[From nobody Fri Jul 10 09:23:08 2026 Received: (at 1141767-close) by bugs.debian.org; 10 Jul 2026 08:20:36 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 108; hammy, 150; neutral, 132; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:57450) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wi6TM-001U6P-0i for 1141767-close@bugs.debian.org; Fri, 10 Jul 2026 08:20:36 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wi6TK-005oLc-02 for 1141767-close@bugs.debian.org; Fri, 10 Jul 2026 08:20:34 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=gSv+FVwaUmOji0yjH6evn5UggYQfZSV03wvXzAWfijk=; b=KgVF2+Hy3krcdmoW+0mZdhx5xt m++YRfjw4KVeby1Qj2dH0ahYA7Dt3/Htgls2tDPaTem6V7zDxUICk+t7yyrqeSowE0S144VwHj/DU y+7iX1tsRRBkPk1rwD/1/TJOY2bRsoycXBpiv6XCTftpp0ejA8yHeVEnooIaV71SMXPA323p9yVcD vq860iDMU4rgWRWq1YPrEVK6okNGAd5/9NhbDTDReBIeQopRr86RRLrKUtIgi2MN8HdSAhbSwk8ac Wx60rUv4duFvDe10ZhNwaL6hGz6MqpDoaz8SDYn3D320VQoJ2JvbMZuLB1n6nhB+UBCPAPxw5B2vJ jTjA0zqQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wi6TI-000000016bA-2tNT; Fri, 10 Jul 2026 08:20:32 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1141767-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-tar Debian: DAK Debian-Changes: node-tar_7.5.19+~4.0.1-1_sourceonly.changes Debian-Source: node-tar Debian-Version: 7.5.19+~4.0.1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141767: fixed in node-tar 7.5.19+~4.0.1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3141065861569598386==" Message-Id: <E1wi6TI-000000016bA-2tNT@fasolo.debian.org> Date: Fri, 10 Jul 2026 08:20:32 +0000 --===============3141065861569598386== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-tar Source-Version: 7.5.19+~4.0.1-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-tar, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141767@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-tar package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 09:42:21 +0200 Source: node-tar Architecture: source Version: 7.5.19+~4.0.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1141767 Changes: node-tar (7.5.19+~4.0.1-1) unstable; urgency=3Dmedium . * Team upload * New upstream version 7.5.19+~4.0.1 (Closes: #1141767, CVE-2026-59871, CVE-2026-59873, CVE-2026-59874, CVE-2026-59875) Checksums-Sha1:=20 a1225839820b3c0d9b41d3f09a5ccdaf23e3fd88 2437 node-tar_7.5.19+~4.0.1-1.dsc 3255b25ad5fde20429f5526179115e66da6ae8fe 6347 node-tar_7.5.19+~4.0.1.orig-is= aacs-fs-minipass.tar.gz f2722f613764bbf382eb3c561ed7b63ee5ecf18c 205253 node-tar_7.5.19+~4.0.1.orig.= tar.gz 7e3ca04ad79e14b1e4c46dd6386197e77aa279da 14752 node-tar_7.5.19+~4.0.1-1.debi= an.tar.xz Checksums-Sha256:=20 071cc0a5560ccb08b97d4648b246f201bec927ee9993d91e66f89111de03691f 2437 node-t= ar_7.5.19+~4.0.1-1.dsc c312189122ddb0c2f9aaeffbbcddb4015171539214ac589e56d7c72da261e4c7 6347 node-t= ar_7.5.19+~4.0.1.orig-isaacs-fs-minipass.tar.gz babeddb9f51df606026d5d3da8afd7c3d71cb2dafeb4fc04b98f5c7a4599e5d8 205253 node= -tar_7.5.19+~4.0.1.orig.tar.gz 9a2f1993e68baaa96f70eec2112c0eb8602b33101df4f54dea5efa0cd0052fad 14752 node-= tar_7.5.19+~4.0.1-1.debian.tar.xz Files:=20 87dfc3547c5dcf1a52823458fee1d676 2437 javascript optional node-tar_7.5.19+~4= .0.1-1.dsc 94e9f0f8c8e8192f6fa6ecf41b4d2bc3 6347 javascript optional node-tar_7.5.19+~4= .0.1.orig-isaacs-fs-minipass.tar.gz 5aa98c507f1b948d1b7bac0b222a84f5 205253 javascript optional node-tar_7.5.19+= ~4.0.1.orig.tar.gz 3d0bee102a722892319e5f374358f9de 14752 javascript optional node-tar_7.5.19+~= 4.0.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmpQorsACgkQ9tdMp8mZ 7un8Og/+KAoaBdQxX/VSMGh642ruiD+wphNQBhWFbTXf9Dd1zLSjlJac+FWaRrYx hKG59jvJioelMren/wAxJ7Cwukalqoa0d1UgA1mn741qGpcDGJK89DkHZDisF/69 tQdAewqCRO29zWSPr0qp2jY1MoBvTv8M1anRgWpnZ993YsPUaZ7au96bhn3vsHuk 837tgyjNw1XjaOgJkTs6pNagA2HFZRcADFOJDBBtifMtd7sVhrX2iSQOhukP5JxX P3B7K7pg9JN8U9emVetcMAgIT7Mx3M+8EaTcfs6feHcMW4rrQEb09T/IpC5M3R8c /g+pus52oGrEvSYcteiVo1xb0irulvoPARSJp8lgsiFxV89oZMT20jEn1+72bkKM BmD8lA9npQs/IV6HgVyMUAVoE0pZceULWjoZmIwEiB3Zw1BPtc+VHGQgrZ41TsIY Qs4G0divp6eNU1DwkzqoysWMDIB8xcar7QozN07ohtBKNT3wnXA0oEm+KGXBL13j zjA7ydiIEa690+oexvVr/yHY3P/4LIVkAIzSKAtfBLWi4p+ZLmDruXshl9ZoUOns yJjCsYtMayw6icuvWefiuK9Jb4GySr5fB849i84R+Dobcmj+J5j20DaKPYDvZF2T psVLNXUbwos276Bd9T58r1p6pEdYkQrrEtSm9Krq2WAAx+8hGfQ=3D =3DaqQk -----END PGP SIGNATURE----- --===============3141065861569598386== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCalCrUAAKCRCb9qggYcy5 IZisAQCd7XoUtR5km3MgIhqAmUn6jAP1zx/O1noqG+G6hiJFjgD/UWrTk6bhu9At jX8tcSIEtNcDl93vyNe44gvyde2ttAI= =QRR4 -----END PGP SIGNATURE----- --===============3141065861569598386==-- ]