[From nobody Sat Oct 3 06:51:05 2026 Received: (at 1149715-close) by bugs.debian.org; 3 Oct 2026 05:49:00 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.6 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS, SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 87; hammy, 150; neutral, 139; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:44830) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCscE-005liU-2h for 1149715-close@bugs.debian.org; Sat, 03 Oct 2026 05:48:59 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCscD-001vHh-1I for 1149715-close@bugs.debian.org; Sat, 03 Oct 2026 05:48:57 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=X0m8+VbNrzzkpIfURgEiJqn6X8cyjyiwF/wMCb1voeU=; b=e0XwM/jdGMmg00tIBEVHVXT324 MHS1i7kY9q0hCICNSInh60BqHdNsNdjy/BhNgV2yVP6eRr12kHf9vVjq3X3KgM2cgkKyUe8ThlFIQ WFsz2TKdoU3QrNGLzvljE78wTfwH91kRPjC3KSFQ5AAydbUkxspP1VbIao2KIjpssLtVMw5JI7iuV yolCjFKoy1DAF3U6a+oc8gv2FYYZ+NxTabAbDSwxKz30YuyA1SmZVKQlSePPWTYXSedIJgP/tbdhX zOjF3Pvoji/dW7xDHH34vzBUsJiOfYlZkzAsJ/KFe88JEzVwJt9aIRuZ9lbfXxAE7APrbFLrTRam7 3PktLWvg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xCscC-00000006eq5-0ee2; Sat, 03 Oct 2026 05:48:56 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1149715-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-svgo Debian: DAK Debian-Changes: node-svgo_3.3.5+ds-1_sourceonly.changes Debian-Source: node-svgo Debian-Version: 3.3.5+ds-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1149715: fixed in node-svgo 3.3.5+ds-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4103378342114470999==" Message-Id: <E1xCscC-00000006eq5-0ee2@fasolo.debian.org> Date: Sat, 03 Oct 2026 05:48:56 +0000 --===============4103378342114470999== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-svgo Source-Version: 3.3.5+ds-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-svgo, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1149715@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-svgo package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Oct 2026 07:29:37 +0200 Source: node-svgo Architecture: source Version: 3.3.5+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1149715 Changes: node-svgo (3.3.5+ds-1) unstable; urgency=3Dmedium . * Team upload * New upstream version (Closes: #1149715, CVE-2026-29074 CVE-2026-73650 CVE-2026-84369 CVE-2026-84370) * Add dependency to node-sax Checksums-Sha1:=20 ad75b15909cfced409bc454da39dadc919019772 2150 node-svgo_3.3.5+ds-1.dsc bea393ddb3304cb74ba6adcf55d7bac1e3a1fa40 197072 node-svgo_3.3.5+ds.orig.tar.= xz 2374bdcca48b8c3aff30eccdf2271e6ea81edc9f 2832 node-svgo_3.3.5+ds-1.debian.ta= r.xz Checksums-Sha256:=20 d13f6841564625d98fd88faffde3b8245c47e5bb0a687c3a88abfd360ec483de 2150 node-s= vgo_3.3.5+ds-1.dsc 4a04cac89c0d00deade1d68a56d6996dab897bca5975d0dffe546973c78a3577 197072 node= -svgo_3.3.5+ds.orig.tar.xz 3915061a81ffd2c60b71ae439f52917b7adb0ca1ca67ca74b4da8c5dab420e94 2832 node-s= vgo_3.3.5+ds-1.debian.tar.xz Files:=20 4de8909c1d5bd3952af2146976a2d5bb 2150 javascript optional node-svgo_3.3.5+ds= -1.dsc 1dbf3ccdcf82654cad19dc6e8e8a5cde 197072 javascript optional node-svgo_3.3.5+= ds.orig.tar.xz edb6fa6e72b40b894eb7ccbbf34dc693 2832 javascript optional node-svgo_3.3.5+ds= -1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmrAkw4ACgkQ9tdMp8mZ 7ulOOQ//VDLjld2xUyMbCZGSmjM5fGvA71mHnePsPgi0KyI9awG26n3NJ70RvASg 2k/P69NvSLz6dBH92eenFx4IbQzpUKiY+ywHQKeJfKRu8FaP0PLOJpKBZzCSlXef UFIILO+NmrnKUHGPCg67C3QPM2OTDipAmANFFeGIbdoa1CIbspGO+8V0EXd1ToE0 lVSbTAh3pcPR7qYg4RKPv4N7wBFQmSBdtTIo5TkaAk1WGn9ymMCNw9gbSleaemdy /hndCuu7HlXps6IH/7/1eHQawxEr41lkMJSGlgqo9WYB/Vs4HfW3EFBeABHcLKiI uyF3kJENBCi7pId3DOFkz9+4z9LjJNuXetYVjJy85EcSex8nJo+s8WY9gyt2y2Ks MHOKvAPBQyNyJyb+O18RPPpmVxYQpdGN5xA9Q1z88xXQKzzTsQAPIXaw91av+II6 8P4OJCjBKiZ+1pJAiKl3X/7avN31Kj9eJMD3cmKHoApzif7UDM0qY+qJOHXCH7qy n+ukGEfUN5dObSEJzYpSK+bbMqlu3ZobScF6l949uM8rfPqSr0e1e1IlU4qdvoTM iaw6upOrGWq3AoX5VXA55X1Hf2x/TqGGl3qfBXmL8LTsRjzxLvRn+t2/9mCLRGWl hSd/hqTXgv4VSHGNVln1tJ4rGTCLyJ0MdUtWus9ABdjk5whACzA=3D =3DEWbj -----END PGP SIGNATURE----- --===============4103378342114470999== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasCXSAAKCRCb9qggYcy5 If1IAQDgVMpgFbfP/p40bRkAoDyFcNYiyEmPAEmgZhYoUD2zQgEAt9qB+DTdyiaM ydgGpbAbCLL7pRgpoC5+rTJ+7TP/5Qc= =Lgvg -----END PGP SIGNATURE----- --===============4103378342114470999==-- ]