Bug#1034665: bullseye-pu: package node-xml2js/0.2.8-1+deb11u1
Control: tag -1 confirmed
On Wed, Jul 26, 2023 at 08:30:09AM +0400, Yadd wrote:
> Control: tags -1 - moreinfo
>
> On 7/25/23 21:02, Jonathan Wiltshire wrote:
> > Control: tag -1 moreinfo
> >
> > On Fri, Apr 21, 2023 at 11:36:54AM +0400, Yadd wrote:
> > > diff --git a/debian/changelog b/debian/changelog
> > > index 628f69a..106d13b 100644
> > > --- a/debian/changelog
> > > +++ b/debian/changelog
> > > @@ -1,3 +1,10 @@
> > > +node-xml2js (0.2.8-1+deb11u1) bullseye; urgency=medium
> > > +
> > > + * Team upload
> > > + * Add patch to prevent prototype pollution (Closes: #1034148, CVE-2023-0842)
> > > +
> > > + -- Yadd <yadd@debian.org> Fri, 21 Apr 2023 11:33:31 +0400
> > > +
> > > node-xml2js (0.2.8-1) unstable; urgency=low
> > > * Upstream update
> >
> > bullseye has 0.2.8-1.1, please ensure you base the proposed debdiff off
> > that. Remove the moreinfo tag when you are ready for further review.
> >
> > Thanks,
>
> Hi,
>
> here is the new debdiff
Please go ahead.
Thanks,
--
Jonathan Wiltshire jmw@debian.org
Debian Developer http://people.debian.org/~jmw
4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
Reply to: