[From nobody Sat Oct  3 07:07:07 2026
Received: (at 1149713-close) by bugs.debian.org; 3 Oct 2026 06:04:48 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 88; hammy, 150; neutral, 118; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo.
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:38018)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xCsrX-005npU-1w for 1149713-close@bugs.debian.org;
 Sat, 03 Oct 2026 06:04:48 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mailly.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xCsrX-001wft-0K for 1149713-close@bugs.debian.org;
 Sat, 03 Oct 2026 06:04:47 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=NarIgS/dALTu8k+hWr7GtD08zUHwdNqR6JVIlZbmy3Q=; b=L2g4MxYgpdSaHHmx6Tc0RhkM2+
 Efz7Rz65y8WTq1cvLW/UuGL9G9PuY9GCb0IWHGU52XSwBExi2ysIWb0DWKC1b4kaVfPgBSo9vAEpr
 6qKPoh+o1TRM1TL4PAt4CHBjsXOEC9+rBCZZjNAodd81eSVkTRYibU1PoBRqkY2ednaeS0F+SwTH2
 GsyET++4TDt64VyYxvy2arFy+C9sKFBuavMmsuPGKCgNRAH3kkc7hZN3SSYz7CGR1MHlw5vcUmo6m
 hG3Y8PBoXjM9xE0bo1XdfdFiCfpzJrFRPH7KbJnSqC6Gc8J6G1S6zFadJqEAuZZB9G6s3LHbSeHwG
 QHxL4b3Q==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xCsrW-00000006h8r-1H29; Sat, 03 Oct 2026 06:04:46 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Xavier Guimard &lt;yadd@debian.org&gt;
To: 1149713-close@bugs.debian.org
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: node-shell-quote
Debian: DAK
Debian-Changes: node-shell-quote_1.12.0-1_sourceonly.changes
Debian-Source: node-shell-quote
Debian-Version: 1.12.0-1
Debian-Architecture: source
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1149713: fixed in node-shell-quote 1.12.0-1
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============5734681166041835877==&quot;
Message-Id: &lt;E1xCsrW-00000006h8r-1H29@fasolo.debian.org&gt;
Date: Sat, 03 Oct 2026 06:04:46 +0000

--===============5734681166041835877==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: node-shell-quote
Source-Version: 1.12.0-1
Done: Xavier Guimard &lt;yadd@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
node-shell-quote, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149713@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Xavier Guimard &lt;yadd@debian.org&gt; (supplier of updated node-shell-quote packag=
e)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 03 Oct 2026 07:36:07 +0200
Source: node-shell-quote
Architecture: source
Version: 1.12.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers &lt;pkg-javascript-devel@lists.alioth.=
debian.org&gt;
Changed-By: Xavier Guimard &lt;yadd@debian.org&gt;
Closes: 1149713
Changes:
 node-shell-quote (1.12.0-1) unstable; urgency=3Dmedium
 .
   * Team upload
   * New upstream version (Closes: #1149713, CVE-2026-102422)
Checksums-Sha1:=20
 92fb73ae6b036f5dcc308a51769596064d16e333 2097 node-shell-quote_1.12.0-1.dsc
 768c44f13ddab55a2967cb739556e2fc68563c38 32936 node-shell-quote_1.12.0.orig.=
tar.gz
 542c15e673272646fb82bb03ad1bf0f26ac7bfec 3152 node-shell-quote_1.12.0-1.debi=
an.tar.xz
Checksums-Sha256:=20
 2f5d78e08835ee541bb9d80d53967d32f8e59e6e0e5e9370d3734d8c70af1f6b 2097 node-s=
hell-quote_1.12.0-1.dsc
 615d46e99b0ea9d6ba73ecc19b6920962100f8053b06ec892b9623e19cbe451f 32936 node-=
shell-quote_1.12.0.orig.tar.gz
 542e393fdd051601df04d9a0c2ccf89cb2176d388ffbc05dd87118b7693c5569 3152 node-s=
hell-quote_1.12.0-1.debian.tar.xz
Files:=20
 a81954f3f2e301b555b01e287e189930 2097 javascript optional node-shell-quote_1=
.12.0-1.dsc
 31c5a09b3aeb0df8a6b8782ae4e9050b 32936 javascript optional node-shell-quote_=
1.12.0.orig.tar.gz
 69cebb818dc5c5ec1bbe586d0e44184e 3152 javascript optional node-shell-quote_1=
.12.0-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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3D
=3D6q1L
-----END PGP SIGNATURE-----


--===============5734681166041835877==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasCa/gAKCRCb9qggYcy5
IWPqAP9XekAPxPbH05/Ts/fJcpSeAPhb5GauD+wnal38AQ38GgD/WepXeoemptHP
H3+3plZz8jcZl7o3+yR0UrNc5HelDAI=
=Uw3L
-----END PGP SIGNATURE-----

--===============5734681166041835877==--
]