[From nobody Sat Oct 3 08:21:05 2026 Received: (at 1149653-close) by bugs.debian.org; 3 Oct 2026 07:20:17 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.7 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,MONEY,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 87; hammy, 150; neutral, 117; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:57022) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCu2a-005yv4-27 for 1149653-close@bugs.debian.org; Sat, 03 Oct 2026 07:20:17 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCu2c-0021LG-1z for 1149653-close@bugs.debian.org; Sat, 03 Oct 2026 07:20:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=UBZoQWZXZ0zFoRhGqg2OrhGlfsftUAmcXfLjIIg7qcI=; b=SsckD9ejbblgix4Wg3dnUlFFEA fQ+XNEUryjwn46kYdeQYCGj/n/2CUCvNLCBSoyVnkUROYIuC+ee3iEwI5n92nCv70b2/qGqQdrBkV 1Dko06AnbeLrLNxpzu0p5ytCeTFnxo+Vp+4fM//T1yeok/fGH1gwaRRoB+alUhejRaL+iwf+sdVmS lO6V+QKlf51c50B4OUvvcnWV4wNCnWYgUP7Ri7Cme4yuDPMGRpPSN1aad+6GOzrp+9epbFwnFPBEE rXZSgfj7BRvxLt9KXCRgtoKWpYhHRvt3cDYBWRgmol6YiDPeYcQG/XV5XizvAGeLI8hcAqOrcaUJq HgEFKymA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xCu2a-00000006scA-1YI5; Sat, 03 Oct 2026 07:20:16 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1149653-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-katex Debian: DAK Debian-Changes: node-katex_0.16.10+~cs6.1.0-10_sourceonly.changes Debian-Source: node-katex Debian-Version: 0.16.10+~cs6.1.0-10 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1149653: fixed in node-katex 0.16.10+~cs6.1.0-10 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1051580309668736108==" Message-Id: <E1xCu2a-00000006scA-1YI5@fasolo.debian.org> Date: Sat, 03 Oct 2026 07:20:16 +0000 --===============1051580309668736108== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-katex Source-Version: 0.16.10+~cs6.1.0-10 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-katex, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1149653@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-katex package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Oct 2026 08:53:42 +0200 Source: node-katex Architecture: source Version: 0.16.10+~cs6.1.0-10 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1149653 Changes: node-katex (0.16.10+~cs6.1.0-10) unstable; urgency=3Dmedium . * Team upload * Prevent prototype pollution in settings, namespace lookup and group restoration (Closes: #1149653, CVE-2026-103923) Checksums-Sha1:=20 b2b38ffe5c909050a6aa512445442e58068fd644 3471 node-katex_0.16.10+~cs6.1.0-10= .dsc 6a4ebc5451d9756eb16858b74ea66212a6ec99d8 40444 node-katex_0.16.10+~cs6.1.0-1= 0.debian.tar.xz Checksums-Sha256:=20 e9d1c3482823a26d0003ffd95566959e562603af52558031e401490270857d8a 3471 node-k= atex_0.16.10+~cs6.1.0-10.dsc a33c38ea17a985a7abbdc0a8b4ce09b08b718eafba9fa21b37a2f378eff5d8d6 40444 node-= katex_0.16.10+~cs6.1.0-10.debian.tar.xz Files:=20 b1f9c5c4f13d8a0016bfd75838e449bd 3471 javascript optional node-katex_0.16.10= +~cs6.1.0-10.dsc 7d70303baad6efa51469780808844cbc 40444 javascript optional node-katex_0.16.1= 0+~cs6.1.0-10.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmrApuIACgkQ9tdMp8mZ 7ul4dQ/+N/4Civ2HJcEPmLKFVmNksa6QlB7pV0C8Zkj+XTl39RqiYzwi7uCJ/jTe UGjILOtjr3323MwZj6E//764r5hrl4JzaDTRf/FxMcpz7KJY+tPRqBGBs9UYiiwD AzHAnCX8KdhLx4lKukPv80Ozw2v98JbHKNp/4WZGGK7rQsS42Nr8e1PUjOveEkla goObS7N9Y2zecBIGP4Lvi/V97TA6qYx7ZP+b2jI1MlNMTmvaPx8mlt0pFepzGHRm rqDnZysbiptL9HgVjlOnnMYKCqyhNsmfgxZrZ9D1Xc4DF7y+oMoCAE87aN7hQB0f BnH6eIaj5Cg/Kskccw7s/jeK3fq4MMqzsaNX4uC58sao6adZkn2vGqHj614SdBMr AuUB5uoCUvr3QEJ0Q1L/zY8/Em1lojHJM2AJADbeyf3nZbifIRnxhGkcf8TiMtNX pkcQdI51yhhB393ca7M+0CrddkQlY+C46ZU0jMNYAOGIPAWMDmZstG08AUGj5+Tr 48g7/Md1ShNu8P1kPT4bYJzH3rXa/dYwzHmJVZcNKrZBQz5wdey5wUuXTS0q7iEc 31CBXq6ba9BsUv2UlCTUzdMURqxMG2szlQo92IwoSsmw204VpusD58rTax84c757 Q/PIy1CcuctAPdOtQgRBiXjAxHmFfh3rGs4o91Nj6d2OVWu/w2w=3D =3DROOt -----END PGP SIGNATURE----- --===============1051580309668736108== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasCssAAKCRCb9qggYcy5 IQMrAQCi0qI0Gx/0iq9IGQIC7k81pKaruelcHBvjnEpHE4h7sAEAxtndolnltXT5 7toVDD36OOz3W8RpxomR8NhchbGXKAc= =iIaY -----END PGP SIGNATURE----- --===============1051580309668736108==-- ]