-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 22:11:25 +0100
Source: nodejs
Binary: libnode-dev libnode115 libnode115-dbgsym nodejs nodejs-dbgsym
Architecture: armel
Version: 20.19.2+dfsg-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Jérémy Lal <kapouer@melix.org>
Description:
 libnode-dev - evented I/O for V8 javascript (development files)
 libnode115 - evented I/O for V8 javascript - runtime library
 nodejs     - evented I/O for V8 javascript - runtime executable
Changes:
 nodejs (20.19.2+dfsg-1+deb13u2) trixie-security; urgency=medium
 .
   * Upstream security patches:
     + CVE-2026-21713: use timing-safe comparison in Web Cryptography HMAC
     + CVE-2026-21717: fix array index hash collision
     + CVE-2026-21710: http: use null prototype for headersDistinct/trailersDistinct
     + CVE-2026-21716: include permission check on lib/fs/promises
     + CVE-2026-21715: add permission check to realpath.native
     + CVE-2026-21714: handle NGHTTP2_ERR_FLOW_CONTROL error code
     + CVE-2026-21637: tls wrap SNICallback invocation in try/catch
   * copyright: add rapidhash from sec/51 patch
Checksums-Sha1:
 777a4fcd45f0620d9bfeeee967acadfdab12565d 536820 libnode-dev_20.19.2+dfsg-1+deb13u2_armel.deb
 da9412af426d713f86303ab0586be12fc7aba503 39093500 libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 0c191be88f227e4eb1f7d4ea829f2e3195b39445 10186528 libnode115_20.19.2+dfsg-1+deb13u2_armel.deb
 f130bb49ea463fc8d37fdf6338cd6144df6d7f3b 3260 nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 7b2fb54031734be1513f36383aeb89f0cc2d1199 10842 nodejs_20.19.2+dfsg-1+deb13u2_armel-buildd.buildinfo
 9c5a55d978350c35cccbc3ce09986630e904307f 353528 nodejs_20.19.2+dfsg-1+deb13u2_armel.deb
Checksums-Sha256:
 623379e1f0fe310530e74a1bc9bceeeef3ea83d0125acea8d9f42874daa9f65b 536820 libnode-dev_20.19.2+dfsg-1+deb13u2_armel.deb
 7bf563ab18eb4085a1c793388b9ffaf29981e9236631389cfe519353e4a0d360 39093500 libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 c0bad4194d5187811ff9143d704ddba0f2cec94b579612f3ba0f03acbc966d9e 10186528 libnode115_20.19.2+dfsg-1+deb13u2_armel.deb
 ef84a254ab4018211c8b7a33dfb25b7220577b671ec0ae79d43248d631f175a1 3260 nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 efa9c233994cbae15bec6c8843514a8e72dbf910d74e7cc4ed1c87cbbaec901b 10842 nodejs_20.19.2+dfsg-1+deb13u2_armel-buildd.buildinfo
 46d026b559d0bb4696d7553492b57f280986aa0e531b0ce9d53b7f10bdd3d69c 353528 nodejs_20.19.2+dfsg-1+deb13u2_armel.deb
Files:
 b55468f949adb75c2c2338b674444fd1 536820 libdevel optional libnode-dev_20.19.2+dfsg-1+deb13u2_armel.deb
 106dff7cf7881c94893030f78c365356 39093500 debug optional libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 7f8ec005e754cf42869d6712538c1a4a 10186528 libs optional libnode115_20.19.2+dfsg-1+deb13u2_armel.deb
 f3cfa76a2f27a041cc71b2144aebc437 3260 debug optional nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_armel.deb
 0b0ede65c3b2e2aa6bee00c226918e4b 10842 javascript optional nodejs_20.19.2+dfsg-1+deb13u2_armel-buildd.buildinfo
 479288028236db397be330ac5ef12280 353528 javascript optional nodejs_20.19.2+dfsg-1+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmnEn4AACgkQLRECdjCZ
Qkc3uQ/8DB4LerJv2zum8nw+/1uiqsxeCnHx5jncOx17uYyelzfMR/vB0SwBC1kQ
MQa99ltzocripaajj7j7JYCtYoJtabsDIhFW3tMHKWaMMmAFDIWN5yvh5vCGGekD
/hMkMPpoBFnz9EQxXB7FOk/bc1tHHaoFUmJ/FZTdpgY/IsPCy5kI577Y47/e6ZxX
ovLtrLTYMPs+HTznsJCItTqeCYnJfkh40xs+GIvmMLv9Z+gd2birh3ukwv7FTml5
NDKwVgCYQlfwjyGXqEgffVNmhCZPTg4VGPmy5d/TzS/Ic19MOi3pgn77Wi4duwhJ
xhWo9KyNzHuKlOkxiOsPNkPfl2FgEMLnXEIxF5Xbl4Qtk4yP1pb4cuuVo5iF9yvJ
4PnQcEzysjJTVjJNXXMdXCqShUE+nEEK5MCL7UUNsTUfa0LWkMRCKEVCH7AqnEwb
zYSD7puk7LQTesA3TLZJnUM7L/Xlevy95cL60JPv8xrMROYV2IBk9d8ra6ILf/6B
0hrHu404dR499JfBL4mpcrzvwGvuxx+QDZbvT8PpV6Bu/6VfezdCrqhdZBpQrt4F
Y2puF38YuvCWrNCLPhLAdBO+0ULKhwbdVosby6I/VT9I9e/y14wCDPDVjWSqu8KP
NLYlmH1oKUOMI1NHBFJ3lmsW8QbgGFYnHxoO+4q90By+vyMY1kA=
=w4dZ
-----END PGP SIGNATURE-----