From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Sun, 14 Sep 2025 22:28:50 +0200   
   Source: node-sha.js   
   Binary: node-sha.js   
   Architecture: source all   
   Version: 2.4.11+~2.4.0-2+deb12u1   
   Distribution: bookworm-security   
   Urgency: medium   
   Maintainer: Debian Javascript Maintainers    
   Changed-By: Yadd    
   Description:   
    node-sha.js - Streamable SHA hashes in pure javascript   
   Closes: 1111769   
   Changes:   
    node-sha.js (2.4.11+~2.4.0-2+deb12u1) bookworm-security; urgency=medium   
    .   
      * Fix improper input validation vulnerability (Closes: #1111769,   
   CVE-2025-9288)   
      * Add dependencies to node-get-intrinsic, node-isarray and no   
   e-is-typed-array   
   Checksums-Sha1:   
    077abf6cd2e72051eb6b16d719c40efc55a238fb 2546 node-sha.js_2.4.1   
   +~2.4.0-2+deb12u1.dsc   
    bce682ef860b40f419d024fa08600c3b8d24bb01 1628 node-sha.js_2.4.1   
   +~2.4.0.orig-types-sha-js.tar.gz   
    32e86049a278857d2242ceb430df84cec2624895 10130 node-sha.js_2.4.   
   1+~2.4.0.orig.tar.gz   
    423086727e34226b982a978b5cf1a79b73e7114b 8356 node-sha.js_2.4.1   
   +~2.4.0-2+deb12u1.debian.tar.xz   
    3e309bbab6ac67780723a0a0a4e8b2c68967d63f 13252 node-sha.js_2.4.   
   1+~2.4.0-2+deb12u1_all.deb   
    ba55cd37160ad7c0137ce4be96f662f33a91cfd8 16191 node-sha.js_2.4.   
   1+~2.4.0-2+deb12u1_amd64.buildinfo   
   Checksums-Sha256:   
    f76100165b8de06cd8124f0b83f66fe8dca908455c9135d982282c800009d740 2546   
   node-sha.js_2.4.11+~2.4.0-2+deb12u1.dsc   
    783c1a296e2c3db1e38c652f0cc9541208aadbcd8fd4e95f53e5f28dbed06eb6 1628   
   node-sha.js_2.4.11+~2.4.0.orig-types-sha-js.tar.gz   
    380bc51652e4bc799d94ecce93448a157c171c786de95ac803b99019d6946182 10130   
   node-sha.js_2.4.11+~2.4.0.orig.tar.gz   
    13c70efe5cc75d5083f72632b586fe077f5f5d1b49d3b644eef46d66e23474f0 8356   
   node-sha.js_2.4.11+~2.4.0-2+deb12u1.debian.tar.xz   
    617019c9d5fb64df612433014707f081e446940fa4c21f5e0009c8f8eec68f78 13252   
   node-sha.js_2.4.11+~2.4.0-2+deb12u1_all.deb   
    d651dcabf48d41238c18753865c90f5ea63687350b78357f9ccbfbe0116cd7cf 16191   
   node-sha.js_2.4.11+~2.4.0-2+deb12u1_amd64.buildinfo   
   Files:   
    edea517c97cc72889e0eab6ddda61e82 2546 javascript optional node-   
   ha.js_2.4.11+~2.4.0-2+deb12u1.dsc   
    7c0e638aae5a41247a8eb1f9ee3fa99b 1628 javascript optional node-   
   ha.js_2.4.11+~2.4.0.orig-types-sha-js.tar.gz   
    e2704a4284649f1209d4a64d2c464d22 10130 javascript optional node   
   sha.js_2.4.11+~2.4.0.orig.tar.gz   
    4462e410bf9873e8e52844750b6f5dfc 8356 javascript optional node-   
   ha.js_2.4.11+~2.4.0-2+deb12u1.debian.tar.xz   
    0a2a9589849c6341ea84a9234ed1239e 13252 javascript optional node   
   sha.js_2.4.11+~2.4.0-2+deb12u1_all.deb   
    c77ac2d1d4c0df462ea0a2a36b43eb75 16191 javascript optional node   
   sha.js_2.4.11+~2.4.0-2+deb12u1_amd64.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmjHJm0ACgkQ9tdMp8mZ   
   7ulCmw/7BEPlAhvGDS/EsFEwGieN4N4XxtP2GgdhsoZYhJLWMixi3CJvCLqjP1xJ   
   lxFI0OW81BY6ozaxvo/YQLzWRKfWmjiPWXOGGZnGrivrWvG1c5WBXmss6J1MKUsg   
   xo2sf4iJgXbtsD+6oAbu2EYiiX5caqZsZWHsZUPteOPmv9sKCSUpseF9STJhtkfs   
   P4K/eDrLrHU0XJG8R5s458wMrmVtcrHt69wabwJEKQ/VQqyjD1sRhpfWJaklxYxP   
   RpIscQMqdFSCkgWglJzPnhybY3V5TS1Gf/GpM4Xj/V6SVp3J+j0+F44NJz2yXzy3   
   00NnURAxXvx8ijU+nj4ceVaSMfg0epKOiyoSaUlU1doB5fOBPw357PDQA0OLzRJN   
   zWJeFbZzkGMJuVINYxh5q1IkEWoJQYr+V5Fxb6nNQEGEj0iX80Retl3NcZ7ge/64   
   4Kmig9ROd9R/kUlEP6otwEnc2P97QSGh8vnsWj1nXj0UepVSC83t1MbPum/sTYh5   
   SOqCUbMlbPo1oj0R7knX67vzQoP2V90HGPGm3fbKMx8Yeu8LFuLF3fwnDuYMInb1   
   09AxDb7e4robDsKsA+qbUTIsxTOwiTVHgc/PeeCcqMnRyVTfbHVA48YWwuJKLdZH   
   +dh1UHJ7aW4WOZXZO5gXg4NILTm3T14TmdLgYIMqCm0BOF+ahJA=   
   =iG+f   
   -----END PGP SIGNATURE-----   
      
      
   --==============V40072151800211307=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaPTmIwAKCRCb9qggYcy5   
   IeImAP9aGpToKr4Y0rk44nUDwJewooHJ5Q0q6PhLWdP5Wg+wGwD8C5u1oUv3qEI1   
   QN35TWworsixXmT3ooPGjGw7eT9jfgQ=Fqkn   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)