[From nobody Mon Apr 6 11:21:12 2026 Received: (at 1127313-close) by bugs.debian.org; 6 Apr 2026 10:19:15 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_NONE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 83; hammy, 150; neutral, 130; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:57706) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w9h34-000BIc-3A for 1127313-close@bugs.debian.org; Mon, 06 Apr 2026 10:19:14 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w9h33-00EPzi-1J for 1127313-close@bugs.debian.org; Mon, 06 Apr 2026 10:19:13 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=/WdLN6Ws+GQyq5GRTlOh5QFvw5s0BoH7VV52V6r/nD4=; b=ZuVnq+N6Ot25QwpN2rDZT2vWqO FICtJd/aeAPdxBATC+BQy6OAW+mQmpN/uC+kf/SoT089cKLnczsBo9aMwCdD0mZY+XdVpLMd686x9 UrDDvjq6osSy6Qows9osYI6ylw9Pt+n4hIxp4HFQi3vSrJbB0PQd1aUiGYi2aS/WhEpQ13lCFtyG4 7+Ace1924yD9VAnTkCsNQsdqdJykzmFlqPX4N9GB/+/ISOAlvZz4hRrgkGa8S6x52E2PYSZxhcxLc Bjz/c2QA9p2DIizL2E89WKrHNB4VOG47N/Qj7KcNVZAXr8708nl473PM4ajEBZVBY0sMZiuS1kfhZ CLsYN+XA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w9h32-0000000HUBy-24e3; Mon, 06 Apr 2026 10:19:12 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1127313-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-brace-expansion Debian: DAK Debian-Changes: node-brace-expansion_2.0.3+~1.1.2-2_sourceonly.changes Debian-Source: node-brace-expansion Debian-Version: 2.0.3+~1.1.2-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1127313: fixed in node-brace-expansion 2.0.3+~1.1.2-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4897244926085743711==" Message-Id: <E1w9h32-0000000HUBy-24e3@fasolo.debian.org> Date: Mon, 06 Apr 2026 10:19:12 +0000 --===============4897244926085743711== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-brace-expansion Source-Version: 2.0.3+~1.1.2-2 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-brace-expansion, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1127313@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-brace-expansion pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Apr 2026 11:52:07 +0200 Source: node-brace-expansion Architecture: source Version: 2.0.3+~1.1.2-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1127313 Changes: node-brace-expansion (2.0.3+~1.1.2-2) unstable; urgency=3Dmedium . * Team upload * Declare compliance with policy 4.7.4 * Fix DoS via exponential brace expansion (Closes: #1127313, CVE-2025-2977= 0) Checksums-Sha1:=20 c0952ba9a70618c4f29da05c99d0d69a4b3b8b6e 2578 node-brace-expansion_2.0.3+~1.= 1.2-2.dsc bafcbdcffbbcfac526f025c0351e94031ec8ee7c 4596 node-brace-expansion_2.0.3+~1.= 1.2-2.debian.tar.xz Checksums-Sha256:=20 b66eb4e2ad9cd961017d12962df54e1a184c9e6c11036acc1b94ee719ab9d27e 2578 node-b= race-expansion_2.0.3+~1.1.2-2.dsc 90c3f65af4ba2ef80498f734e5040733096ae4b576bcefe0df8a0d815a9dec85 4596 node-b= race-expansion_2.0.3+~1.1.2-2.debian.tar.xz Files:=20 7bf8e6a998609baf1a6672f162575d3a 2578 javascript optional node-brace-expansi= on_2.0.3+~1.1.2-2.dsc 70dafd688a6509d116fd5f7144285c2f 4596 javascript optional node-brace-expansi= on_2.0.3+~1.1.2-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnTgoAACgkQ9tdMp8mZ 7um/PA/9FeB4FyDoNsW3PXKOBW2oYRylnbpHA4a21mydU/0kqVm8JcCtaspwcf58 b8gvn3XJWKuPyGqIcuwGu97z8TE5VkGRgdBkIvRAgSqJEwDuL+HEIqlfqe4O+AM5 /MZ02KTkqhXF/OXvUPvC4nyaJYYozUaGac7GvfEf3SVIt9/0KW+WAh8QhTY5DPiG GUZXc5yPs5oiSXhHdquoskKowAD+RY7kQIlGLAAaOLvfXCDU5U0MZQjCfjCXEAPT 8bOvSreE5pKRbQ6hYjnRiS4eESprgXBdDu1kmOpB9UmP80ukj2Vq4n5aFwlzDsbz ttIMXgjGSyXY8BPrgTBesbYLCY7Sxk7tdfUJZix6mFUcWVT9RGConO3xAVt8PtJz IFQEh0TUUUREZFIaB2h+F/3JUUcHIipdl+wiKU1L4ZygoZ/sEdOViCvP8wCBdihp +o8xA+7faCYcQhF0TDh+I3pWyyPzsYjnlJA6wLjwtEci+Dzoy19ZADjsGGpPYxQb oqnYypLp/aeceiIjEze2PonKeX7komGO0aStHnLMckvCIm73ftaZa1DVPvAjokO/ RuYKN/fAX5jL51SFQyXw4PKiCilN5QdJdEaQau6CarVCbYJ5afQBUZ+CiOGcmIrC C/5mryWfNlFBBIB5m7u9dl33JWQlbu5eupcP7e3mZozEfch0VXI=3D =3DUl80 -----END PGP SIGNATURE----- --===============4897244926085743711== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadOIoAAKCRCb9qggYcy5 IU3lAP45V6932l8qvqDkMWMW2R/WnzxDpCuaW6pt/mRLcjjjQgEAmKla+MwDTozF nLa1qJ2iCRd29uhXFESZSs3dscdI/QQ= =4Cp4 -----END PGP SIGNATURE----- --===============4897244926085743711==-- ]