[From nobody Wed Jun 24 10:07:08 2026 Received: (at 1138576-close) by bugs.debian.org; 24 Jun 2026 09:04:57 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 85; hammy, 150; neutral, 114; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:53338) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJXV-0035mV-0v for 1138576-close@bugs.debian.org; Wed, 24 Jun 2026 09:04:57 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJXV-009i2U-0K for 1138576-close@bugs.debian.org; Wed, 24 Jun 2026 09:04:57 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=U05CRuZd9Qy4iCatPRvGcZItlBTbYW4X6Iq6L5yqhck=; b=Vm/9d7ugGCgifDjhOzp366O9Tu FI7wZnTPwcAJbwe4ZiShOEnuwjhAZA/xiIjiHI1+H+dUVP0XaxKL4Vcpo1iLT1Qv/GEGS5QShEkti X5q0cmMzx1gUMfvOGZhF+lzGdAGb35IQoohyIkfyrebZvOR5oB57XtrUisitS5Op9Ezy+CfmKDH/v rsVH7wDk+gUlnbRnQexYo9jnIWRFnVfDcPKsCY1A0b8BnOJZAh/PgwRdJvqKFTp0ttKp3M7ac6QDC ZO+CQvNQ0Zs0+uugXvSJrc8gXbyBoHtad4uINTxOCpXq/u5FCFKS6Q0teUswKgs5GrPsGv+n7gH14 1Ke2Mx9Q==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJXU-0000000GVPM-197G; Wed, 24 Jun 2026 09:04:56 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1138576-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-brace-expansion Debian: DAK Debian-Changes: node-brace-expansion_2.0.3+~1.1.2-3_sourceonly.changes Debian-Source: node-brace-expansion Debian-Version: 2.0.3+~1.1.2-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138576: fixed in node-brace-expansion 2.0.3+~1.1.2-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7965987230710071797==" Message-Id: <E1wcJXU-0000000GVPM-197G@fasolo.debian.org> Date: Wed, 24 Jun 2026 09:04:56 +0000 --===============7965987230710071797== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-brace-expansion Source-Version: 2.0.3+~1.1.2-3 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-brace-expansion, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138576@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-brace-expansion pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 10:39:03 +0200 Source: node-brace-expansion Architecture: source Version: 2.0.3+~1.1.2-3 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1138576 Changes: node-brace-expansion (2.0.3+~1.1.2-3) unstable; urgency=3Dmedium . * Team upload * Fix bad CVE id in previous upload * Fix sequence DoS (Closes: #1138576, CVE-2026-45149) Checksums-Sha1:=20 24c4a01c72a8cd782381938731531d0f3758e92f 2578 node-brace-expansion_2.0.3+~1.= 1.2-3.dsc 811b994213be9324c1a2d8f63306de9655885397 5284 node-brace-expansion_2.0.3+~1.= 1.2-3.debian.tar.xz Checksums-Sha256:=20 e7ecd929fc2e092581ed2d44244188aad8805062be974e085db5f8d39038f81f 2578 node-b= race-expansion_2.0.3+~1.1.2-3.dsc 44b0b3ae8f2b4ae28ed86ed44ff095bb172c8077d6f00addc70cf2ce49e8b032 5284 node-b= race-expansion_2.0.3+~1.1.2-3.debian.tar.xz Files:=20 df90c8357fc7eaef4852b95162bab879 2578 javascript optional node-brace-expansi= on_2.0.3+~1.1.2-3.dsc 5465e995dab7b11cb5ec4dec444a8e5f 5284 javascript optional node-brace-expansi= on_2.0.3+~1.1.2-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmo7mBoACgkQ9tdMp8mZ 7umISRAAjWtCkWCAwVm8yzTs56EKN86y96qEuiLE8ShRYYbPAF1IA7yum15CAKfC TB76FAvI4/kZieKWQb4NxxSeLunIVljZK/odG1mPaQiEQKnP4n3zHczyRwcaieJr 8JYVJG397wGIVguqwDKG54wSiampaqe4hHnzQNiUDdfbuK6eghSUQUaNo0fjPGPx z2b4pLSvukCq9K8YN35gf8MO4L//764fhAEITxxyU/1w2zQEU/usnpJbm+ZyipDn 9j0biD13O6Qazz4iKf/0tkgM1YGZDBAUwwX+aVpwnXMpbDNegLm6wLTN/f+QzIq8 ChfGy69QSxm0TfXTC774eOH9kfZmyqKySITNO37BPUcLDZULCXQBoRM4xLdZQX2O Oo5gs/R9Z45snjp3PUkOaXFJ0sS7u6xNWlcw5Hylw/rsQvNMUq4TRk6smT4KBj4P rdoatoww5T0MNkHQk4W10CxOwmm9GsXiMsd0l/HbuXdzRFovNPl/rLwt7hou3/k3 8dL2xrA9OdTUBIkK4t6ABf57aN3f0LpaZTYE4gobTbrt/3UG4dloHveVHIsE4pJ7 ONS37+mC3sqSKzKxj4m4hHQ1xd6muChpknHpi2rXlU5uFPRGZyl2DsNyYOyPnddn kOm+JYefN9D6cXCInd+mxNxzjgvOcqHYOx2d714a8/+4ZbFptt8=3D =3Dd/tP -----END PGP SIGNATURE----- --===============7965987230710071797== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajuduAAKCRCb9qggYcy5 IbmyAP9Ax7rOT2mGd388sMkrtEgJptABG2CaHALM/+3LklxypgD/U6i2oQcnhm4i 9JVy/E+D3ByZWPhqH7jxl1oQYJGWegI= =Aq6B -----END PGP SIGNATURE----- --===============7965987230710071797==-- ]