[From nobody Wed Oct 7 18:21:08 2026 Received: (at 1150246-close) by bugs.debian.org; 7 Oct 2026 17:19:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 103; hammy, 150; neutral, 125; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:44878) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xEVIJ-004UXV-2i for 1150246-close@bugs.debian.org; Wed, 07 Oct 2026 17:19:07 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xEVII-006al9-1F for 1150246-close@bugs.debian.org; Wed, 07 Oct 2026 17:19:06 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=ewHZ42ua7bcUBqYLcwXW81NdkNLtLKNOuPSMNm0tiq8=; b=H0I62M50Ew0Bg8aRCSP390TbjS 4l13uX+L3kOpW28o+FMkwx5CAGvmNfOAsJAS+/NHn5wLDFwLhG/wmdc2qSlUorHKkU4VLOMSHrca1 zKwr+bTlcldoHVnFFgx5T9jaHLSiGrJnEUvs3XdMzEB5IZppBsB5Ep44SCCi9Gj+IoZqPDSjXI8Vp G9pXJR9JXUjYxziIpX97BVD+XIdkoh/gXSwd2CUkCNuS/7jknX9mt6o17wJxL5DRZHWr3Rq4sOb3R zMx+yFqoKH7H7nYhxCKaHeBuFmE1cy2a4mG5CrcgdNTUthbnciwNQsOQAR4PwCiDHq5+nTPxTpzVZ EWmB5NTg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xEVIH-00000008hAy-1oSg; Wed, 07 Oct 2026 17:19:05 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Xavier Guimard <yadd@debian.org> To: 1150246-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: node-handlebars Debian: DAK Debian-Changes: node-handlebars_4.7.10-1_sourceonly.changes Debian-Source: node-handlebars Debian-Version: 3:4.7.10-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1150246: fixed in node-handlebars 3:4.7.10-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3274486006471562805==" Message-Id: <E1xEVIH-00000008hAy-1oSg@fasolo.debian.org> Date: Wed, 07 Oct 2026 17:19:05 +0000 --===============3274486006471562805== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: node-handlebars Source-Version: 3:4.7.10-1 Done: Xavier Guimard <yadd@debian.org> We believe that the bug you reported is fixed in the latest version of node-handlebars, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1150246@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <yadd@debian.org> (supplier of updated node-handlebars package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Oct 2026 18:59:01 +0200 Source: node-handlebars Architecture: source Version: 3:4.7.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.= debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1150246 Changes: node-handlebars (3:4.7.10-1) unstable; urgency=3Dmedium . * Team upload * New upstream version (Closes: #1150246, CVE-2026-106444, CVE-2026-106445, CVE-2026-106446) * Unfuzz patches Checksums-Sha1:=20 62a988e63f328e506e2380875ef48b6a9a6a3aa3 2701 node-handlebars_4.7.10-1.dsc 63705fefad2c457ac6c8301c09cf51351d73edf8 239436 node-handlebars_4.7.10.orig.= tar.gz 59ab997bd7f2b1b65e0894101246d264798adfc4 61628 node-handlebars_4.7.10-1.debi= an.tar.xz Checksums-Sha256:=20 aedd8f3812cc1b7c6b7d84e028d8301fe851f9f20f2fa32829ec549d3405f157 2701 node-h= andlebars_4.7.10-1.dsc 07020f7e9e880e10c4652ed349d798deb14e2977919844fbeeb31f3164f886e9 239436 node= -handlebars_4.7.10.orig.tar.gz b5853ef43744fa24848f03d2bcfd95cfad8a9cb0ee569027a29f0d6cd481db56 61628 node-= handlebars_4.7.10-1.debian.tar.xz Files:=20 95dda72546ee27cd617854c95e296d4e 2701 javascript optional node-handlebars_4.= 7.10-1.dsc d56b99f6961f04f9480b6c418a5ffede 239436 javascript optional node-handlebars_= 4.7.10.orig.tar.gz a8e44dee51c96fc45a8b6cd3a3b20cb9 61628 javascript optional node-handlebars_4= .7.10-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmrGesoACgkQ9tdMp8mZ 7un5CA//bK2MbpK6WiVKO8qwE1oPN9MvU1KUQuCiLwkbWOZ+zjbMEM/Xsj4KRnRJ G0bWH+E6V6JnmIO8sz5G7ZZSKc0aFLBVUqxEpucGGPXQruRXA9aGiNwo2I/fJ1Qi d//BQ1WbbsNzfSnCC4z/87pGKSyigAe+xBK1xjD0TNZmVDi5mrplENrcXzuxI62f WGkgsRVkD/CjH38H72ypExnm2HqE3Aa+NGGq5RJ9E1r1SASsP125147c+oLGbB5c j1gKoNrmipm6617Kab+gHlVJyHU8tEYVNBgz1ew4YLNFMBfgU+Brys50UfSMwVYo LX1ZB9xQ9uOIMEMSOkyVBWqocqrP/ogZ0QIbzA8b4MxnRXay4tSJNWpiV3hrxG9L P9l4lmOWtZg1EBXoY/JPzx0aiT5YkQBvzHWawgTY7M6lsln9yC/9/N+RHK2s90z6 KAuhfICdtAlFewiukMwb6/uHNsiLgVrw/w1WiY38C9KZlSZtX45LPx0hOn9tBJYm OpeFVuVTk/u4qOfCVEznYH9u2elKna+zuaiMq0zSKKmHAfz08ErXV6+E0lUP1Nbp Zk1pcWxOd6WbNJScOxTh28ncBM+5FqIv7KzTHYw7tx/boAytEhoOftu0k8zOLZCI 5v3LHO3CmCqbfgBgZJeqOHQNYjQuMxZd28n1FAtiSQ2S6sYfFD8=3D =3DkaE0 -----END PGP SIGNATURE----- --===============3274486006471562805== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCasZ/CQAKCRCb9qggYcy5 Iec7AQCSSd8fuHd4ScarWF8pshXzL4g/A3Jq6xZ6EX12XeFmSgD/TkILLeb3fVB+ 8suKyaDRKaI5lsyaDkuYyShK7zkNXwA= =AqcK -----END PGP SIGNATURE----- --===============3274486006471562805==-- ]