[From nobody Wed Jun 24 09:27:14 2026 Received: (at 1137257-close) by bugs.debian.org; 24 Jun 2026 08:25:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 98; hammy, 150; neutral, 122; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:53574) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcIvN-0030LQ-2E for 1137257-close@bugs.debian.org; Wed, 24 Jun 2026 08:25:33 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcIvM-009H64-0O for 1137257-close@bugs.debian.org; Wed, 24 Jun 2026 08:25:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=4iBcW7mCB0nCwelhMypls7wyDLXodsLymH/l/DuYCLQ=; b=tXzuJB+2fGZV+76IJ7w1TmQoWQ o+pq1Vm6i5Gr4BYHnw+OsL1WvhJrC1EUuhuaP2Y41YyyUCzgY0gDn3gRFlWUZScg1BYv5fHoDbxzW WLBiVERtlMlzK1tRTR2EkSBGdXNmyfPp9Rxw3JyOEZzPQCSdEP+6/x2rE1gHz1aTiGlWOAgSO6IkI uhHwVChB+iBONq+p++AS0RdqesaWXNivb3teyheCYzLlLsvwDur5GWNQBy3FQXMV4yTRLmUeAwbJV XphRmVcKJvD5F8If+fE0G/Y3mXmvn4hUv+eb1AHXb8Pm5YFxOj69mcWXfG8UdjbUB6EH1ogDZMTAP SvovGQ5g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wcIvK-0000000GOqx-3x3b; Wed, 24 Jun 2026 08:25:30 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1137257-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-qs Debian: DAK Debian-Changes: node-qs_6.15.2+ds+~6.15.1-1_sourceonly.changes Debian-Source: node-qs Debian-Version: 6.15.2+ds+~6.15.1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137257: fixed in node-qs 6.15.2+ds+~6.15.1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8086736608153207045==" Message-Id: <E1wcIvK-0000000GOqx-3x3b@fasolo.debian.org> Date: Wed, 24 Jun 2026 08:25:30 +0000 --===============8086736608153207045== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-qs Source-Version: 6.15.2+ds+~6.15.1-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-qs, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137257@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-qs package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 10:07:32 +0200 Source: node-qs Architecture: source Version: 6.15.2+ds+~6.15.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1137257 Changes: node-qs (6.15.2+ds+~6.15.1-1) unstable; urgency=3Dmedium . * Team upload * New upstream version (Closes: #1137257, CVE-2026-8723) * Unfuzz patches Checksums-Sha1:=20 3c8cc4e9256f4a9ac959528db11e6fe72bcb0224 3018 node-qs_6.15.2+ds+~6.15.1-1.dsc efc80571f1b119011726e2ee3b939a396f082b01 2544 node-qs_6.15.2+ds+~6.15.1.orig= -types-qs.tar.xz 06f30e93a73f8caa6309c7506920b99ee9597375 11091936 node-qs_6.15.2+ds+~6.15.1.= orig.tar.xz 29408b5723f60ac5711652ab21c9b10253cb1842 8956 node-qs_6.15.2+ds+~6.15.1-1.de= bian.tar.xz Checksums-Sha256:=20 ae6ec677e42d5c484b3aec8a362d8e40766ad4b7caddbfb3c96da72f17429d4d 3018 node-q= s_6.15.2+ds+~6.15.1-1.dsc d9f097b86129fd65adb3cba3f3096691da0cb17c4e32931b15d18f4036213753 2544 node-q= s_6.15.2+ds+~6.15.1.orig-types-qs.tar.xz 21e2ce106e90e64b03184339923ce6ce404fb536fffd4a951d2d3a4299d51d5b 11091936 no= de-qs_6.15.2+ds+~6.15.1.orig.tar.xz 44ded9759d2f094dd44438a97ffb9c0da3bd9d4bbae824679264b55226e29684 8956 node-q= s_6.15.2+ds+~6.15.1-1.debian.tar.xz Files:=20 58ace3caebb8333be10ee6febcc26777 3018 javascript optional node-qs_6.15.2+ds+= ~6.15.1-1.dsc ac0a6f01c0c9f6aa71b189e05a0ee1ee 2544 javascript optional node-qs_6.15.2+ds+= ~6.15.1.orig-types-qs.tar.xz a92c5d4fdf0bc8f0eb9585c4eaa6803e 11091936 javascript optional node-qs_6.15.2= +ds+~6.15.1.orig.tar.xz 31adcc8cf0c77ca77d1d6f1de73dcd79 8956 javascript optional node-qs_6.15.2+ds+= ~6.15.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmo7kJcACgkQ9tdMp8mZ 7unrXA/+N94sYUoS4CFwtd2FFomo9E9wTYU4CXpWO8Sz0R4jMNxtlO620LhdE8AQ +apONGxAqxqigyqo/r49VdTR1P/0ya1fDkud02jwD0ToCFjgQia3dmnIaK3U+5JV A9eNzgIZbmBPxaEyFDwHcBUqG/QJIF/MFgQBjqbAw8ldEiqb2HQ98OhQYaopU5W4 GhsNfb4B7EhZroavV9JMWCAzGMB4UHp5PApuwLyTj+2oX5FHetqJTCZbVEFiGUbM aF0FnpBBxM9vF2Ii16Jjkm2nvCU+wHSXakody9X6BpWHjlnU0ht9fjXBUbJeMUmZ 5oHMILzr9vYYp21ZBasjUUwoqyVc5YOzqvluNjjWkwEqeW5x+5AGVWGjMn+E9ARV K7JCsTfiv1roDl0EFtyJ3FMPeCRyzTJ79/WLGKChe++zl1zxA08YRfCFthEJyCw7 d4otu7gcd073a2qian1tsiQLgQPmtZP7FHfq7Jz2N6yiz7Z6VQZjkEFmP5+Lzdv3 aLtTyuOaeY3zMm4HcU5EUpIg0rDjOxWpNcSFqYxQl+i+PbrHJKAcB2iGbcu90zBX PYz5f5yibJ4IiHBkAsAqJHUYk3X0YLMZurTPhauwPhV8jgrrGiGqWQx/mal+baLa bdz22vxNB9MMS4CSE4qzN7033GR0Y8Cp0awsWJeferp8rDmlItQ=3D =3DKsrv -----END PGP SIGNATURE----- --===============8086736608153207045== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajuUegAKCRCb9qggYcy5 Id4SAP4sV3OjaJTV6yadOW8pl5RHbkhjlwC2t32+2tMd21Yx/gEA1KZ64Csbhe6K zvbTG8ghmGvOWOlzErUQ8bOxKdmFogs= =vowC -----END PGP SIGNATURE----- --===============8086736608153207045==-- ]