[From nobody Sun Apr 5 10:35:08 2026 Received: (at 1125185-close) by bugs.debian.org; 5 Apr 2026 09:33:36 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 106; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:46954) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w9JrL-00F6WH-1x for 1125185-close@bugs.debian.org; Sun, 05 Apr 2026 09:33:35 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w9JrK-00BU8W-1F for 1125185-close@bugs.debian.org; Sun, 05 Apr 2026 09:33:35 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=8Q6806NqNBWCClX124rxFkdQ38GCLDghuiyVlKR5sG4=; b=TfAPI472kgiYDFczN/7iIE02Kx k4VTo+lpUHuOWbW/HoYPRbGsai+/duReMdH20GbEfMmcluGkduYrroWFVGgd+Nrc4g1oVEl1PBD/t vgZrr8Zb3qRX4UmxO8YHmz4HOAd1O2B7TFRTMqbqoLWNrdjRNaXKOgScxbeAI4Xq+INkCcD/GD2OY xnyy3CKC5lP925haGWX6PFWDnWzI9GVWUcAaFCC7RQsoonK7wUjm+SfBskHO/+g5OqdYBhAfPYgzG sEjDnuUigNMTvmPtQmyrQfXp5waJ+zZgXmh2l2uQ4naUl8KLWzHPFfabwVRoU4JczYYtzyM1aWlJt NKzIE7+A==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w9JrJ-0000000D7pT-2DNw; Sun, 05 Apr 2026 09:33:33 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1125185-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: vega.js Debian: DAK Debian-Changes: vega.js_5.33.1+ds+~cs5.3.0-2_sourceonly.changes Debian-Source: vega.js Debian-Version: 5.33.1+ds+~cs5.3.0-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1125185: fixed in vega.js 5.33.1+ds+~cs5.3.0-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7101347353705623316==" Message-Id: <E1w9JrJ-0000000D7pT-2DNw@fasolo.debian.org> Date: Sun, 05 Apr 2026 09:33:33 +0000 --===============7101347353705623316== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: vega.js Source-Version: 5.33.1+ds+~cs5.3.0-2 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of vega.js, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1125185@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated vega.js package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 11:15:12 +0200 Source: vega.js Architecture: source Version: 5.33.1+ds+~cs5.3.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1125185 Changes: vega.js (5.33.1+ds+~cs5.3.0-2) unstable; urgency=3Dmedium . * Team upload * Fix XSS in vega-functions (Closes: #1125185, CVE-2025-66648) Checksums-Sha1:=20 4c575a44899b899e6291244bb5361282da85df8f 3442 vega.js_5.33.1+ds+~cs5.3.0-2.d= sc 308f760ec0fcf058567bb9a9580a923eec6b321d 9600 vega.js_5.33.1+ds+~cs5.3.0-2.d= ebian.tar.xz Checksums-Sha256:=20 8c5f20c4392d198ea7f6cee70149e2731c7b08e85d80dde24734405df873e635 3442 vega.j= s_5.33.1+ds+~cs5.3.0-2.dsc aaf88b87b647d61cf8324a2fe0b8ad09c571b27597ddcb39885086846d0decc1 9600 vega.j= s_5.33.1+ds+~cs5.3.0-2.debian.tar.xz Files:=20 9ff1babe2cbdb085bca7aa725d1268c1 3442 javascript optional vega.js_5.33.1+ds+= ~cs5.3.0-2.dsc 4d6a12a60f5169619bce77399559b279 9600 javascript optional vega.js_5.33.1+ds+= ~cs5.3.0-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnSKOwACgkQ9tdMp8mZ 7ulDbA/8CTk4/pcYja5Bq2Fq2+f+1Nrylnny+9HLkY0BZNc16qr5cG6gigp3beXU 81Ofhr/YfUapK4mnWjdgivetdhYn0FJtuyTNi4YPVgKaGUfTGLdY8P0AN8+WuOUA C5Khxf9aV2+pa6HjGxN7yRNirHk/fZ/lXuC71AzBvA2ts3y10wN6PE236KroFzLu 3AuwToBV+yvthF7AE8dYxHQ9u2CZMLqYKudl0gRR3l6Ciifrvrokccs4SbRRsvVK kjZiO3lLvBy0bw7uksdIDAhw8GlslxeLW+JxXX6Y5doypAkM80xce+RApf5vAo9k DPh95vUfWCIrjmkIVzDWAlRFX4vhjoJsY0XVzagYJ6uRjggPij0bMBH6iN5QiabB qoRa+ux4QH9XYWDnJqNZ6hVy1krLvjnDy+/LFQUzrqqp5GFwQjGk/uC9C46lMqth whivE5xloDeGh2qzGYWpMxtI10TkblxdUWeGvUtOI3c2qSn71YzmnPDUctWSKwQH 9ZBY5jNa2dLkJnd7/B9tGdjVEBqZGOF3XD7dXhkL9as9zPTOeSws7NBCWfPIIu26 sQSBq3044Vg3SVEqzcilEqM01N55RlT0+KSKABER4XjQx/48hWNJ3zGs3gDhuL0+ gVBYEC7Dq8cPipYawoUEEZfKHVSWKBC6KhOBbSWbVviwwKMX6hQ=3D =3Drysy -----END PGP SIGNATURE----- --===============7101347353705623316== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadIsbQAKCRCb9qggYcy5 IeVVAP9l11Wc5lowRfLQPkZJbzr1LM3nwGh4wMGLnJ/c8Fm6rgEA9898BRCSMoYX g89RtQCjTaHzm3LTIcv2mPWq71wxVgM= =023O -----END PGP SIGNATURE----- --===============7101347353705623316==-- ]