[Pkg-javascript-devel] node-tar_6.2.1+ds1+~cs6.1.13-8_sourceonly.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 08 Mar 2026 11:46:04 +0100
Source: node-tar
Architecture: source
Version: 6.2.1+ds1+~cs6.1.13-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd at debian.org>
Closes: 1129378
Changes:
 node-tar (6.2.1+ds1+~cs6.1.13-8) unstable; urgency=medium
 .
   * Team upload
   * Parse root off paths before sanitizing parts (Closes: CVE-2026-29786)
   * Do not write linkpaths through symlinks (Closes: #1129378, CVE-2026-26960)
Checksums-Sha1: 
 5b18c28ca5877b16570c3a343502928dd6b65361 2711 node-tar_6.2.1+ds1+~cs6.1.13-8.dsc
 68ec91964b4966ccab2e06a91d44ed2c641dad04 16284 node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz
Checksums-Sha256: 
 6066b3b366192beda04e2f6e78576ff33c9568f3212f5f7f05c1a85bffeb0352 2711 node-tar_6.2.1+ds1+~cs6.1.13-8.dsc
 0ac6fda2549981787c6a413f8f2fbbdfadc5c71400db4563517681e947ac8d42 16284 node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz
Files: 
 a1f82d3f396ca114398ecad13604f803 2711 javascript optional node-tar_6.2.1+ds1+~cs6.1.13-8.dsc
 282ce324ff3e29659534bea5e4cdcb8e 16284 javascript optional node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=AuNZ
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260308/13ceb456/attachment.sig>