-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 28 Jul 2025 13:42:40 -0700
Source: node-form-data
Architecture: source
Version: 3.0.0-2+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1109551
Changes:
node-form-data (3.0.0-2+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the Debian LTS team.
* CVE-2025-7783: Prevent an issue where node-form-data used insufficiently
random values to generate boundary markers which could have permitted a
HTTP Parameter Pollution (HPP) vulnerability. (Closes: #1109551)
Checksums-Sha1:
040023edf275f89347ac5b9571325a3ef4d94169 2229 node-form-data_3.0.0-2+deb11u1.dsc
a382d5c25a1262bdf74caa63aca21a198c823e5d 45949 node-form-data_3.0.0.orig.tar.gz
26b7156091e0eac57e2df284b6a5e2f6c8761c9d 9772 node-form-data_3.0.0-2+deb11u1.debian.tar.xz
28941ef0f56850a30c70cba4ca75b5e0943635bd 5648 node-form-data_3.0.0-2+deb11u1_source.buildinfo
Checksums-Sha256:
d4603696a338813e0d97a5df668a59a94ecd5227f887ce35eb0e96835f9fcb48 2229 node-form-data_3.0.0-2+deb11u1.dsc
bef37a9bfefa290114c77a2ac03a924785df4f3bef5680686ca756656f72e216 45949 node-form-data_3.0.0.orig.tar.gz
bafc7057e90a2fd08d34b5fbffd2e274e843577404333cf894d0d7d368fb37e3 9772 node-form-data_3.0.0-2+deb11u1.debian.tar.xz
dc2388f37c465dacf20796e1d688906f98ff5db33fd82f7333b333f437ff5a9b 5648 node-form-data_3.0.0-2+deb11u1_source.buildinfo
Files:
2cc28d35e60235a3f950a2199d99a8f9 2229 javascript optional node-form-data_3.0.0-2+deb11u1.dsc
827bd5b50e902f9a11c74429b05349bf 45949 javascript optional node-form-data_3.0.0.orig.tar.gz
22de64157b3eb41b7699b07aa46bd765 9772 javascript optional node-form-data_3.0.0-2+deb11u1.debian.tar.xz
04c3144a1f9b2148ba32f47b84cd6dd0 5648 javascript optional node-form-data_3.0.0-2+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=C/S1
-----END PGP SIGNATURE-----
Attachment:
pgp6L81VqefrM.pgp
Description: PGP signature