Bug#1009345: bullseye-pu: package node-moment/2.29.1+ds-2+deb11u1

2022-04-11 Thread Yadd
On 12/04/2022 07:42, Salvatore Bonaccorso wrote: Hi, On Tue, Apr 12, 2022 at 06:39:35AM +0200, Yadd wrote: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-moment is vulnerable to path traversal (#1009327, CVE

Bug#1009345: bullseye-pu: package node-moment/2.29.1+ds-2+deb11u1

2022-04-11 Thread Yadd
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-moment is vulnerable to path traversal (#1009327, CVE-2022-24785) [ Impact ] Medium vulnerability [ Tests ] No changes in test [ Risks ] Low risk, patch is trivi

Bug#1008168: bullseye-pu: package node-url-parse/1.5.3-1+deb11u1

2022-04-11 Thread Yadd
On 24/03/2022 15:12, Moritz Mühlenhoff wrote: Am Wed, Mar 23, 2022 at 02:25:26PM +0100 schrieb Yadd: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-url-parse is vulnerable to an authorization Bypass Through U

Processed: Re: Bug#1009298: transition: biojava-live

2022-04-11 Thread Debian Bug Tracking System
Processing control commands: > tags -1 confirmed Bug #1009298 [release.debian.org] transition: biojava-live Added tag(s) confirmed. > forwarded -1 > https://release.debian.org/transitions/html/auto-biojava-live.html Bug #1009298 [release.debian.org] transition: biojava-live Set Bug forwarded-to-a

Bug#1009298: transition: biojava-live

2022-04-11 Thread Sebastian Ramacher
Control: tags -1 confirmed Control: forwarded -1 https://release.debian.org/transitions/html/auto-biojava-live.html On 2022-04-11 09:34:08, Pierre Gruet wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: transition > > Dear Release

Bug#1009298: transition: biojava-live

2022-04-11 Thread Pierre Gruet
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Dear Release team, I would like to request a transition slot for biojava-live. This would be a small transition with 4 reverse-dependencies. The reason is upstream changed the interface