[From nobody Wed Aug 19 11:21:09 2026 Received: (at 1141820-close) by bugs.debian.org; 19 Aug 2026 10:19:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.5 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 86; hammy, 150; neutral, 122; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:36700) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wwdOP-001cmv-0b for 1141820-close@bugs.debian.org; Wed, 19 Aug 2026 10:19:33 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wwdON-00CnFT-1f for 1141820-close@bugs.debian.org; Wed, 19 Aug 2026 10:19:31 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Ov+TI021kAErWw7T1j5EUYHWOQrcR22D2ocaOEC1MSM=; b=NOTUID+1yM9Crvn18RcYmCNCv4 W0o4CZnb70mABtgfYg9U3m0uXs1VSw87Xqk5ToE8DG6Qjj2sj0tDezfm0wCeODjsu+J7z0i+TWX2l 1b+Ezu84CYpwo6wlO0rY+/RI54+IBN3rv5NN/fVcesASrgyUg6Jqh47pGypQ4B0wmM6XfNroTOL60 tPCfMFkp7XfFzA+88CkNSG7InpHrAdYZGZR4rCHQvkunaR/ptLEJmmrxJzY5j0jd7rD8RMqO4V1K6 gA/dB1QvWveNbyLtjQG8qRuMyE0SL/n1in4hlsr9Ntn3UbZvZvqGhheWrAUZda2oR+fiJLJdln6j0 1DDNidjQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wwdOM-000000068F6-1UDr; Wed, 19 Aug 2026 10:19:30 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1141820-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-js-yaml Debian: DAK Debian-Changes: node-js-yaml_4.2.0+~4.0.9-2_sourceonly.changes Debian-Source: node-js-yaml Debian-Version: 4.2.0+~4.0.9-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141820: fixed in node-js-yaml 4.2.0+~4.0.9-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5780428980157962800==" Message-Id: <E1wwdOM-000000068F6-1UDr@fasolo.debian.org> Date: Wed, 19 Aug 2026 10:19:30 +0000 --===============5780428980157962800== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-js-yaml Source-Version: 4.2.0+~4.0.9-2 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-js-yaml, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141820@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-js-yaml package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Aug 2026 11:56:46 +0200 Source: node-js-yaml Architecture: source Version: 4.2.0+~4.0.9-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1141820 Changes: node-js-yaml (4.2.0+~4.0.9-2) unstable; urgency=3Dmedium . * Team upload * Patch: replace `maxMergeSeqLength` option with `maxTotalMergeKeys` (Closes: #1141820, CVE-2026-59869) Checksums-Sha1:=20 02588aa370b7a7409ccf1c06a07f364e61881d01 2578 node-js-yaml_4.2.0+~4.0.9-2.dsc 1a6e6fc2dbe7244a385abbd68b54b5c35b80c2a8 85368 node-js-yaml_4.2.0+~4.0.9-2.d= ebian.tar.xz Checksums-Sha256:=20 c16030ff7f3907203c78a69d3743eca7b6037eeeaa5fc379d8a5537215582b51 2578 node-j= s-yaml_4.2.0+~4.0.9-2.dsc 8ef97712698e9ed8885d6a7233f449991603605ffb37d28e9118470478738dc8 85368 node-= js-yaml_4.2.0+~4.0.9-2.debian.tar.xz Files:=20 326bab26b12cdcba8c49a96af2f2824f 2578 javascript optional node-js-yaml_4.2.0= +~4.0.9-2.dsc da28ff5230ec8fc5fb191fbe03de231c 85368 javascript optional node-js-yaml_4.2.= 0+~4.0.9-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmqFfmgACgkQ9tdMp8mZ 7ul3xRAAkzdt94EW/EGTZZ1KfyH5c8OODkfHD6eNqLDRJyM1hhANR4yjOq5wZJg5 Skg6TG0638Thq6NMTsS3OY2jBEmobNAfPO4ouPn2csbh0NctlHiBIO5IPLnRqq10 keYYNBS+HVKJa/4I4ByaCnIPgGU/OdpRwbjA40xwNpcSwoFzXKs3ABzDzJ+l4VIW xAYZ3GdGzT15T4Zm7TSIcfcxHI8LHdQrhhLaOZD4IcyaUfOJZLU+1/+tv20UdoMM x2HGNM162ICiFOFsjHb7GleO3utQmhyTD9tbecfbPiIZWcm5QepbeHMbv8fZa/S3 sjpDF4XF09rtO3+Zo061734yr6UnY1LBzLmEq4XDJlcxgaJHBu5L8FIkMeFkH5q2 ySL6Gxh/nKDFpbTc66TdRj+5McEhqIdenxE9z5BlGo/HfWpSUdyx544/tpUd6MuL 9SJ9OxCJ0oe/SY7RDnI/BRQYEyOZncbnXNoDORRwhGbvRNV3uGuj88SYRIObc9RY gzj1NM8LWKKE3QavFYnDR3BoynmkZT4+tKIsGZRFGAmmxev0Lo1JhNs+gKkVkD87 BqAB4uk0fs5RFl3PxjDkL0kd0DXoRKcIhPw4gcWAJKbKh4mRfhI6iS6gbwucI/kC NrB8ZghIu97FiB0kwFcQjgsfpo/NLkUfT99cbc5GqZvcarMPxX0=3D =3DPZQW -----END PGP SIGNATURE----- --===============5780428980157962800== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaoWDMgAKCRCb9qggYcy5 IViNAP9ENQ2Q90GaQ84B0Ho1rZkeyYf4Il+4GRAft7WMC9u0ZQD/RXZCZe28P5ce T7aGH5DZW8aqo0aGYK0yunKtZMzb0wE= =zxN+ -----END PGP SIGNATURE----- --===============5780428980157962800==-- ]