[From nobody Sat Apr 25 15:51:10 2026 Received: (at 1134892-close) by bugs.debian.org; 25 Apr 2026 14:49:02 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 90; hammy, 150; neutral, 123; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:47412) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGeJa-000rSQ-0c for 1134892-close@bugs.debian.org; Sat, 25 Apr 2026 14:49:02 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGeJY-00FtFA-19 for 1134892-close@bugs.debian.org; Sat, 25 Apr 2026 14:49:00 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=5PRBpBHy6CRGNPIWMTbcenRhO4z+TFuorz8sgkx0Suk=; b=Dp5gf5Q+zEXgjG4KIK+Z4XA7T5 +sQzO3oVjlW5vXNHLLVWweJEzqNPXQ8TSpAPh3H4AD+9wNB4OoQ1t9QIU33fCBHzCK3sMQgphtpN/ FfqrN/VzVCtnpMKln3CvXwWwEVUQ2xX71FEWts7YTbY0d7YzGQE6DnIcWwYIyNIwws/khkns4n76L ag/PIYLLbJdQecB17vP1ZYUadHVAClDPpp0FmCeRbY2wN2DBXtL0LbquCi+nPCT1yN6uo+vm9Wcbt nHm7wgJ+8zcz0TnvlIg2EaPgv0uN6PuIovamyz9l5NQ51tvkvGRaUi/AOYQ2UZKibVCOkafNQAaVY ImSCsJ2w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wGeJX-0000000AnvQ-0iSb; Sat, 25 Apr 2026 14:48:59 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1134892-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-dompurify Debian: DAK Debian-Changes: node-dompurify_3.4.1+dfsg-1_sourceonly.changes Debian-Source: node-dompurify Debian-Version: 3.4.1+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1134892: fixed in node-dompurify 3.4.1+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8979491264500138204==" Message-Id: <E1wGeJX-0000000AnvQ-0iSb@fasolo.debian.org> Date: Sat, 25 Apr 2026 14:48:59 +0000 --===============8979491264500138204== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-dompurify Source-Version: 3.4.1+dfsg-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-dompurify, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1134892@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-dompurify package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Apr 2026 15:50:28 +0200 Source: node-dompurify Architecture: source Version: 3.4.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1134892 Changes: node-dompurify (3.4.1+dfsg-1) unstable; urgency=3Dmedium . * Team upload * New upstream version 3.4.1+dfsg (Closes: #1134892, CVE-2026-41238 CVE-2026-41239 CVE-2026-41240) * Drop rollup patch Checksums-Sha1:=20 869051f9737cfbce4483cd25e7d128d882202bc4 2290 node-dompurify_3.4.1+dfsg-1.dsc 4965c85c2e1c729eb3a83046819cd15f1dca63d6 128304 node-dompurify_3.4.1+dfsg.or= ig.tar.xz a63ec9f0d6c9b74333e3a1bf35f923f8bccd3923 36024 node-dompurify_3.4.1+dfsg-1.d= ebian.tar.xz Checksums-Sha256:=20 863e0a90fe2234214f74b220ddf76e959f3fae221a212ba2a971c2456b26d7fd 2290 node-d= ompurify_3.4.1+dfsg-1.dsc 4cf27032499c681126d3596da0a9604f5d4c0390d9b8c0c276cec4ba9a01287a 128304 node= -dompurify_3.4.1+dfsg.orig.tar.xz 8b70b645e3ab808b2d0a600bd6d8aac1c6fb49b46621970f2416dfe30693e761 36024 node-= dompurify_3.4.1+dfsg-1.debian.tar.xz Files:=20 9efd53c16e076609b840dad7f3a778c6 2290 javascript optional node-dompurify_3.4= .1+dfsg-1.dsc 245a44ed6e178a3f621b0c64d089c405 128304 javascript optional node-dompurify_3= .4.1+dfsg.orig.tar.xz 619f5a656143790f11b9ae3e1325ba98 36024 javascript optional node-dompurify_3.= 4.1+dfsg-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnsxy4ACgkQ9tdMp8mZ 7ukU9w//RpeYNfmOFPw5LfHEBTSrXOjXgSiYSMppQaA6Q065aAKFacRwbklUYvbC 4qXdozTKaFXkv8UvRlLMdA/ibHU3LUDKrCF+xl0D1Jw+vNUdSuxipYQMuBcUhtgr sMfvet7nXYa3+FhRuY0L3ESAz/uE/rl36+3ED0GCUVqBy8JasBiRjQfE6/GiOO7c +ULRpw5rL9B+hjH9Dm7v0WEXmc59dq4eC7LKjAWn6VEr0Lj9RHBbrwGWvw88UqpC EVokuIfxf3fmuDHCRLpIvjxqaAf2XReIgCSa6oEEPAHO5hUTO7nyAcYILOZChw7l /qTrr6Htt5oj30EG94YGYzt1yHxjvTsya4VX1l/rOCf5WVThmPVxgtrhUVgzls+6 1mguXoBimW/9U9lKeqmffRVOZt0NIBsf1rb5NoENvSbJISQuxgJXDI98Yc5UgdX6 S590mvsm0ly9grky9aBjtEbcKeguHGfc5Hi8qqgtcHnTsWo468TnvOzL3JibutZo hc14z+HNyKRjBRyPRO6zPx0VyaQbWNwH3FnpCEDEuL9RNdvYO5Xo5kfl79aycf0A 3/cpYYc7a+eNppEgqVtaAp6n1kpxQiLfwOnpyAqScGYqe5VfDd1kfDWoVx1P9lQW M2slxKeOSpxxNLszxHMsNDu+G3HzmRF9ynFbVM8mhA8BdGmMENQ=3D =3D0g79 -----END PGP SIGNATURE----- --===============8979491264500138204== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaezUWwAKCRCb9qggYcy5 ITrYAP9wQyAQqZXmc/352hndaY057W7QDZkAIHLhNYudcH6gmAD6Ajr0fxPCoaju /K+2Ny7j6Hl1Zbuq1Qp2LQbgH5zlZgA= =qmnA -----END PGP SIGNATURE----- --===============8979491264500138204==-- ]