[Pkg-javascript-devel] node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1_sourceonly.changes ACCEPTED into proposed-updates

Debian FTP Masters ftpmaster at ftp-master.debian.org
Sun Jul 9 10:47:07 BST 2023


Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 31 May 2023 15:52:45 +0400
Source: node-undici
Architecture: source
Version: 5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Yadd <yadd at debian.org>
Closes: 1031418
Changes:
 node-undici (5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1) bookworm; urgency=medium
 .
   * Fix security issues (Closes: #1031418):
     - Protect "Host" HTTP header from CLRF injection (Closes: CVE-2023-23936)
     - Fix potential ReDoS on Headers.set and Headers.append
       (Closes: CVE-2023-24807)
   * Increase httpbin.org test timeout
Checksums-Sha1: 
 f63b6c8a5c594a7521861f4b16125bca7f9c0998 4248 node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.dsc
 bfa4f8cb06a9587e3c04c775419aeb6a013321ed 31384 node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.debian.tar.xz
Checksums-Sha256: 
 2299cda40966a779ada72a8148a4efff942296d8abed1d31f8c157a4903f8d12 4248 node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.dsc
 6a0dbca4b3d4a3d059c34dfbe93f9b4359f249f45eb0ef9e66275dae61dd3e14 31384 node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.debian.tar.xz
Files: 
 2765c38f352494537f1861c7edfe2521 4248 javascript optional node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.dsc
 6cb8f4ce37c2f817e935c100db959a2b 31384 javascript optional node-undici_5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=yhSP
-----END PGP SIGNATURE-----




More information about the Pkg-javascript-devel mailing list