[From nobody Tue Sep 1 10:21:05 2026 Received: (at 1139159-close) by bugs.debian.org; 1 Sep 2026 09:19:58 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 109; hammy, 150; neutral, 131; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:56384) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x1Kes-00ACib-00 for 1139159-close@bugs.debian.org; Tue, 01 Sep 2026 09:19:58 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x1Keq-008Q5E-0X for 1139159-close@bugs.debian.org; Tue, 01 Sep 2026 09:19:56 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=/bMtF97oEBm/EAnAjLpNoGM1I+eNkqUOkmGw4KuaqEk=; b=fKHW08HOQF7Q3Rjo6uH8ugGsab +IxZ4U5IoGYHxwKxm3CSwIUfLUy8eMElVubsR5V/w4KRWWykFJVXqD11rOknRGq/6sDjBtHT7bOup BJhhEZIJCLNriKKXHOxt23ngxiCjJzE/06YeK/2lpWynk0gYPczOqgiUHOpzM5PtOJzUmraQZZmAB ongvRiX66VBkOyuQImVAVL4I7S+XMkPYZLiyC0CJZjySuKoLe8mZpIi90FOemyp5TzBzoySH8OU9w 4G32h9ibu0h22MHFqWqzdZw+fDqPvbb507z21n05GOYi08MRjJXQUll/j9pCv7yCvqmD+Umy0us3u ixa5in9w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x1Kep-00000008vQm-02R6; Tue, 01 Sep 2026 09:19:55 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1139159-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: npm Debian: DAK Debian-Changes: npm_12.0.2+ds1-1_sourceonly.changes Debian-Source: npm Debian-Version: 12.0.2+ds1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1139159: fixed in npm 12.0.2+ds1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8057533934818791664==" Message-Id: <E1x1Kep-00000008vQm-02R6@fasolo.debian.org> Date: Tue, 01 Sep 2026 09:19:55 +0000 --===============8057533934818791664== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: npm Source-Version: 12.0.2+ds1-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of npm, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1139159@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated npm package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 10:51:08 +0200 Source: npm Architecture: source Version: 12.0.2+ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1139159 Changes: npm (12.0.2+ds1-1) unstable; urgency=3Dmedium . * Team upload * Exclude fastest-levenshtein, smart-buffer and socks-proxy-agent * New upstream version (Closes: #1139159, CVE-2026-9496) * Update patches * Fix cmd-shim, fdir, ignore-walk, npm-normalize-package-bin, read-cmd-shim install * Update test Checksums-Sha1:=20 16c27a13f07b574da8c98a38f734740d58d531f6 2632 npm_12.0.2+ds1-1.dsc 95b2ad0fb19122d3964f37d9f0fd2064bbe35c7c 68776936 npm_12.0.2+ds1.orig.tar.xz 17e7f08f17684b0146498cc3cef471383960f544 55104 npm_12.0.2+ds1-1.debian.tar.xz Checksums-Sha256:=20 477cd318167343086eafa30954fde1f05e68a2cc25740798815d5f75248c3631 2632 npm_12= .0.2+ds1-1.dsc 2cefc8d543dc3faf176e128e2e27c4cffc08f1ad815cf96ab2566f90d5bfb1f2 68776936 np= m_12.0.2+ds1.orig.tar.xz b6c42aac859a805a84f8369e44b5f64b6bb8995f94219f4f07526d5b6b7222ff 55104 npm_1= 2.0.2+ds1-1.debian.tar.xz Files:=20 a25824fee8b41660ca4bc0c75a47daa5 2632 javascript optional npm_12.0.2+ds1-1.d= sc 26802c903a7c719c447b4bfe32532d72 68776936 javascript optional npm_12.0.2+ds1= .orig.tar.xz 39ff8585f4b5520b6b817bed651f62ee 55104 javascript optional npm_12.0.2+ds1-1.= debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmqWk64ACgkQ9tdMp8mZ 7ukwZg//akEc8v7EvTxDXFG6o0DQA71Yu0nwBQ9v2WVXWcgpV2KBfn7bGpkV7m6A XixE6lrWN6oV7xGBhFCqMwKLsKKNOr/dp8R4mdlSCprWYO9L8xi/KB54ILzCjAEG 5Dj1pnxOV2qEPy5olySDpGhqX8X4ONc55kGHjqe6+Yt569wDrLzu1WN/CZimfCwy goDu/33nnTfWK9zuPSKQfxi7lqmBQDW3ZPvWI0Pnn02AQiaSvcLmr0SxHbFljzR+ 3rPcOc2gH51HWy1uOMj23035WtaQ4eB3flA/td8NXFqxy/jc+dnfzpEpZraK6NTV 5kaSzJkUnIBpHXqM3wveRamYK1/jfo9JFkUnkesxgIdTNB1/UDjqbNFty5wuVsEO 1YsBh23f/U3ajGHrWQJZ5lNah4p/zsUc40agbwssafIepPurWxqHlrwYLNivXY7c PzB8U/e8OnQKq0aYx//6EenUlSMN/1e6gkqFw/U6wuCYqzgb5UNWcykjLic7UkXb vlovCNSDz+VzBWHP1tndxCyHxDMA6qbCdCImlVpX69kDcBwcyZFwZd7PHOFL/SJy +eqGZ+/2AdCZV1u0To73vSoBWm07Em1SK6PxgmGjgC3Xn6TIZ9w1FZBPdQauAzxN 8MiDlIZdx+6IXqeSLTMTZ/Dhkjo2AgPfVcyIz2HTwmn/hsCyBd0=3D =3D7dmg -----END PGP SIGNATURE----- --===============8057533934818791664== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCapaYugAKCRCb9qggYcy5 IaUsAP4i0lQC2u6KKDz1MffWTiXTDkTE+Dh1e3ZCDfLudpsScgD6A/FW3bLv/j09 x73C6IQYakN6jymhMeg+QM1vfRQzSwY= =HR0A -----END PGP SIGNATURE----- --===============8057533934818791664==-- ]