[From nobody Wed Jun 24 09:51:03 2026 Received: (at 1139959-close) by bugs.debian.org; 24 Jun 2026 08:49:25 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 115; hammy, 150; neutral, 128; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:58396) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJIT-00342c-30 for 1139959-close@bugs.debian.org; Wed, 24 Jun 2026 08:49:25 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJIS-009M4A-28 for 1139959-close@bugs.debian.org; Wed, 24 Jun 2026 08:49:24 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=cfdEXA/qQh0abd8mvNnolTbSTyykCe4rTmy2M4zF9vM=; b=WwiTp0uQ3rO5gF42QLwnkwnjgz iJ6A2ibITguU2nOwIk6QCi33W27WsMUZNCnBfuX+vGlEBGQKhJQ0ruTNrxjaZMCMc1ffM/i0+wCNj dd5poZyow4H3ydgUGLG7deDUkTrum0QajpNqox6Jbf96VOATUsPcmI/cscFOjtMmpZfWGc0o29HGk U4+GsfJZKMIBGhPm6zoYxoXWAIzWh4yrSNM9cTrexKhb8WRZu8iVIlC2oRzWqf+TNwfjYaDbRU4CM H7A3pe8/2/4g/Ejh5WfUtSaQsBKj8VZdApB9JPZzd0hUHLKVFAkyqLB9mkTtfpSWUG1pFAy2qq1+x sVkzgxwA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wcJIR-0000000GT11-2yJU; Wed, 24 Jun 2026 08:49:23 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1139959-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-form-data Debian: DAK Debian-Changes: node-form-data_4.0.6+~2.1.0-1_sourceonly.changes Debian-Source: node-form-data Debian-Version: 4.0.6+~2.1.0-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1139959: fixed in node-form-data 4.0.6+~2.1.0-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2599820214058563705==" Message-Id: <E1wcJIR-0000000GT11-2yJU@fasolo.debian.org> Date: Wed, 24 Jun 2026 08:49:23 +0000 --===============2599820214058563705== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-form-data Source-Version: 4.0.6+~2.1.0-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-form-data, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1139959@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-form-data package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 10:27:15 +0200 Source: node-form-data Architecture: source Version: 4.0.6+~2.1.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1139959 Changes: node-form-data (4.0.6+~2.1.0-1) unstable; urgency=3Dmedium . * Team upload * Declare compliance with policy 4.7.4 * New upstream version (Closes: #1139959, CVE-2026-12143) Checksums-Sha1:=20 b6c067896ed7d04a2c39a738efd17e80444a50c3 2589 node-form-data_4.0.6+~2.1.0-1.= dsc 7fa1bd307044f7d678f0de318f06df2a756e9a94 7160 node-form-data_4.0.6+~2.1.0.or= ig-es-set-tostringtag.tar.gz 20a260551314be1d09125751ab342ce0f631133b 62154 node-form-data_4.0.6+~2.1.0.o= rig.tar.gz f0c597471b51e024fdbf496eb285b903037ad05a 9924 node-form-data_4.0.6+~2.1.0-1.= debian.tar.xz Checksums-Sha256:=20 94bdded78fc4c13fc0394ad829752659da50c47fb01dfcdc9c0c211f1c61cf00 2589 node-f= orm-data_4.0.6+~2.1.0-1.dsc 76e10cc4411e9ebcab6c3e31a88d13ce67247a325df83780ee74e208acd5ae39 7160 node-f= orm-data_4.0.6+~2.1.0.orig-es-set-tostringtag.tar.gz d2dd6e12b2cdcdf1f4e0c47dd2da5882af6197c97467f7b34be8f2deeede53c5 62154 node-= form-data_4.0.6+~2.1.0.orig.tar.gz 38f0495a21551a686b0b0d8d0375da31ecb4eef74cd579225cc8d56860e17732 9924 node-f= orm-data_4.0.6+~2.1.0-1.debian.tar.xz Files:=20 d98376736fc424ff6edc6169e3264e12 2589 javascript optional node-form-data_4.0= .6+~2.1.0-1.dsc 7f9fa9e1fec55df4c05c87c7168921fe 7160 javascript optional node-form-data_4.0= .6+~2.1.0.orig-es-set-tostringtag.tar.gz deb3266520e13239350c247454ced1ec 62154 javascript optional node-form-data_4.= 0.6+~2.1.0.orig.tar.gz 4e7aa9809603d2efbd77151080933cf0 9924 javascript optional node-form-data_4.0= .6+~2.1.0-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmo7lR8ACgkQ9tdMp8mZ 7ulQIQ/9Fo84tP997pdb2mBnXrEKKkksMnFkh8SrizdAYUH4LKbvpSDR/CAlpQMs WJV8PIeoQ/6kYmFxHYrlJfNZD4/PYdfZUYYy8/gMfUvMuu2a6Nwx3S2njB/bfg1x PdGTk98PoQSY2I3I4DEnXA+ovEWopV6cHdaKr8t1SisuM9ZEYzYXKLepljMEV8K+ uIeGJUVjzhJ8+PDbjV+KB0tCYeWWYVSrFs+XMjIvQXEOXbqj0L/nrPYvLXz26D9a SB68icX0A+CEQ5rQ1gTnJVpcdqmr04njXLBvsF2FBPtWefXNOYyjalhWPiw6nfxg MA1CNgIuWeJB8pXqTSKIVS2nZhWFeZbcskrtKondGn9qbGg5IXAhyGlnxupfNVXV PHGuz/03ivNqg6frMup4htYkPCU/yUqQ7P/vjYtv2g9H0xWpSFHGEPj9d2yYmAP8 exZRfWK1ULNkSVrqXh8xxYYI+hUtHGKW75wn4qGWUtiGt4ZvPlDeEq0jstcyct9B OZD2j3sdmroUZbptfhv3whn4C2jthMJQmqeBbb/IDOJYw1oA9Najxr5xvmYSBaUe JdXUFGLv1j63XsEvoqVzIA+PWFqYut4h1bt/KyF3vVYr/yBAu5p+dIQ/Srr0CzUN ozQrVv4WCTpuXAmNB4mL+BNQDBSDnMAdYIzeZRdWCnx6pfi/csk=3D =3DtyTf -----END PGP SIGNATURE----- --===============2599820214058563705== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajuaEwAKCRCb9qggYcy5 ITaVAP9lByzkCRcQPl7SEWPX91OMcp1zMNWi9eIdmj5in82c6wD+NEuBi8GOOuuA BNeeUpqRagNjrtxhzwn7gPxJ9mDHwQc= =a+fN -----END PGP SIGNATURE----- --===============2599820214058563705==-- ]