[Pkg-javascript-devel] node-shell-quote_1.7.4+~1.7.1-1+deb13u2_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 06 Oct 2026 11:29:23 +0200
Source: node-shell-quote
Binary: node-shell-quote
Architecture: source all
Version: 1.7.4+~1.7.1-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd at debian.org>
Description:
 node-shell-quote - quote and parse shell commands
Closes: 1140921 1149713
Changes:
 node-shell-quote (1.7.4+~1.7.1-1+deb13u2) trixie-security; urgency=medium
 .
   * Team upload
   * Reject line terminators in tokens after a comment
     (Closes: #1149713, CVE-2026-102422)
   * Finalize parse tokens in linear time (Closes: #1140921, CVE-2026-13311)
Checksums-Sha1:
 d624fa6b3e79ba505373d3b5b656a464587a97a2 2508 node-shell-quote_1.7.4+~1.7.1-1+deb13u2.dsc
 2d059091214a02c29f003f591032172b2aff77e8 2241 node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz
 526309c375cb6d9dff84f04d6bf6cb21038339db 15359 node-shell-quote_1.7.4+~1.7.1.orig.tar.gz
 0701418069953755f62d07373d3f37791846370a 6836 node-shell-quote_1.7.4+~1.7.1-1+deb13u2.debian.tar.xz
 c9e2ad8ea36fc34a06b53eb01337dc0a63e3a976 15432 node-shell-quote_1.7.4+~1.7.1-1+deb13u2_all.deb
 27d2f749e95eed643e517e57e876d442e1d53c51 15839 node-shell-quote_1.7.4+~1.7.1-1+deb13u2_amd64.buildinfo
Checksums-Sha256:
 4d46dadf65a436b75babf9eacd9c731e4b017e8001c3c96693397478cd906737 2508 node-shell-quote_1.7.4+~1.7.1-1+deb13u2.dsc
 732c849a97ba0778c6bd224b09895b95f7ba0bcdeb41658dfbefbd6fcb48c42d 2241 node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz
 c47d07f375e52ef8c5b27382a9fdc0018e1a50954a3480b13fc96c8bb0314967 15359 node-shell-quote_1.7.4+~1.7.1.orig.tar.gz
 df1f9e73127e331cee3d852080d54ea3c04fe98f00a578eaa3736b1806c6d866 6836 node-shell-quote_1.7.4+~1.7.1-1+deb13u2.debian.tar.xz
 873ff44532e895891919d7868321f87160658e71d6e729d0f16d002037940f3a 15432 node-shell-quote_1.7.4+~1.7.1-1+deb13u2_all.deb
 3058814d9e18f2a2f67c94357876b3bff78599ef7052f09a7123e24bd44f1156 15839 node-shell-quote_1.7.4+~1.7.1-1+deb13u2_amd64.buildinfo
Files:
 9957de293c9084c211dc07b1453f6690 2508 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb13u2.dsc
 c932ae6cdd4e3244131b099713a03457 2241 javascript optional node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz
 7af11564f75bafc25260ad455fb2a0b9 15359 javascript optional node-shell-quote_1.7.4+~1.7.1.orig.tar.gz
 ec0abcb997a15c5de0ba7265ce325c06 6836 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb13u2.debian.tar.xz
 5226927e8759a676d84a405751a68374 15432 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb13u2_all.deb
 010518e6c4b209c2e63f219a02be9d2a 15839 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=wAgI
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261006/be244c8f/attachment.sig>