Your message dated Sat, 12 Sep 2026 08:05:41 +0000
with message-id <[email protected]>
and subject line Released in 13.7
has caused the Debian Bug report #1141449,
regarding trixie-pu: package
node-lodash/4.17.21+dfsg+~cs8.31.198.20210220-9+deb13u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1141449: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141449
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
User: [email protected]
Usertags: pu
Tags: trixie
X-Debbugs-CC: [email protected]
Severity: normal
Hi,
node-lodash is affected by 3 open CVEs (CVE-2025-13465, CVE-2026-2950,
and CVE-2026-4800). This has been fixed in sid, forky, and bullseye.
Only bookworm and trixie remain, as shown in the tracker:
https://security-tracker.debian.org/tracker/source-package/node-lodash.
Attaching the debdiff for trixie -pu. I'll wait for your ACK before
uploading the package. Let me know if you have any questions or
concerns.
- u
node-lodash-trixie.debdiff
Description: Binary data
--- End Message ---
--- Begin Message ---
Version: 13.7
This update was released as part of 13.7.
--- End Message ---
