[From nobody Sat Sep 5 11:51:09 2026 Received: (at 1146745-close) by bugs.debian.org; 5 Sep 2026 10:48:47 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 90; hammy, 150; neutral, 164; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:51920) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2nwz-008d61-2P for 1146745-close@bugs.debian.org; Sat, 05 Sep 2026 10:48:47 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x2nwz-002lgQ-1L for 1146745-close@bugs.debian.org; Sat, 05 Sep 2026 10:48:45 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=rvwVEf642iOHUjrP+f1mtSASRlLOvF/rPG2UBzhAaAk=; b=MuXJpy6iJvZ//RW/6k0BSBzfNM +gVXjL8K4btNnwPmYPudKhX5Y1bsKu1dxKM0xZoCxxqWmU/Q8D1ANN9DeCnI9QDU3Rvg8GIVIN02v /nwKeJnhE8PCHeV5EHzsNfr4LICum57uFfHAWjoO/T/7zcfhIhMLVyL7f0w2OuNBuF4RtNRJWB3QM 5+jqO7dqSjjFQpmncaR1tem4wJxmX5MMTlTZjAsViGJ/tdL5VcC7PRC0Klcajb1xec8r0npI9Tswg v6G40FvtPBaBmpJ0VBL73lfZ3ENBhbhge+R8n6YtjpFsTulADshmXDi9uPMlF6issVev6TKsD1B3b 73WgWiSA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x2nwy-00000008c0n-1rZ5; Sat, 05 Sep 2026 10:48:44 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1146745-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-undici Debian: DAK Debian-Changes: node-undici_8.10.2+dfsg+~cs3.2.2-1_sourceonly.changes Debian-Source: node-undici Debian-Version: 8.10.2+dfsg+~cs3.2.2-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1146745: fixed in node-undici 8.10.2+dfsg+~cs3.2.2-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6899673031108402062==" Message-Id: <E1x2nwy-00000008c0n-1rZ5@fasolo.debian.org> Date: Sat, 05 Sep 2026 10:48:44 +0000 --===============6899673031108402062== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-undici Source-Version: 8.10.2+dfsg+~cs3.2.2-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-undici, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1146745@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-undici package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 12:21:53 +0200 Source: node-undici Architecture: source Version: 8.10.2+dfsg+~cs3.2.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1146745 Changes: node-undici (8.10.2+dfsg+~cs3.2.2-1) unstable; urgency=3Dmedium . * Team upload * New upstream version (Closes: #1146745, CVE-2026-18149 CVE-2026-18540 CVE-2026-19534 CVE-2026-84890 CVE-2026-84933 CVE-2026-84947 CVE-2026-84961 CVE-2026-85008 CVE-2026-85014 CVE-2026-85024 CVE-2026-85152) * Unfuzz patches Checksums-Sha1:=20 738b23d44b26407a842cef0c54c5b483a565edca 2680 node-undici_8.10.2+dfsg+~cs3.2= .2-1.dsc 30a39c596f639e753200d7004b821cab708c909a 43560 node-undici_8.10.2+dfsg+~cs3.= 2.2.orig-fastify-busboy.tar.xz cb7e58e8a5e2f9399dd2654006f8cb153a80754b 773532 node-undici_8.10.2+dfsg+~cs3= .2.2.orig.tar.xz acbad357bbc32f070b6f23b9b6efb601055d5464 215984 node-undici_8.10.2+dfsg+~cs3= .2.2-1.debian.tar.xz Checksums-Sha256:=20 f3c44f2bd48c9e7a82872906f24acc3b29b9681cd933d07b42db113edc7e0669 2680 node-u= ndici_8.10.2+dfsg+~cs3.2.2-1.dsc b934f917c6e0d2a806deada3cca11f1d07054a2b5e26620fb824f4b9bd4f2174 43560 node-= undici_8.10.2+dfsg+~cs3.2.2.orig-fastify-busboy.tar.xz 77334daca5e581e632dcde5f9d4a11d66f62848fa4c05d3c098fae269731af13 773532 node= -undici_8.10.2+dfsg+~cs3.2.2.orig.tar.xz 1e5fbd76b1960c1bee58ecde1d2249ed5ca13ed65311cc82167589f2081ee870 215984 node= -undici_8.10.2+dfsg+~cs3.2.2-1.debian.tar.xz Files:=20 75bb09f284a3c154dc4ceede4ffbba40 2680 javascript optional node-undici_8.10.2= +dfsg+~cs3.2.2-1.dsc e40cf1089f99c7774aebdd77c3c3c77f 43560 javascript optional node-undici_8.10.= 2+dfsg+~cs3.2.2.orig-fastify-busboy.tar.xz b0567039eefd3606a0e3b6aafd0ecd0a 773532 javascript optional node-undici_8.10= .2+dfsg+~cs3.2.2.orig.tar.xz 5c963acf7bffd41263b994a074234b6b 215984 javascript optional node-undici_8.10= .2+dfsg+~cs3.2.2-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmqb714ACgkQ9tdMp8mZ 7unwFg//XXJB+JTu6fvsbSDtULrDIs7lNSXezAlYobzrMShfD7O7h+shADKqjZ5Y MJhovAHgzRJENd0snAwlWzuUNzqgPYpxSS3P4l6a5yqBh0lYgFymuzOAZirxWKNT DfFod2xyRe6MZLVCm6WZUlqaMHKZcbBVBeu7fNTrNpw3jtogU880YLRGBqO8d6vL +3U0vDNwlrBW+b9GRLNApDtzVwhrsSRuba8EePGsaitCPivpScily8eRnAblduAV U6FU1QBMN3e9sH7V6UKMml+9ueK7+O4VupO4Kq6LYlCI8iThgDq//Qp4Zrt7X20Y 4HAHHFULMAhDUMFYFiRvyzyfBOIWfTGGVXAmQT5LFjFwBQhHaJBEdFDKb362ZWyI GuaNamm7U4jCcPtJFmUW23UvStS/wfHV321NSQNsFq+TLKtpCeo3wPMwCvfAHf9k wOh0wSNuVBwbMFnLpyMNeMyaF2SwQti8tQ0GnANrgSiQv78H6yJorQeOCXH3GbmQ Q6HqubiIFHdfRf3NFRTnY3t9mll55HdzhkhUVGSJPx+fgsiredNMLBzlG2ea1QSk BHZzSqe36buh6o16TgjmRVxM0J8W1CXJMugpir8yMzSpyroprMUXB4m6R6dw+TOn pV6hxWed5MHJteioeP666NWs11BN48UmZ3pNkvwBb4ZTc5kMzsM=3D =3DpDSe -----END PGP SIGNATURE----- --===============6899673031108402062== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCapvzjAAKCRCb9qggYcy5 IZg5AP9FK3iURErxPCLwqCF0ZLcoxvKJU57EIE/+XxS0YfsxLwD/TV0GSqFyCt2r DzbU+7RTH0RpiahxZpcd4KYKHOlU3wA= =ULam -----END PGP SIGNATURE----- --===============6899673031108402062==-- ]