Processed: Re: Bug#960575: buster-pu: package node-dot-prop/4.1.1-1+deb10u2

2020-05-15 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #960575 [release.debian.org] buster-pu: package node-dot-prop/4.1.1-1+deb10u2 Added tag(s) confirmed. -- 960575: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960575 Debian Bug Tracking System Contact ow...@bugs.debian.org with

Bug#960575: buster-pu: package node-dot-prop/4.1.1-1+deb10u2

2020-05-15 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2020-05-14 at 09:45 +0200, Xavier Guimard wrote: > CVE-2020-8116 fix introduced a regression that affects npm (#960283). > This little fix solves the problem. > Hrm, we really should have spotted that sooner. :-( Is there any way we can improve the tests to

Bug#960575: buster-pu: package node-dot-prop/4.1.1-1+deb10u2

2020-05-14 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, CVE-2020-8116 fix introduced a regression that affects npm (#960283). This little fix solves the problem. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index