[From nobody Sat Oct 3 07:51:07 2026 Received: (at 1149649-close) by bugs.debian.org; 3 Oct 2026 06:49:02 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 93; hammy, 150; neutral, 129; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59960) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCtYL-005uFx-0g for 1149649-close@bugs.debian.org; Sat, 03 Oct 2026 06:49:02 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xCtYJ-001xnG-2A for 1149649-close@bugs.debian.org; Sat, 03 Oct 2026 06:49:00 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=vIRj+1x3DEJg2YRxPqc3UOz7E9WILwMz1AUbS5p97c8=; b=s0QHgZ34r+G6AxJG/QFpqFXYgQ DbqO29iJwhykjKwVX2XhqNhSiQigDBCVcTzQ/3zQw5e+bbwNjd7ASi2FaASdY2o3iLs+Mfom2Lrdw IHW6ihZ2gLpw0xeYHUMVDYvXAE4jLX1l01V5yU9cCIcN6LakBz+VH48QAg/fy9cGdnRUy/jXJn13l UbhTk0KfDSNerkggDqPashxnzsoUzYmYTWcwR4WIlfOJRPaj34SvTOx6CcqAUi9PzprLXwDlILCcj 2TeOS8Q3092uOAdzr2teCuexc98tFTiGXBI2yINrHiWgpnl7VEHfoC49/0GF5XrejJBQlGXDGk1PP Rcs5qzGQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xCtYI-00000006nsx-1z6d; Sat, 03 Oct 2026 06:48:58 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1149649-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-brace-expansion Debian: DAK Debian-Changes: node-brace-expansion_2.1.7+~1.1.2-1_sourceonly.changes Debian-Source: node-brace-expansion Debian-Version: 2.1.7+~1.1.2-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1149649: fixed in node-brace-expansion 2.1.7+~1.1.2-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============9113862540585294459==" Message-Id: <E1xCtYI-00000006nsx-1z6d@fasolo.debian.org> Date: Sat, 03 Oct 2026 06:48:58 +0000 --===============9113862540585294459== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-brace-expansion Source-Version: 2.1.7+~1.1.2-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-brace-expansion, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1149649@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-brace-expansion pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Oct 2026 08:20:17 +0200 Source: node-brace-expansion Architecture: source Version: 2.1.7+~1.1.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1149649 Changes: node-brace-expansion (2.1.7+~1.1.2-1) unstable; urgency=3Dmedium . * Team upload * New upstream version (Closes: #1149649, CVE-2026-102276, CVE-2026-102277, CVE-2026-102278) Checksums-Sha1:=20 2f63af9ce789c96b5fd2d7f4c64dd1c5d57d3b3b 2578 node-brace-expansion_2.1.7+~1.= 1.2-1.dsc bb3f1ed53b210d00e38e2b81e2d60a2f76e0153a 1538 node-brace-expansion_2.1.7+~1.= 1.2.orig-types-brace-expansion.tar.gz 7316473e6ea590cc139b6dbd9cc180bde1d8e1c8 24429 node-brace-expansion_2.1.7+~1= .1.2.orig.tar.gz 88bbd6cc8f80635f960d363a2ddaeb74ba674e54 3448 node-brace-expansion_2.1.7+~1.= 1.2-1.debian.tar.xz Checksums-Sha256:=20 dc21b2b2732c05df53cd98bba3dede24c36a7ca88aaaf4356803ff8e5bf6114a 2578 node-b= race-expansion_2.1.7+~1.1.2-1.dsc 6306b27f6ad1bde7ed62f417d9bffc9f62ecd1627234cfa2e67cb363f6580aa5 1538 node-b= race-expansion_2.1.7+~1.1.2.orig-types-brace-expansion.tar.gz 14ad0aa72cb2626de214bca6ef2662d7256a7e708efdbcd48500f00ea7fd30bd 24429 node-= brace-expansion_2.1.7+~1.1.2.orig.tar.gz 39f0a7ac86f7f6d3d2940a20ee70821ef2f4947846fb36f1feef28b1c024aa0c 3448 node-b= race-expansion_2.1.7+~1.1.2-1.debian.tar.xz Files:=20 715459a851ae6cfa3a151ab7dcafcb4d 2578 javascript optional node-brace-expansi= on_2.1.7+~1.1.2-1.dsc adb508b32d83eddca9e84f2cee777e5c 1538 javascript optional node-brace-expansi= on_2.1.7+~1.1.2.orig-types-brace-expansion.tar.gz e1088223f33ff1882481833b2839d42c 24429 javascript optional node-brace-expans= ion_2.1.7+~1.1.2.orig.tar.gz c690d90120b575f21021006ab15dbfcc 3448 javascript optional node-brace-expansi= on_2.1.7+~1.1.2-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmrAnuYACgkQ9tdMp8mZ 7unG9g//Vb+a/IPEWfxPhF+at1zQ+ZrHgIk6iK5XVVzT1Vb43H2Yc7Lhqoim1G0q kV92J+oZVyvhhcgvrJfZ5+rueJbpONvHEJKKo6hMrdE0Nsloc7fVEqfbgcHjpAVS vMl7J5NwS5yWNPcB25C9grVdcbgoZ2thefJbV0Ubq5u3eqo59AdEZWbb4lz7icEK VvnIW4UQ044ZK4obBNfkUyMcBlDWxVCAkFTmCwpsqTujCEBwVXo8q1wwHJMSJKjG P70pHVCGLcJPmbV+nH5lKhFxUbCleE2KvUi114Qo95cXDooZDvGy2gis/ISCCW1B iqLRA1R5VR8ds8KV+lrYFt+FltlAHcwnB1NalJEwSvE9lIfCvBwdDGky3xhrOzY3 i3+ObxvGaE2pcdOKJeR+4o0QYfLv3dpuN1e4PgH+v/z5ucE4l1G6gcedzISwfXx5 ShPRzGkl5oT4o7wCfeaKmJzaSsGnf7Umz1XhrnJLhTPYobMtFvU4Xgg4JacV77RC Y1HjFuNJTtPGqtXEEAWxk1V+rjNcQ1FybjNGr2ifirNWNN5gE0fSYOyXtnetATik po58Xxu7NoZ95fZIRHCP7nCf1ftzYKu0qVVO27UwXqvaKh26qlV8kP2ZxEsP1Iak yetPjzDV+Ul53cfxOdgR4o0Xk5QEBBBkhCpAZGNaSK8JiahbxmE=3D =3Dwhhn -----END PGP SIGNATURE----- --===============9113862540585294459== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasClWgAKCRCb9qggYcy5 IT5dAP0do/IYDOFPTGBF5rKdD/Eu3a2dwlbhthbh4bVRSMI3AAD+Mr9g2vhmjeTZ oDw1Knl9LyntHZ4G7raUnJn8y5nOvQQ= =3QxZ -----END PGP SIGNATURE----- --===============9113862540585294459==-- ]