-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 22:11:25 +0100 Source: nodejs Binary: libnode-dev libnode115 libnode115-dbgsym nodejs nodejs-dbgsym Architecture: ppc64el Version: 20.19.2+dfsg-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Jérémy Lal Description: libnode-dev - evented I/O for V8 javascript (development files) libnode115 - evented I/O for V8 javascript - runtime library nodejs - evented I/O for V8 javascript - runtime executable Changes: nodejs (20.19.2+dfsg-1+deb13u2) trixie-security; urgency=medium . * Upstream security patches: + CVE-2026-21713: use timing-safe comparison in Web Cryptography HMAC + CVE-2026-21717: fix array index hash collision + CVE-2026-21710: http: use null prototype for headersDistinct/trailersDistinct + CVE-2026-21716: include permission check on lib/fs/promises + CVE-2026-21715: add permission check to realpath.native + CVE-2026-21714: handle NGHTTP2_ERR_FLOW_CONTROL error code + CVE-2026-21637: tls wrap SNICallback invocation in try/catch * copyright: add rapidhash from sec/51 patch Checksums-Sha1: f8022d146173db136c01bc7e76bc5f61afb059bd 536824 libnode-dev_20.19.2+dfsg-1+deb13u2_ppc64el.deb b00d395936b101ea5714415c75222fd3314a63a8 1038477204 libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb e04b1bbb6f72ba5731e9be6e5f26d5b55f7ec91b 12322996 libnode115_20.19.2+dfsg-1+deb13u2_ppc64el.deb 7c90792587cb7ffd6b5cb16c659a5e2eefcaec1e 82672 nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb a62a48ea08b0a6f8d08abb021c7918932e21b079 10948 nodejs_20.19.2+dfsg-1+deb13u2_ppc64el-buildd.buildinfo 28e4ec289be0b7a0903171a02f77bb82d4475e67 353564 nodejs_20.19.2+dfsg-1+deb13u2_ppc64el.deb Checksums-Sha256: aed970e580376420e715ac1831a25ba6ae9606c28f8b4fd57ddb5ae475680535 536824 libnode-dev_20.19.2+dfsg-1+deb13u2_ppc64el.deb be3ba8b8e6616aba0d5fc30df76ed1bc86dbf556ab691f090ab922b1f42220de 1038477204 libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb b773ba8f63f51189283b1b923863e5e2ac60fc136ba7503de7ac34457ca4dd25 12322996 libnode115_20.19.2+dfsg-1+deb13u2_ppc64el.deb 5cdc3963411c450e32e4864f1f5a874247047c9eac9453661361037fc1c3ee36 82672 nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb e8d95de776e68be785f2c4fff81bd978c0dd5ef108f6ca76f8cc4512f1738450 10948 nodejs_20.19.2+dfsg-1+deb13u2_ppc64el-buildd.buildinfo ebe163390b9d779b61e90cabf221f9b3157b33d3dbaf4e4ea2d332a3aba86899 353564 nodejs_20.19.2+dfsg-1+deb13u2_ppc64el.deb Files: 55f0536e7356b616d63e46f28254fb63 536824 libdevel optional libnode-dev_20.19.2+dfsg-1+deb13u2_ppc64el.deb 058e4390bb55dd304dbe5fb996a8722a 1038477204 debug optional libnode115-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb 96e879133e5efb551bf3770255771038 12322996 libs optional libnode115_20.19.2+dfsg-1+deb13u2_ppc64el.deb 8b989f2d6c1fe350e5ded31c180bf089 82672 debug optional nodejs-dbgsym_20.19.2+dfsg-1+deb13u2_ppc64el.deb 6d96edcafedefa150516641ea474f278 10948 javascript optional nodejs_20.19.2+dfsg-1+deb13u2_ppc64el-buildd.buildinfo 0e2059577f306df695fd0d1eeba9d2c4 353564 javascript optional nodejs_20.19.2+dfsg-1+deb13u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmnEVFwACgkQOrVShFbI MGGt2g//fIine53nE18adCDJxCgWTNYu4Q916xUjTGJAsQhrzIQ7rmUzH3Q+KC/4 pCxzfkDFKjmdagDF235lucVbIvPTtxzsxS5Iv68rciIZ3lBk2+WD3qy8KVZrvHAL Qx4/ikShIgAAmP9j8nNVMtHvcGeacakrFGq6RLT1VfKuk+egYtWtufwXUHQZI3mc sE19M3pFr2XW9IamYi43ek09C6qNZMcPxVjemQH/rV6XlvTglbTmuPhxYhA9Bvd0 7dF5cIz7ILwMEHyWJp6iCgBglAMRljUGgxdpgciFIRJCnlcop4GrNOtlhW3oKLsg h2Lm/PYUOYaGznbQYqdZXdUbWCM67DFRhAcl9g1ai4m8jnGxcKuANYum0DjPk7Y2 GG1HQFMoC5xEu/ihZk3BSPX2P6NegiamyyK52fNm4wFg93rjDkMsCgdiIKHr1vsx PivPB4Ag/h4kzaFmpRQAp7zAEsAgyw+QgYZLVIv6S13ztb9dk29GnZ3qzTUWWr8Y mTEIAsRgJW15qdrV9h+ZHHQCg1HOf8vUzEx3tJUuKs/ut3ghwSep8kt6h3yDEYud 3WYvmWSXkJei2Zb+oPXYdvWMAF4PnLac5NCHHKx/qQ/v6iS1QXnXWCrgj7ofus3k ngEYEVuJ7OGelxll0vjMVzjpQUc3ZtzxMgNxva1oHVcEKFX3/ss= =qvdl -----END PGP SIGNATURE-----