[From nobody Sat May 23 10:51:07 2026 Received: (at 1137372-close) by bugs.debian.org; 23 May 2026 09:48:38 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.7 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,MURPHY_DRUGS2,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 116; hammy, 150; neutral, 128; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:43224) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQiyD-000Fa6-32 for 1137372-close@bugs.debian.org; Sat, 23 May 2026 09:48:38 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQiyC-007JDv-0W for 1137372-close@bugs.debian.org; Sat, 23 May 2026 09:48:36 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=jCJ3xn2Z9DsHgiJiVWYBZnNi4PKYearK42nKZwg/+Nc=; b=rk/QhnGND2v0ZU64MJ3Y/Su5ww hrB75N7Dxlkv0/7LvGspvcKNVCASKxZHMaZOfY9h0BNwfqHFmbmKbpwVk3iA+u7gRbCwkHNSNWz/L nTivuvytQQYYD1LTOfUB17jgfBSWYbq0m6fd6Var7D5ZaBZeYSwtgLYTBp0X2oWcNKa3ZUAGwZmoc kE0yQ8GSd+e+DNhFpJwV+Gewts6YGQ3O+29yfQQgiLy8HCmJgbOOGoThK4n2NZ/L34mHN9yrwwWRG c4QkYRDWqBMAxcGYlRJGp66mVTMHN+AEL5TYO1H+5BojZBwEMcA/tZQBZJMQ3/tpLguZjWQyOYjE8 eBKknh+w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQiyB-0000000B4KG-0Q8v; Sat, 23 May 2026 09:48:35 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1137372-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-shell-quote Debian: DAK Debian-Changes: node-shell-quote_1.8.4+~1.7.5-1_sourceonly.changes Debian-Source: node-shell-quote Debian-Version: 1.8.4+~1.7.5-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137372: fixed in node-shell-quote 1.8.4+~1.7.5-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1335687964750173962==" Message-Id: <E1wQiyB-0000000B4KG-0Q8v@fasolo.debian.org> Date: Sat, 23 May 2026 09:48:35 +0000 --===============1335687964750173962== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-shell-quote Source-Version: 1.8.4+~1.7.5-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-shell-quote, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137372@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-shell-quote packag= e) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 11:37:35 +0200 Source: node-shell-quote Architecture: source Version: 1.8.4+~1.7.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1137372 Changes: node-shell-quote (1.8.4+~1.7.5-1) unstable; urgency=3Dmedium . * Team upload * Declare compliance with policy 4.7.4 * Drop "Rules-Requires-Root: no" * Drop "Priority: optional" * debian/watch version 5 * New upstream version (Closes: #1137372, CVE-2026-9277) Checksums-Sha1:=20 af13c1548c8bf38efcc7db21aa781c140c0d7374 2476 node-shell-quote_1.8.4+~1.7.5-= 1.dsc 6db4704742d307cd6d604e124e3ad6cd5ed943f3 2193 node-shell-quote_1.8.4+~1.7.5.= orig-types-shell-quote.tar.gz c0b0bf87ec5b5d095ad0f7f034e2f263eccb70de 19175 node-shell-quote_1.8.4+~1.7.5= .orig.tar.gz 19e62ea7facac66e67cf98c81116246ee242975e 3192 node-shell-quote_1.8.4+~1.7.5-= 1.debian.tar.xz Checksums-Sha256:=20 6af35d4108236d9ad6782e063892125d77d165dee456abe14ecb22bf986bdf9c 2476 node-s= hell-quote_1.8.4+~1.7.5-1.dsc f9ebe399f6d1c6f23d772fc113a6f5600102fbe707dd6e7ac87bd5dc6a135ff2 2193 node-s= hell-quote_1.8.4+~1.7.5.orig-types-shell-quote.tar.gz 41ae77fa49cee870f900fe7eed34752c865ba9b33e2de52987c78d636f728ae6 19175 node-= shell-quote_1.8.4+~1.7.5.orig.tar.gz ff80dd205885b484b8697f08f8da4fa68f1e4f719788b5c1f8b239ebbad43b8d 3192 node-s= hell-quote_1.8.4+~1.7.5-1.debian.tar.xz Files:=20 39355e53864615803b37be39c19a745f 2476 javascript optional node-shell-quote_1= .8.4+~1.7.5-1.dsc 1a248d02401f7738169044d9bf08e636 2193 javascript optional node-shell-quote_1= .8.4+~1.7.5.orig-types-shell-quote.tar.gz 31140b4110fc483aa42b7ff630c793c0 19175 javascript optional node-shell-quote_= 1.8.4+~1.7.5.orig.tar.gz f1fbf805f076568c0d74d822ad4dabbf 3192 javascript optional node-shell-quote_1= .8.4+~1.7.5-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmoRdagACgkQ9tdMp8mZ 7unSug/9EZJDvFmQyx73RlriyYd038it+rbbpvojZ8sXtPPUVePuwiS+j979k8qE X3ci/lybHVIiVPwgfzzUsihSCXy2gcf71Hg2enAAByKdB8iJU/+PQ993w6UBEFZK nXzAeEHRCeq1+tqcfffkF+K4j7LXjlj5qWLP+pbddDc/RTU+3Zr4hIG1Z63JUlBl mbNoTtKK+QX8REZAOBohEnIVKKR9TSJotbJQ4MFN9RbUfMsYnt3QZk5Fa8nAzirN pL8F1WA5Ku6m9saLK/0WkjRsMLn7o/6vBC3FmJYPNohG7ruGOGVSucqbrwe0JYCq QTmcq8MvmTDOkckE54kmBEFQOV/8ZbvTWX6H2MkHNBQ8AaTkULInUI0b5hVPc+yZ RlVrEy3uEtoVlb/C/XkhmXHt51e5H/jMViOLXGN7pOolTsN3c6mOyPOXHPb4BDsn cypuPAFNTR6bkIjbpnAkecDZz0ntAoJHl5p0qt/hGGQczZDNBlb6BOnR6ENqE5lJ /so0HmFg+RwT78JQUAApat81E96qHO0HjT0YwAVS7bST4nI6JG/ikhHQVP/YkBqj tEUqe//5J6sOnzbGQD4au9ZYiqqibkbpt+VRaNdLIVpIUhsKq/nAibGKgUl7EwMj zyqo0xbJ1JD7gpz+OOYc2KtvAc+NkPMs1NXspN3A4VZGFYl8/3Q=3D =3Dqwy9 -----END PGP SIGNATURE----- --===============1335687964750173962== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahF38wAKCRCb9qggYcy5 IdmrAP9cqFES9YuanWOhTeOKtvMFw2HKoTbQnf+vVzmGrS5YqAEAzjj3H+X7OfJ2 gge35yNZ0HWjQMmILn5LEJCKAPxtTwY= =ZBm5 -----END PGP SIGNATURE----- --===============1335687964750173962==-- ]