[From nobody Wed May 27 08:49:06 2026 Received: (at 1137372-close) by bugs.debian.org; 27 May 2026 07:48:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 134; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:54590) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wS8zn-009bRi-1m for 1137372-close@bugs.debian.org; Wed, 27 May 2026 07:48:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wS8zo-004875-1m for 1137372-close@bugs.debian.org; Wed, 27 May 2026 07:48:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=boAZWM1XhetsR1eAyKHxKewIULwEsTYa8MWcF+gnrvo=; b=K1HtFR60lU6brKVlYFcd2yu0Mj haHOlaBPbbQDrvAQ795Rz02JQb8lOBYaKjQMgdQJ3wgW0JZZKBfW+Pe/RlCiWByznonT9tWb9zc2C a/louLWNFBnmiAZroUNWptYdyWpiD5OhvgBrN7AEaHhulwfEzUHjpmBc1kkREt0Q69W3n/+XNo7xt BMYLRcGulY0DsHW92qFFd9IEXxfRGSUK3EXp12q7o+cBf5mgtQj5dYLo4HsSKMTsWMcek920oOQW+ MyQdWzTu4NYpYnDqRC4JvG2LF09V4QlAa8zyxWjBW3e+lUiViofeErjMh1DVjlNaTRAzlMHV4mXgl rF0oAsUw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wS8zm-0000000BdzF-2j02; Wed, 27 May 2026 07:48:06 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1137372-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: node-shell-quote Debian: DAK Debian-Changes: node-shell-quote_1.7.4+~1.7.1-1+deb12u1_amd64.changes Debian-Source: node-shell-quote Debian-Version: 1.7.4+~1.7.1-1+deb12u1 Debian-Architecture: source all Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137372: fixed in node-shell-quote 1.7.4+~1.7.1-1+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7511394960801609973==" Message-Id: <E1wS8zm-0000000BdzF-2j02@fasolo.debian.org> Date: Wed, 27 May 2026 07:48:06 +0000 --===============7511394960801609973== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-shell-quote Source-Version: 1.7.4+~1.7.1-1+deb12u1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-shell-quote, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137372@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-shell-quote packag= e) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 May 2026 15:45:25 +0200 Source: node-shell-quote Binary: node-shell-quote Architecture: source all Version: 1.7.4+~1.7.1-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Description: node-shell-quote - quote and parse shell commands Closes: 1137372 Changes: node-shell-quote (1.7.4+~1.7.1-1+deb12u1) bookworm-security; urgency=3Dmedium . * Team upload * Validate object-token shapes (Closes: #1137372, CVE-2026-9277) Checksums-Sha1: 050ffb815fe26e5c1dec39c15731477d88f2efbd 2508 node-shell-quote_1.7.4+~1.7.1-= 1+deb12u1.dsc 55369613f87067236e9199939ffd774ba684d18d 5328 node-shell-quote_1.7.4+~1.7.1-= 1+deb12u1.debian.tar.xz a00f9c1bce710b2036463fcacc821727ec26aa95 14716 node-shell-quote_1.7.4+~1.7.1= -1+deb12u1_all.deb 4d4ce00eb93646603a56a9f3e9f407081442093b 16202 node-shell-quote_1.7.4+~1.7.1= -1+deb12u1_amd64.buildinfo Checksums-Sha256: 0ea0e81640e8ada80c89d414a9689eb249345f9530cfbfcf939108e7d78cadb6 2508 node-s= hell-quote_1.7.4+~1.7.1-1+deb12u1.dsc ed5de5737262d3a38a2f3f9ff2ba6de35156f8fbc35145ea4e1682d5b6342a66 5328 node-s= hell-quote_1.7.4+~1.7.1-1+deb12u1.debian.tar.xz f1956a2ffe34e476dec4cf05797c8bc22ce4a4641a63f82ddb75bf3c868526e4 14716 node-= shell-quote_1.7.4+~1.7.1-1+deb12u1_all.deb d5212f2e5d874bc8fa5c4b8f5bcb2ed1039b3667293d3e468639df9b5e90f114 16202 node-= shell-quote_1.7.4+~1.7.1-1+deb12u1_amd64.buildinfo Files: 48c8102ffc26279314745cdc9d51ecd5 2508 javascript optional node-shell-quote_1= .7.4+~1.7.1-1+deb12u1.dsc f6a5b5c94ddc7acd67faed879a6cfc40 5328 javascript optional node-shell-quote_1= .7.4+~1.7.1-1+deb12u1.debian.tar.xz 7b8bd2cc827a52dd034abafb2b41c43b 14716 javascript optional node-shell-quote_= 1.7.4+~1.7.1-1+deb12u1_all.deb a34962c5b17224f26a71a326eb043215 16202 javascript optional node-shell-quote_= 1.7.4+~1.7.1-1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmoVpNsACgkQ9tdMp8mZ 7unwKA/8Cx9MvGwhiHApErU//aKdLqzxe5KN0pH3Kek2f8gzRNyAuVCz96S3IfSd 7ONECmvr0vFgDQhtybXzV+Nm9+3iSbInHV4Y1cEwFM+K7qVYV4GD95ma0J/Vd6d+ aZ41phRv4AllNixkbyHAnT2wJN/3b84D82oiCd6TwXGSPOwYM+V2TSX4qS+i7/91 zv8WHuG9prysnRRdHAE3YaL2dsaa0RBexQ+E0fD10sOF+wWDrR7FIDkizvkCHfH+ vvj/ANY8TV6yzH5It3tJXOkSm3i5HvpDrW3O00fe83jclwXimGyIyWFWC4sGBozg JnuAfshDwGcNIZGmQdvhn9pTqhjDU4lkc0JBw/GAvRNY8HuOSTw0AcYd4NmxR0qJ UoGqnC+zclna4OxH1za6Ohsf3bctpjBo7UzrsMPPbnrgC2SFepshzy+LBPu3FTJM nz5GU3gFVoyXmlhLfxTS2yRdAnZdZLbIjC5i5rw1pWWIT4C4MOKzcc+xwGQWdcfF /leU9++WIovsAhLdl4+BZk4r7aVLffZFwLeBSQ3fiCRbn9v1Lo1W28+gaRRL+KsJ AxTSjtUUb88/YSa0yJswckzH+m/wKU69yMATo0XunNOIKkZwrGwgjQE8SrWTK8o+ u9zed+o/EI0q/fFLrOff9zlYtVEzz+aK/rdPUy+ydLaGl/cKyGo=3D =3D48Fz -----END PGP SIGNATURE----- --===============7511394960801609973== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahahtgAKCRCb9qggYcy5 IRZZAP4+POwhqNc0XIySVyI958NwjidW1c3zdKLbMiXzuGuOkAEA3SuMrk3SUm00 k2ljqgc4d1lPw8ZfCoBgZph+/h7yVQs= =b3UJ -----END PGP SIGNATURE----- --===============7511394960801609973==-- ]