCb9qggYcy5
IZI4AP4keeLJ//65mNKYtB8PyU8n3KLdUWz0aPvEtLYM/IjLLQD/cBiMFtOD11/a
3mMMSdrXBwFLI/sRrgsOHQP/Uz6YBwU=
=ik9U
-----END PGP SIGNATURE-----

--===============5441118842390265841==--
]