Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Fri, 17 Jan 2020 06:34:25 +0100
Source: node-ecc-jsbn
Architecture: source
Version: 0.2.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
Changed-By: Xavier Guimard
Changes:
Il 16/01/20 20:35, Pirate Praveen ha scritto:
>
>
> On വ്യാ, Jan 16, 2020 at 13:27, Nilesh Patra wrote:
>> Hi,
>> I had been lately seeing discussions in the list regarding requiring
>> transition for nodejs-12 to unstable. I tested all the reverse depends and
>> this is the list of all
Processing commands for cont...@bugs.debian.org:
> close 948095 6.0.3+dfsg-1
Bug #948095 {Done: Xavier } [src:node-kind-of] node-kind-of:
CVE-2019-20149
Ignoring request to alter fixed versions of bug #948095 to the same values
previously set
Bug #948095 {Done: Xavier } [src:node-kind-of]
Processing control commands:
> tag -1 pending
Bug #948095 {Done: Xavier } [src:node-kind-of] node-kind-of:
CVE-2019-20149
Added tag(s) pending.
--
948095: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948095
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--
Your message dated Fri, 17 Jan 2020 07:12:05 +0100
with message-id <5697cb3c-9263-635c-a5d3-570f49967...@debian.org>
and subject line Fixed via 6.0.3+dfsg-1
has caused the Debian Bug report #948095,
regarding node-kind-of: CVE-2019-20149
to be marked as done.
This means that you claim that the
node-ecc-jsbn_0.2.0-2_sourceonly.changes uploaded successfully to localhost
along with the files:
node-ecc-jsbn_0.2.0-2.dsc
node-ecc-jsbn_0.2.0-2.debian.tar.xz
Greetings,
Your Debian queue daemon (running on host usper.debian.org)
--
Pkg-javascript-devel mailing list
Processing commands for cont...@bugs.debian.org:
> fixed 948095 6.0.3+dfsg-1
Bug #948095 [src:node-kind-of] node-kind-of: CVE-2019-20149
Marked as fixed in versions node-kind-of/6.0.3+dfsg-1.
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
948095:
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Fri, 17 Jan 2020 06:10:27 +0100
Source: node-kind-of
Architecture: source
Version: 6.0.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
Changed-By: Xavier Guimard
Changes:
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
Hi,
node-kind-of is vulnerable to CVE-2019-20149: it allows external user
input to overwrite certain internal attributes via a conflicting name.
This little patch fixes this issue.
node-kind-of_6.0.3+dfsg-1_sourceonly.changes uploaded successfully to localhost
along with the files:
node-kind-of_6.0.3+dfsg-1.dsc
node-kind-of_6.0.3+dfsg.orig.tar.xz
node-kind-of_6.0.3+dfsg-1.debian.tar.xz
Greetings,
Your Debian queue daemon (running on host usper.debian.org)
--
FYI: The status of the node-readable-stream source package
in Debian's testing distribution has changed.
Previous version: 2.3.6-1
Current version: 3.4.0-2
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day
FYI: The status of the node-libs-browser source package
in Debian's testing distribution has changed.
Previous version: 2.2.1-1
Current version: 2.2.1-3
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you
FYI: The status of the node-babel source package
in Debian's testing distribution has changed.
Previous version: 6.26.0+dfsg-3
Current version: 6.26.0+repack-2
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a
FYI: The status of the npm source package
in Debian's testing distribution has changed.
Previous version: 5.8.0+ds6-4
Current version: 6.13.4+ds-2
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the node-call-limit source package
in Debian's testing distribution has changed.
Previous version: 1.1.0-1
Current version: 1.1.1-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you
FYI: The status of the node-core-js source package
in Debian's testing distribution has changed.
Previous version: 2.4.1-2
Current version: 3.6.1-2
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the node-cloneable-readable source package
in Debian's testing distribution has changed.
Previous version: 1.0.0-3
Current version: 2.0.1-3
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day
FYI: The status of the node-cli-width source package
in Debian's testing distribution has changed.
Previous version: 2.1.0-1
Current version: 2.2.0-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the node-brace-expansion source package
in Debian's testing distribution has changed.
Previous version: 1.1.8-1
Current version: 1.1.11-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day
FYI: The status of the node-errno source package
in Debian's testing distribution has changed.
Previous version: 0.1.4-1
Current version: 0.1.7-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the node-config-chain source package
in Debian's testing distribution has changed.
Previous version: 1.1.11-1
Current version: 1.1.12-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you
FYI: The status of the node-stream-browserify source package
in Debian's testing distribution has changed.
Previous version: 2.0.2-1
Current version: 2.0.2-3
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day
FYI: The status of the node-domain-browser source package
in Debian's testing distribution has changed.
Previous version: 1.1.7-1
Current version: 1.2.0-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Thu, 16 Jan 2020 22:12:12 +0100
Source: node-bl
Architecture: source
Version: 4.0.0-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Javascript Maintainers
Changed-By: Xavier Guimard
Changes:
node-bl
node-bl_4.0.0-1_sourceonly.changes uploaded successfully to localhost
along with the files:
node-bl_4.0.0-1.dsc
node-bl_4.0.0.orig.tar.gz
node-bl_4.0.0-1.debian.tar.xz
Greetings,
Your Debian queue daemon (running on host usper.debian.org)
--
Pkg-javascript-devel mailing list
node-mongodb_3.5.0+~3.2.7-1_sourceonly.changes uploaded successfully to
localhost
along with the files:
node-mongodb_3.5.0+~3.2.7-1.dsc
node-mongodb_3.5.0+~3.2.7.orig-bson.tar.gz
node-mongodb_3.5.0+~3.2.7.orig-denque.tar.gz
node-mongodb_3.5.0+~3.2.7.orig-memory-pager.tar.gz
On വ്യാ, Jan 16, 2020 at 13:27, Nilesh Patra
wrote:
Hi,
I had been lately seeing discussions in the list regarding requiring
transition for nodejs-12 to unstable. I tested all the reverse
depends and this is the list of all failing reverse-depends[1] and
the repository[2] contains all the
Hi,
I had been lately seeing discussions in the list regarding requiring
transition for nodejs-12 to unstable. I tested all the reverse depends and
this is the list of all failing reverse-depends[1] and the repository[2]
contains all the individual logs(for all reverse-depends) for convenience.
Processing commands for cont...@bugs.debian.org:
> #
> # bts-link upstream status pull for source package src:node-kind-of
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
> # https://bts-link-team.pages.debian.net/bts-link/
> #
> user
#
# bts-link upstream status pull for source package src:node-kind-of
# see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
# https://bts-link-team.pages.debian.net/bts-link/
#
user debian-bts-l...@lists.debian.org
# remote status report for #948095
Processing commands for cont...@bugs.debian.org:
> reassign 935817 debhelper 12.5.3
Bug #935817 {Done: Niels Thykier } [debhelper,meson]
debhelper,meson: meson automatically tries to use ccache, which fails if $HOME
is not writeable
Bug reassigned from package 'debhelper,meson' to 'debhelper'.
Source: node-srs
Version: 0.4.8+dfsg-4
Severity: serious
tags: patch
Hello, looks like node-srs is using a scheduled for removal python binary to
build.
Using python2 works (but the best solution is to port to python3, something I
didn't test)
diff -Nru
32 matches
Mail list logo
