• Accepted node-tar-fs 2.1.3-0+deb12u1 (source) into proposed-updates

    From Debian FTP Masters@21:1/5 to All on Wed Jun 11 20:50:03 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 09 Jun 2025 22:02:36 +0300
    Source: node-tar-fs
    Architecture: source
    Version: 2.1.3-0+deb12u1
    Distribution: bookworm
    Urgency: medium
    Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
    Changed-By: Adrian Bunk <bunk@debian.org>
    Closes: 1101501
    Changes:
    node-tar-fs (2.1.3-0+deb12u1) bookworm; urgency=medium
    .
    * Non-maintainer upload.
    * New upstream release.
    - CVE-2024-12905: symlink path traversal (Closes: #1101501)
    - CVE-2025-48387: hardlink path traversal
    Checksums-Sha1:
    282612fc4786eda51c6678bebd0c4d11f01099ff 2202 node-tar-fs_2.1.3-0+deb12u1.dsc
    41b5f9c659d7fa10d0cda24ecae09b97d6b73f4a 7951 node-tar-fs_2.1.3.orig.tar.gz
    6f645238c512bc321c11473b8cd30da490bc4f57 3128 node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz
    Checksums-Sha256:
    f2fb7d9f7f5e50c09e6050865ef08fa91c438778046080cec32c4acaf1036630 2202 node-tar-fs_2.1.3-0+deb12u1.dsc
    061356bce7a39c4b2947f6f406d45179155acfc23edf121f703689768841ad10 7951 node-tar-fs_2.1.3.orig.tar.gz
    b915da7f3e642970a1d0c9f0f4c89a817ae52c33833e66f749b98585779ec04d 3128 node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz
    Files:
    867147942f1bb8603fedf5a1f224c1dc 2202 javascript optional node-tar-fs_2.1.3-0+deb12u1.dsc
    9034827a8b0724931a4262c61395623f 7951 javascript optional node-tar-fs_2.1.3.orig.tar.gz
    1c33a18d17c4a4b61236e87f7561ecc0 3128 javascript optional node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmhIlP0ACgkQiNJCh6LY mLHqbg//T8AG3gBQzVo0dHmigHV+p8QW5GwFPaXbHjeRCScb4ybeJe/ojwI4ZyxB KxfUqFk7odVV+G7VwQjccYzjeyTnGxDVBGPFYcdH+43Z/Ble5tvspQ6O+FFihLx1 5SUwlH4Z5N08M3qpoNFj+uzZv3pfGUlRf/CqRkdu7ubpvLHqsiZUqPwqg8oBm6cR 6MiB4lK0/Dynj33wthCjcs0HU+epjin2d29PGHKV5cJl+OrZI/RjMR1OQHQ36MkG QDPgD/tk4Coyh1ZaFciSyHqL5qiBXbRRNIe6G9wMazyVN6yqYunatkn1yBc63hAM BUfVU9N7wUdtwNQb9OyOgMbpdxu5Q7rXTPKf6J07/myWu1aBWVfNkrj/2ZKg9etz O+PQdH6xBGSDSlK05w9sL9SelXwFVYkyEo1FkWNEo3fuSo3UJBn7GJDUeB6gCFnX BkW+qfgAhy9OpAIttzR0s+49VU5uU1JctL8CDbbiKkYtsYBcDC4ApF4l0ti6BFSe JKSAEnpWuWSZJiiKcA5FvUGTKrSXkz+NiDcrvG5P9jyLBvidOT4f8YuXUw8mA1Ch XjKX6u4NAjbC6+cWUFd2Yg7q0EQxi0RGC39G5FhxT5a82J+ADCtk9+Y4rt8uVLTC Ah3tUhN4QHMkTqJfe7XbK+U8ClAyEthekK5s3+i/zZXWG6kNRO8=
    =2vS0
    -----END PGP SIGNATURE-----


    --==============e34613707563076939=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaEnPMwAKCRCb9qggYcy5 IWXnAP9Dw1YeXnwXLHuAnSEk/ojH2AorRjZcxQwm5ESaK7+1egEA+eqgugh1wlC5 21u9f1txqNngqDR3i0IsTDagnDYmfA8=n+Bf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)